How to track Security logs which could be threat to security

[sasachin3]

I want to tracks all those log who could be threat to the security
also if such log generated how i can get an alert for the same ?

[sicarie]

Across how many systems that use which OS's?

[sasachin3]

Want to track 25 system with windows server 2003 as my OS

[sicarie]

Sure - so best practice is two-fold. You want to maintain the logs on the system, and also replicate/collect them on another system. Fortunately, there are several free utilities out there to do this.

I would recommend looking at the Nagios package. However if that does not do what you want, two popular sites established to share free software are sourceforge.net and freshmeat.net.

[sasachin3]

I want to track all 25 computers through a single system and maintain and collect log on that system only.
Does these tool able to generate report, schedule report and set alerts for critical events?

[sicarie]

Did Nagios fulfill your requirements? You're not being at all specific about what exactly you're trying to do, so you'll need to do the research on your own.

The other two links are sites that will allow you to search that similar software, so let us know what you picked and why!

[sasachin3]

I have searched by my own and found these solution which could be suitable for our need
Can you help me out in choosing the best one among them
1. Log & Event Manager by Solarwind
2. Lepide Event Log Manager
3. EventLog Analyzer By ManageEngine

[sicarie]

Of those options I'd recommend the Lepide as they have a free edition, however I'd suggest looking through those sites I posted earlier a bit more carefully as they are free of the constraints of the programs you posted, and can do the same things.

[sasachin3]

Thanks for your recommendation!
I have downloaded the freeware version of Lepide Event Log Manager; the sales guys offer us to download its 15 days full functional trial of its full version
I am testing this tool and also give you an update with my finding soon

[sicarie]

I would also recommend not purchasing one of those applications - Lepide received my recommendation as they have a free version that has most features. I would highly recommend - if you are considering purchasing one - looking through Sourceforge and Freshmeat more extensively as they have free versions that do most of these things.

[sasachin3]

Hi Sicarie
I follow your suggestion and go for the freeware version of Lepide as i told you earlier. As you know every freeware version having some limitation and so the Lepide have, Enterprise version is pretty fine i have testing it in our environment and it is capable of tracking all security logs through out the environment

[sicarie]

sasachin3, yes - all software has limitations, however I'd be INCREDIBLY surprised if some of the larger open source projects were more limited than Lepide. If you are comfortable with Lepide, that's great - you should use it, however for others viewing this thread they should know there are many other options available to them at no cost and with a much better licensing structure.

[sasachin3]

sorry if you misunderstood with my words, I am not saying that open source software having limitation even many other paid software having limitation in their freeware version so as for Lepide as well.
Definitely there are many option for this