Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Windows Event Log

Greetings,

I'm new to Solarwinds and APM, so please forgive my stupidity if this question has been posed before.

I'm looking for a way to log specific Active Directory Events from the Security Event Log. I don't want an alert to be sent, I don't want to show something down if one of these events is found. I only want them to be logged so lookups can be performed in the event that forensic analysis needs to be done. Is there a way to do this? If so, how? I thought APM would be the best place to start. If I'm in the wrong forum, please let me know, so I can address the correct forum.

Thanks in advance for any assistance!

Troy

Find more posts tagged with

Accepted answers

aLTeReGo

The Syslog server is built into APM and you can download the Event Log Forwarder for Windows through your customer portal as mentioned above.

All comments

sean.martinez

If you only want to log the information and not have a component show as down or Alert when these come in, we do have the Log Forwarder for Windows which will send the messages to a Syslog Server.

Log Forwarder for Windows can be installed on your Windows servers and will forward Windows event log messages to your Orion Syslog Server. This supports Windows Vista and Windows 2008, filtering of events before forwarding, and a silent MSI installer for remote software distribution.

This component is located in your Customer Portal under Additional Components> Download Orion NPM Components> Log Forwarder for Windows

FormerMember

Thanks for the information Sean. Do you know where documentation on setting this all up is located. I'm checking with our Enterprise Administrator to see if we already have a syslog server. I'm interested in this event forwarding, but have been unable to find much in the lines of documentation.

aLTeReGo

The Syslog server is built into APM and you can download the Event Log Forwarder for Windows through your customer portal as mentioned above.