Windows Event Log Monitor Retention

Is it possible to pull all the events from a server and have them stored in the database but only display to the Orion web console certain errors and warnings? If not is there any workaround that I could put in place?

We are currently running SAM 5.2

Regards

Find more posts tagged with

sam

lem12345

Database

event

Accepted answers

All comments

aLTeReGo

Honestly the best possible solution would be to use our free Log Forwarder for Windows to forward all events to Orion. You can then chose to alert on your Windows Event Logs from within the Syslog Alert Engine. Optionally you could also use the Windows Event Log Monitor in SAM to bubble up just those events you're primarily concerned about.

FormerMember

We were trying to stay away from Syslog because of the formatting issues with the windows event logs. The Windows Event log monitor in SAM is nice but we can't retain all the events in the database to meet security compliance.

aLTeReGo

I recommend you take a look at our Log & Event Manager. It has been purpose built from the ground up to collect and report on log and event data en masse for auditing, reporting, alerting, and compliance purposes.

Deepthi

Hi,

How many days can we retain the Event logs for WIndows event Log monitor? Can we increase the limit?

Thanks,

Deepthi