Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Windows Event Log Forwarder

I'm using the Windows Event Log Forwarder on a server and I'm having an issue where the syslogs are being sent out garbled. A Ethereal capture shows that all syslogs sent from this one particular server are being sent out, but the messages are garbled (it's as though they are encrypted). Is anyone else using this unsupported product and having the same issue?

Find more posts tagged with

Accepted answers

All comments

RyanJett

The Windows Event Log Forwarder is an add-on for Orion only. The Syslog messages are designed to be sent to an Orion Syslog Server. Because the Syslog messages are scrambled, point the Windows Event Log Forwarder to the Orion server and you should be able to read the messages using the Orion Syslog Viewer without any problems.

Ryan Jett
SolarWinds.Net
918-307-8100

lohelle

I use SNARE from Intersect Alliance to forward event log's to the syslog server. You can filter which messages to forward by TYPE and contents etc..

And it's freeware! Really worth a try!

bleearg13

quote:Originally posted by RyanJett

The Windows Event Log Forwarder is an add-on for Orion only. The Syslog messages are designed to be sent to an Orion Syslog Server. Because the Syslog messages are scrambled, point the Windows Event Log Forwarder to the Orion server and you should be able to read the messages using the Orion Syslog Viewer without any problems.

Thanks, Ryan, but that is what I'm doing. I did a packet capture on other servers which are running the Event Log Forwarder and the packets are not garbled at all.

EDIT: Basically, the Orion server sees the message come in, but the message does not ever make it into the Syslog Viewer.