Agentless pull of event logs or log files

Any movement on this?  I'm trialing the product, but it's a deal breaker if there isn't an agentless solution.

It is now on the "What we are working on" page!!!

From that page:

Here's what's on the top of our radar:

• Integrating IP reputation threat feeds, to provide better insight into events generated on the network that may be coming from known "bad actors" (similar to/part ofThreat Intelligence Feed)
  
• Agentless Windows Event Log connectivity (Agentless pull of event logs or log files)

I just updated the idea status to WWWO also. I can't give any ETAs, of course

PS: Just wanted to clarify that initially this is for Windows Event Logs only, remote arbitrary logs or other platforms will still have to be a TBD. A lot of our Linux tools can be syslogged, though, which might be another way to approach that problem, though still requires some changes be made on the Linux end.

I just updated the idea status to WWWO also. I can't give any ETAs, of course

PS: Just wanted to clarify that initially this is for Windows Event Logs only, remote arbitrary logs or other platforms will still have to be a TBD. A lot of our Linux tools can be syslogged, though, which might be another way to approach that problem, though still requires some changes be made on the Linux end.

How about creating a tool that sends data to the LEM.  The agentless pull is a HUGE help, but in addition we could really use a way to get some custom or random log file to send each line in the log to LEM.  What if you guys made an agent/tool/script that we could use to make this happen?

We have a script that does this, but its very rudementary since we have no scripting/programming experts here.

I agree, this is needed.  When I opened the feature request HERE that was one of the things I was hoping to be able to accomplish.

As I have pointed out before; when somebody asks me if I can support a specific log file/source the answer can't ever be "NO"; however, it can be "yes, but...".