Log Viewer Help

[Dave]

Hi,

Lately I'm trying to go through all my log events and see who logged in and
what they did on our terminal server.

This is very tedious and usually I end up giving up and convincing myself
that nothing malicious happened.

Is there a third party log viewer that organizes all the events in groups
and show events for each login?

Thanks!!!
Dave

 

[HG]

You can try EventComb

www.systools.com

Good Luck

GX

 

[James Williams]

I think you may be able to get a similar function out of GFI's Security
Event Log Monitor (SELM). I haven't used it a ton, but the guys I work
with swear by it.

(j)
James

 

[Dave]

Thanks James,

Doesn't look like what I want, but I'll investigate it more and see if can
help.

 

[Dave]

Oops,

I meant the earlier message for HG's post. Actually your link looks like
it's close to what I want. I'm not sure if what I want can even be done.
I"ll check out the trial version and see if I like it.

Thanks!!!

 

[Dave]

Thanks HG,

Doesn't look like what I want, but I'll investigate it more and see if can
help.

Dave

 

[James Williams]

Just give me a shout if you have any questions on it. I may not know
the answer, but I'm pretty sure I have a friend who will.

(j)
James

 

[HG]

True Guys,

GFI SELM is a pretty good tool. I've use with another product from CA called
eTrust Audit, SELM is a little bit easier to work with and you can actually
use it free for 1 server and 3 workstations (I think that's the latest
version)

It will give you reports based on native event ID's and you don;t need an
agent for it...you can call different machines and assign the audit policy
right from SELM however, one thing that I didnt see with SELM was the
ability to create different audit groups, I mean that you don;t want to
audit the same stuff on a member server, a domain controller and
workstations...