当来自特定服务的特定事件严重性命中
Windows服务器事件日志时,是否有一种简单的方法来发送电子邮件?这是在Windows Server 2003上,如果它有所作为.
注:对于我的工作场所的生产服务器,我们确实有适当的监控和警报,但我们只需要快速解决此服务的开发.
您可以使用多平台开源软件
OSSEC执行此操作:
OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS (host-based intrusion detection),log monitoring and SIM/SIEM together in a simple,powerful and open source solution.
对于日志监控/警报:
Real-time and Configurable Alerts
OSSEC lets customers configure incidents they want to be alerted on which lets them focus on raising the priority of critical incidents over the regular noise on any system. Integration with smtp,sms and syslog allows customers to be on top of alerts by sending these on to e-mail and handheld devices such as cell phones and pagers.
[…]
Every operating system,application, and device on your network generate logs (events) to let you know what is happening. OSSEC collects,analyzes and correlates these logs to let you know if something wrong is going on (attack,misuse,errors,etc).
这是一个article about OSSEC on 360° Security.
专业的商业替代品:EventTracker(Prism Microssystems):
EventTracker is a complete Security Information and Event Management (SIEM) solution that combines real-time Log Management with powerful Configuration and Change Management in one turnkey software package.
(编辑:ASP站长网)
|