Thanks Ruben.... <div class="gmail_quote">On Thu, Nov 13, 2008 at 3:28 PM, Ruben Laban <<a href="mailto:r.laban@ism.nl">r.laban@ism.nl</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div class="Ih2E3d">On Thursday 13 November 2008 at 03:09 (CET), ahsiangsiang wrote: > I looking for a central audit event collection, analysis, reporting system > for Linux, Unix and Windows based box. Snare server by InterSect Alliance > look to solve my problem but it a commercial product. > > Anyone can give me a helpful hand? </div>We use (nt)syslog + sec for that. All *nix and windows machines log to a central logging host (linux box with syslogd -r running). The log files of this central host is being filtered by sec and mailed to the sysadmins. <a href="http://ntsyslog.sourceforge.net/" target="_blank">http://ntsyslog.sourceforge.net/</a> <a href="http://kodu.neti.ee/%7Eristo/sec/" target="_blank">http://kodu.neti.ee/~risto/sec/</a> -- Regards, Ruben -- ubuntu-server mailing list <a href="mailto:ubuntu-server@lists.ubuntu.com">ubuntu-server@lists.ubuntu.com</a> <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-server" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-server</a> More info: <a href="https://wiki.ubuntu.com/ServerTeam" target="_blank">https://wiki.ubuntu.com/ServerTeam</a> </blockquote></div> -- i'm Soon Siang, Shio a Linux Toy Player [please ping me at:] <a href="mailto:ahsiangsiang@gmail.com">ahsiangsiang@gmail.com</a> [also at:] +6012-488-3692 ------------------------------------------------------------------------------------------------ Promoting: WiKID Two-factor authentication, without the hassle factor DSPAM - Just go ahead send me viagra Ubuntu JeOS "Juicy" - Just Enough Operating System Postfix - a Wietse Venema's mailer and *please AVOID sending me Word or PowerPoint attachments. <a href="http://www.gnu.org/philosophy/no-word-attachments.html">http://www.gnu.org/philosophy/no-word-attachments.html</a> Before printing, please consider the environment. Be GREEN!