RE: Log Files

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 5 Jan 2004 15:05:46 -0800

hee-hee...

Don't forget to glump it all together behind a nice hta package!
;-)

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message ----- 
From: "cismic" <cismic@xxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, January 05, 2004 14:32
Subject: [isalist] RE: Log Files


http://www.ISAserver.org

<GRIN> Yup.  All, done just haven't sent.  You know when you get the html
help version 1.3 then start to use that to at least add some basic help for
the scripts and then try and create a mini-setup program etc.

I will send them to William first for his test!

Joseph
----- Original Message ----- 
From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, January 05, 2004 5:55 AM
Subject: [isalist] RE: Log Files


> http://www.ISAserver.org
>
> Those are still the originals.
> It seems that Joe is as quick with his code as I am with mine.  <G>
>
>   Jim Harrison
>   MCP(NT4, W2K), A+, Network+, PCG
>   http://isaserver.org/Jim_Harrison/
>   http://isatools.org
>   Read the help / books / articles!
>
>
> On Mon, 5 Jan 2004 10:12:08 +0200
>  "William Robertson" <robertson.william@xxxxxxxxxxxxxx> wrote:
> http://www.ISAserver.org
>
> <dancing a jig>
>
> Woohoo!!!! Shebang!!!! Yeah Baby!!!
>
> </dancing a jig>
>
>
>
> Thanks Joseph. Just got back from 3 weeks leave and your e-mail was number
> 1322 in the list and you have just made my day!!!!
>
>
>
> One small thing though.. Jim's website only has the following
>
>
> Web <http://isatools.org/webimport.zip>  Import Tool
>
> 03/05/02
>
> 1.0
>
> Joseph Kravis
> <mailto:cismic@xxxxxxx?subject=Web%20Log%20SQL%20Import%20Tools>
>
> SQL and VBScript to combine ISA and IIS web logs into a SQL DB
>
>
>
> Seems a little old to me.? It also only contains 3 scripts. Am I missing
> something?
>
> I also cannot yet access your website. Is it up yet?
>
>
>
> Cheers
>
> William R.
>
>
>
>
>
>
>
> -----Original Message-----
> From: cismic [mailto:cismic@xxxxxxx]
> Sent: 17 December 2003 23:07 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Log Files
> Sensitivity: Confidential
>
>
>
> http://www.ISAserver.org
>
> Hi All,
>
>
>
> Log files are not only important to identifying visits to a site but to
help
> identify weather or not you have malicious activity going on.
>
> I'm not a firm believer in writing directly to an ODBC db source from
within
> ISA and have created scripts to assist me with
>
> importing scripts into my db.  I've been working on these tasks for 2
years
> now.  Learning a lot about ISA in the process.
>
>
>
> Script 1:  Moves the log files to another location daily that's if you
> haven't setup a location different then the defaults and
>
>                set them up to use appropriate security access.
>
>
>
> Script 2:  Imports the Web Proxy Logs
>
>
>
> Script 3:  Imports the Firewall Logs
>
>
>
> Script 4:  Imports the packet filter logs
>
>
>
> Script 5:  Process the event logs,( System, Security and Application) then
> imports into the Db
>
>
>
> Script 6:  Imports Exchange server logs
>
>
>
> Script 7: Imports FTP Logs
>
>
>
> Script 8: Imports RRAS information
>
>
>
> Ok, you say, where are these wonderful scripts??  Well, I will send them
To
> Jim Harrison for posting on his site on Christmas Eve
>
> at least that's what William would like for Christmas.  And they will be
> available on my site http://www.stat-sphere.com after I get the rewrite
and
>
> new graphics done before the end of the year.  I have my hands full!
>
>
>
> Scripts by the way is just half the battle.  I have SQL functions that
parse
> the data into daily, weekly, monthly and yearly process.
>
> Hits by browser, country, user agents etc.  If any of your are running IIS
> 5.0 or IIS 6.0, I plan on releasing a version of
http://www.stat-sphere.com
>
> code where you can plug in the various modules that I've been working on
the
> past 2 years.
>
>
>
> Thank you,
>
>
>
> Joseph
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> robertson.william@xxxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
> ---------------------------------------------------------------------
> Everything in this e-mail and attachments relating to the official
> business of Columbus Stainless is proprietary to the company. It is
> confidential, legally privileged and protected by law. Columbus
> Stainless does not own and endorse any other content. Views and
> opinions are those of the sender unless clearly stated as being that
> of Columbus Stainless. The person addressed in the e-mail is the sole
> authorised recipient.  Please notify the sender immediately if it has
> unintentionally reached you and do not read, disclose or use the
> content in any way. Whilst all reasonable steps are taken to ensure
> the accuracy and integrity of information and data transmitted
> electronically and to preserve the confidentiality thereof, no
> liability or responsibility whatsoever is accepted if information or
> data is,for whatever reason, corrupted or does not reach its intended
> destination.
> ---------------------------------------------------------------------
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: