RE: Querying logs

  • From: "josephk" <josephk@xxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 17 Apr 2005 01:46:35 -0700

Hi Greg,
As with any SQL logging... With reporting services you can be notified.
Also, with notification services you can be notified.  And with triggers
you
Can be notified.  Once you have the criteria setup that you want to
monitor for it is a breeze to send log notices to any email address or
group that you specify.

Joseph



-----Original Message-----
From: Greg Mulholland [mailto:greg@xxxxxxxxxxxxxx] 
Sent: Friday, April 15, 2005 12:49 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Querying logs

http://www.ISAserver.org


Im looking for something that allows me to be alerted when I get a scan
or connection fail/attempt from a particular ip (one I would like to
specify). 

I would like to be able to do it through the alerts stuff but it doesn't
allow it. I have thought of logging to a database and writing a query
that pulls that info and mails me when it happens, but that is somewhere
I will only go if I really need to.. 

I'm eyeing Jim here with the possibility that a script can do it, but im
not sure.. 

Any suggestions..

G

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
josephk@xxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



Other related posts: