This chapter describes how to install and configure the syslog-ng agent on Microsoft Windows hosts.
The syslog-ng agent for Windows is a log collector and forwarder application for the Microsoft Windows platform. It collects the log messages of the Windows-based host and forwards them to a syslog-ng server using regular or TLS-encrypted TCP connections.
The features and restrictions of the syslog-ng agent are summarized below:
Reads messages from eventlog groups and log files.
Transfers log messages using TCP.
Supports TLS encryption.
Authenticates the server using X.509 certificates. Mutual authentication is also supported.
The format of eventlog messages can be customized using macros.
The syslog-ng agent supports the following operating systems:
Microsoft Windows Server 2003
Microsoft Windows XP
Microsoft Windows 2000 Server
Microsoft Windows 2000
Microsoft Windows Vista
© 2007 BalaBit IT Security
Please send your comments or documentation bugs to: documentation@balabit.com