This chapter describes how to install and configure the syslog-ng Agent for Windows application on Microsoft Windows hosts.
![]() |
Note |
|---|---|
This chapter applies to version 2.1 of the syslog-ng Agent for Windows application. The documentation of the current version (2.2 and later) is available at Chapter 5, Collecting logs from Windows hosts. |
The syslog-ng Agent for Windows is a log collector and forwarder application for the Microsoft Windows platform. It collects the log messages of the Windows-based host and forwards them to a syslog-ng server using regular or TLS-encrypted TCP connections.
The features and restrictions of the syslog-ng agent are summarized below:
Reads messages from eventlog groups and log files.
Transfers log messages using TCP.
Supports TLS encryption.
Authenticates the server using X.509 certificates. Mutual authentication is also supported.
The format of eventlog messages can be customized using macros.
The syslog-ng agent supports the following operating systems:
Microsoft Windows Server 2003
Microsoft Windows XP
Microsoft Windows Vista
© 2007-2008 BalaBit IT Security
Please send your comments or documentation bugs to: documentation@balabit.com