sawmill supports parsing and analysis of windows events. See
http://www.sawmill.net/formats/Windows_Event.html
You can download the demo and see if it meets your needs.
saqib
http://www.full-disk-encryption.net
On 18 Dec 2006 14:15:09 -0000, AdamCivic@gmail.com <AdamCivic@gmail.com> wrote:
Good Afternoon,
A long time fan of this list. First question.
I have a windows 2003 sp1 printer server. I want to audit printing events, get
a persons logon id, amount of pages printed etc.
The events are currently being audited in the system portion of the event log.
Which is fine and dandy, but my manager wants a pretty report not event logs. I
tried to google the solution, but there are tons of print monitoring software
out there, that is not what I need.
Does anyone know of any software or script where I decrypt the print log into a
nice excel spreadsheet where I can manipulate the data and hand it off to my manager. I
just need software to "decrypt" the logs. I do not want to install
some 3rd party monitoring software, which most of them include their own services, etc.
(especially if it is already being logged by window)
Much thanks guys in advance,
Adam
ps- sorry if this is the wrong place to post. But auditing is security. :)
---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher
Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.
http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------
--
Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net
