Virus Scan for LogMeister

Roger Thomasson Folks, please make sure that your comment is applicable to the promotion page in question. If it's not, I welcome you to use our forums. Thanks! -r

BitsDuJour Admin - Jul 12 2010 at 1:22am Copy Link

0

Overtkill Question:

Does this utility allow for the searching of firewall logs of older Microsoft Server and Acceleration Server? I am charged by a few organizations with the task of frequently running these logs against a list of about 17 different keywords, all at once. I have a utility that will do this, but its buggy and the author no longer will work on this tool as he has decided to move onto other projects. What I would like it to do is run queries against those words at the same time, generating me a list of everything that contains any one or several of those words, complete with destination links and time stamps. The output formats are a nice feature, but only html is a plus to me, as I have to confirm many of the generated links.

Thanks for offering this utility on Bits!

Jun 9 2012 at 10:17am Copy Link

0

Susan Westlake Well the best way is to grab the trial from our site and give it a go, but here's one possible way of approaching the task you described:

1) Create a feed for each of the logs
2) Create an aggregate feed that takes the data fields you want from each of the 17 individual feeds, and put a filter on the aggregate so that it contains only the entries you're interested in.
3) Create an automatic report in one of the predefined formats or create your own report format using header, footer and repeating item wrappers that you supply.

Many of our existing customers like LogMeister because it's quite easy to string a number of utilities around it to create the soltuion you need, but as I said, the best way to be sure is to try it!

Technology Lighthouse - Jun 9 2012 at 12:01pm Copy Link

0

Fletch Following the help, evaluating the program.

http://www.logmeister.com...BadApp.exe is missing.

Jun 10 2012 at 10:44am Copy Link

0

Susan Westlake Hi Ron,

Sorry about that - the file is now on the server.

Kind Regards,

Susan Westlake
Technology Lighthouse

Technology Lighthouse - Jun 10 2012 at 11:02am Copy Link

0

Fletch RPC unavailable. Testing in a VM. I can monitor an older XP on the network but not my WIn 7 machines - I get the RPC message. I started the Remote Registry service too.

A mixture of NIS and ZoneAlarm between the test VM and the old XP machine - but no tweaks were needed to monitor it.

Jun 10 2012 at 12:28pm Copy Link

0

Susan Westlake For the Win 7 PCs:

1) Make sure "Use Windows Event Log Technology" is set for the Win 7 feeds. You can use plain WMI for Win 7 but it's generally better to use the purpose built technology that Win 7 (and Vista / 2008 Svr) support.

2) Is the default Win 7 firewall active? If so make sure it's configured to allow remote event log management through unmangled.

3) If you're using other firewalls for your Win 7 PCs, then they will also need to be configured to let remote eventlog management through. Port 135 in particular must be opened up.

4) Although you're seeing RPC unavailable rather than access denied, you still may need the UAC registry fix recommended in the Troubleshooting section of LogMeister's Help.

Technology Lighthouse - Jun 10 2012 at 1:34pm Copy Link

0

Fletch Wonder why NIS considers port 135 something that needs to be blocked? If I end up using this I suppose I'd create a rule to allow only local machines to get in to that port.

"Rule \"Default Block EPMAP\" blocked (192.168.1.108, Port dcom(135) ). Inbound TCP connection. ",Detected,No Action Required,Firewall - Activities

I disabled the block for now and the desktop is working, but not the laptop. Unlike the desktop, the NIS log on the laptop does not show any blocking activity on 135, so it's not even getting that far on that machine.

LocalAccountTokenFilterPolicy = 1 is the first thing I do when setting up a Win 7 machine.

Jun 10 2012 at 3:20pm Copy Link

0

Fletch Oops, my bad. Confusion with machine names. My laptop name = the VM machine name, doh. Bet it works when I fix that!

Jun 10 2012 at 3:26pm Copy Link

0

Fletch There needs to be a way to temporarily disable ALL popup messages. When many occur, it's impossible to do anything in the app. Try to do something like delete an object and the confirmation dialog is obscured when the popup appears. Click in the application to reveal the confirmation dialog again - then click OK to confirm the delete. The application hangs for a while. When it returns I start getting 'out of memory' messages.

Jun 10 2012 at 3:39pm Copy Link

0

Fletch Lastly, starting Remote Registry and opening up 135 was what I needed to get both Win 7 machines working.

Jun 10 2012 at 3:52pm Copy Link

0

Susan Westlake Glad you got it working - it's pretty straightforward once you get used to it.

I take your point about the popup notifications; most of our business customers run with the service and use mainly email notifications, but I agree a quick way to halt notifications of a certain type would be useful. It's on our to-do list now.

Technology Lighthouse - Jun 10 2012 at 4:01pm Copy Link

0

Fletch The alert popups are only displayed for a few seconds. If I'm not here AND "quick" to read them, I miss it. Unless I want to log it to a file and manually check that file.

Would be nice if there were some way to visually identify the alerts which arrived that have not been 'viewed'. Like unread mail.

Jun 10 2012 at 4:26pm Copy Link

0

Fletch Several links in the help yield 404, here's one...

Filter rules examples:

http://www.logmeister.com...ault&cat=8

Jun 10 2012 at 4:29pm Copy Link

0

Steven Avery Hi,

Just a note that a program like this, any network program, probably does a bit better during the week when we might play with our network at work.

Incidentally, there are a few programs in the inexpensive event viewing and log viewing realm. If anyone has done some real comparisons (some for network, some like Nirsoft for the 1 PC). If anyone has seen a good comparative review, please share away.

Steven

Jun 10 2012 at 8:42pm Copy Link

0

Susan Westlake Thanks Ron, we'll follow up on the bad links in the Help, and look into the other points you mentioned.

Technology Lighthouse - Jun 11 2012 at 12:27am Copy Link

0

Richard User Will the license key work for an offline machine?
Thank you

Dec 20 2019 at 5:20pm Copy Link

0

Susan Westlake @Richard: Yes - no need for internet access.

Technology Lighthouse - Dec 20 2019 at 8:16pm Copy Link

0

William Henry Is this only for internal applications or can we see if external users (HACKERS) made internal applications (HACKING)?

Apr 24 2020 at 8:08am Copy Link

0

Susan Westlake @William Henry: It'll collect just about anything that's output to a log. If you're focus is on hacking attacks, just make sure you're logging the appropriate events and you've set up LogMeister to collect and flag those events.

Technology Lighthouse - Apr 24 2020 at 9:04am Copy Link

0

Dunking Just wanted to check on the licensing. Suppose I had logmeister installed on a server to monitor router intrusion logs, and presumably that would be outputting anything of interest to another log or on-screen popup. But periodically I might want to run an ad-hoc filter manually to catch things falling through gaps, or just to check something out. That would mean running logmeister on my PC.

What's the license count needed for that scenario? It looks to me like I'd need two licenses (server and PC) even though it's just me looking at the same logs.

Apr 26 2020 at 4:33am Copy Link

0

Paul Can Logmeister be used indefinitely with a license?

Apr 26 2020 at 5:23am Copy Link

0

Susan Westlake @Tom: Yes that's right. There's a subscription option for priority support, but the license itself never expires.

Technology Lighthouse - Apr 26 2020 at 7:19am Copy Link

0

Susan Westlake @Dunking: Yes technically that would require two licenses, but in the case you've described we'd have no problem with you just having a single license.

Technology Lighthouse - Apr 26 2020 at 7:21am Copy Link

0

Dunking @Susan, Thanks very much for that info :)

Apr 26 2020 at 7:28am Copy Link

0

Gr3gw Hi,

I've just installed the trial version but I have a problem. My machine is 32-bit, Win 7. The error is Service installed but not running. I checked the help file: check password. It hasn't helped.

Any suggestions?

Jul 11 2020 at 5:45am Copy Link

0

Susan Westlake @Gr3gw: The first thing to check is whether the service is actually running or not; use the Windows Services control panel applet to check this. If the service isn't running, try to start it. Failure to start is usually because an incorrect account / password combination has been set for service startup. If the service is running but LogMeister is saying that it can't see it, it's possible that an overzealous software firewall or similar protection agent is blocking comms between the two.

Technology Lighthouse - Jul 11 2020 at 6:54am Copy Link

1

Gr3gw Susan, Thanks for that clear response. I've tried a few things and I think I have something seriously wrong with my computer in the area of Services, dependencies and Windows Maintenance Instrumentation. I'll continue trying but I will use the Technology Lighthouse help desk for further assistance.

Thanks for your help.

Jul 12 2020 at 1:48am Copy Link

0

Stephen Sieloff can this tool monitor and parse MS IIS extended format or Apache web logs generated as visits occur on web sites?

Jul 12 2020 at 10:24am Copy Link

0

Susan Westlake @Stephen: LogMeister can parse text logs in those formats, providing of course it has read access to those files.

Technology Lighthouse - Jul 12 2020 at 1:44pm Copy Link

0

Stephen Sieloff I tried repeatedly to order yesterday but could not through BDJ ... now price is back to full price ... not sure what happened but not happy ...

Jul 13 2020 at 5:15am Copy Link

0

Susan Westlake @Stephen: Sorry about that - I'm not sure what happened there; no other reports of buying problems. I don't know if BDJ could help you get another try at purchasing through the offer?

Technology Lighthouse - Jul 13 2020 at 9:32am Copy Link

0

Rohs can logmeister parse xml files into one of its feeds?

Sep 18 2021 at 6:56am Copy Link

0

Susan Westlake @Rohs: Yes - just choose the XML feed type when creating a new log feed.

Technology Lighthouse - Sep 18 2021 at 10:50am Copy Link

0

Rohs can a feed be created from xml files that are produced daily. A separate xml file is placed in a folder based on the year, month, date it was created. Is it possible to have those separate files parsed into a single feed?

Sep 19 2021 at 7:15am Copy Link

0

Susan Westlake @Rohs: Yes, the feed can be drawn from multiple files as you've described.
Create a new feed for xml files, and while on the first "Log File(s)" of the wizard, tap the F1 key to bring up the help file. Scroll down to the "Source the feed from more than one file" and read from there. All you've got to do is give LogMeister the correct spec to recognize candidate files, and it will automatically handle parsing them in the correct order, and capturing new files as they appear in the directory.

Technology Lighthouse - Sep 19 2021 at 1:29pm Copy Link

0

Virus Scan for LogMeister

Log Monitoring and Notification

Download Virus Scan - LogMeister

Website Malware/Phishing Scan - Technology Lighthouse

Website 100% Clean Badges

What are people saying about LogMeister