I have Eventlog Analyzer 7.2.2 installed on a Windows XP sp3 PC (Dell Optiplex 980)
I have Red Hat Enterprise Linux 5.7 installed on a Dell Optiplex 990 PC.
I have a 4 port Linksys router setup so that the 2 PCs can talk.
I have a RHEL 5.7 Samba connection setup which allows the 2 PCs to share folders and files.
I have to login the RHEL 5.7 PC from Windows XP PC as root
I can list the files and folders on the RHEL 5.7 PC in Windows Explorer
I cannot generate my first Syslog report or import Syslog data into Eventlog Analyzer 7.2.2.
The import Log File screen fails silently after entering the ip number of the RHEL 5.7 PC and
selecting /var/log/audit/audit.log or selecting the messages file. I can see the log files to
choose in the drop down window so my root account and password must have worked.
Also when I try to setup a log collector using the IP # of RHEL 5.7 PC and using port 514, I receieve
no data packets. I am thinking that some kind of software has to send it via port 514 to the
Eventlog Analyzer 7.2.2 on Windows XP sp3 PC from the RHEL 5.7 PC.
I don't know what software to setup to do that.
So I am stuck and can't move forward analyzing audit logs.
coldrunner