[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [ISSForum] problem with system scanner log file



The logevent utility logs to one of the system eventlog files.
the /f option is basically a free text field that will get logged
to the event log, but it is normally used to contain the name
of the policy that triggered the alert.

See the System Scanner Users Guide Page 53 


Ross Wakelin
Principal Technical Consultant
Gen-i Limited

A Level 1, Charles Luney House, 250 Oxford Terrace, Christchurch, New
Zealand
T +64 3 353 0800
F +64 3 379 5678
M +64 275 334 380 
E ross.wakelin@xxxxxxxxxxx
W www.gen-i.co.nz



-----Original Message-----
From: issforum-bounces@xxxxxxx [mailto:issforum-bounces@xxxxxxx] On Behalf
Of dawne
Sent: Friday, April 15, 2005 5:42 PM
To: issforum@xxxxxxx
Subject: [ISSForum] problem with system scanner log file

hey there!
using system scanner 4.2.5 console and 4.2 agents. When I do a scheduled
scan, I want to log a message on a specified computer. this is the command i
used :
logevent /i I /d com1 /f "$file" /m "scheduled scan started"
 
tried to change "$file" to a local directory "D:\...." because at first i
assumed that the file will automatically be logged in the console log file,
however it was not. Anyway, no log was logged in the D:\..... directory
either! 
 
why so? 
 
thanks!

 Yahoo! Messenger
- Log on with your mobile phone!
_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

############################################################################
##################################
This e-mail message has been scanned for Viruses and Content and cleared by
NetIQ MailMarshal at Gen-i Limited 
############################################################################
##################################

#############################################################################
This communication, including any attachments, is confidential.
If you are not the intended recipient, you should not read it - 
please contact me immediately, destroy it, and do not copy or 
use any part of this communication or disclose anything about it.
Thank You.

Please note that this communication does not designate an information system
for the purposes of the NZ Electronic Transactions Act 2002.

This email was scanned and cleared by NetIQ MailMarshal at Gen-i Limited.
#############################################################################
_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.