Comments on: howto://Install and Configure Snare Agent for Windows http://retrohack.com/howtoinstall-and-configure-snare-agent-for-windows/ lest the tubes become overfull Wed, 08 Feb 2012 15:03:00 +0000 hourly 1 http://wordpress.org/?v= By: Ed Fisherhttp://retrohack.com/howtoinstall-and-configure-snare-agent-for-windows/comment-page-1/#comment-363 Ed Fisher Thu, 01 Apr 2010 15:37:17 +0000 http://retrohack.com/howtoinstall-and-configure-snare-agent-for-windows/#comment-363 Hi Felix, You make a great point, thanks for the comment. If the foot print is the same or less on the server that would be much better, and something I will have to look into. Snare has been around a while, and the client orgs I've seen using it were already comfortable with syslog, so it seemed to be a natural progression, but the splunk> forwarder does make for a better solution and can grab a lot more from the server than just event logs. I guess we all know what I'll be trying next! Cheers, Ed Hi Felix,
You make a great point, thanks for the comment. If the foot print is the same or less on the server that would be much better, and something I will have to look into. Snare has been around a while, and the client orgs I’ve seen using it were already comfortable with syslog, so it seemed to be a natural progression, but the splunk> forwarder does make for a better solution and can grab a lot more from the server than just event logs. I guess we all know what I’ll be trying next!
Cheers,
Ed

]]> By: felixhttp://retrohack.com/howtoinstall-and-configure-snare-agent-for-windows/comment-page-1/#comment-362 felix Thu, 01 Apr 2010 15:27:07 +0000 http://retrohack.com/howtoinstall-and-configure-snare-agent-for-windows/#comment-362 Why would you convert everything to syslog when you can just use the Splunk light forwarder to forward the event logs and have them indexed nicely? Think PCI and HIPPA compliant log aggregation and event signing. Why would you convert everything to syslog when you can just use the Splunk light forwarder to forward the event logs and have them indexed nicely? Think PCI and HIPPA compliant log aggregation and event signing.

]]>