Snare Windows monitor log file

Asked By 60 points N/A Posted on -
qa-featured

Hi Guys,

I am using snare to send window log files to the vault. It's getting too slow while sending snare windows monitor log file to the vault. My computer is damn slow during this process . Help me to get rid of this. Waiting for your replays.

Thanks, Matthew D Martinez

SHARE
Answered By 0 points N/A #172263

Snare Windows monitor log file

qa-featured

Hello,

The process of sending windows log file to the vault through snare can be very slow if your system memory is low or the file memory is high.

You can do the following steps:

1) Check for running snare plugin, if any.

2) Check /etc/ossim/agent/plugins/snare.cfg and see if system is pointing at /var/log/syslog. 

3) Check [HKEY_LOCAL_MACHINE/SOFTWARE/InterSect Alliance/AuditService/Network/Destination].   

4) Check logfiles (grep -i mswineventlog /var/log/ossim/*).

Hope this helps

Login/Register to Answer

Related Questions