Tutorials

• How to add an exclude/include filter

  One of the most powerful aspects of EventSentry is the event filtering capabilities. This tutorial helps you understand different ways to configure these filters.

• Setting up the EventSentry Web Reports

  This tutorial will help you manually install the EventSentry Web Reports. The EventSentry Web Reports help you to view your network information in context. Using the web interface you can trace back to the root of current issues you may be facing, but it also allows you to keep a close eye on the performance trends on your network and anticipate future problems

• Integrating Nessus with EventSentry

  Nessus is a comprehensive open-source vulnerability scanning program. It consists of nessusd, the Nessus daemon (which does the actual scanning), and nessus, the client, which presents the results to the user. Nessus is currently available for Linux, FreeBSD, Solaris, Mac OS X, and Windows.

• Using Logon/Logoff Tracking

  The Logon/Logoff feature in EventSentry can provide you with a great deal of information about user logons. For example, viewing which users logged on using Terminal services or which user logs on to which computer is only a few clicks away.

• Using Filter Timers

  Filter Timers give you the ability to ignore events if they are followed by a specific event within a certain time period. For example, you probably want to be notified when a server goes offline for more than 5 minutes, but it might be OK if the server comes back online after 2 minutes.

• Remote Update Utility

  This tutorial will walk you through the step required to automatically update the configuration every night. We will demonstrate creating a batch script and setting up a Windows Scheduled Tasks.

• Upgrading from v2.7x to the v2.8x

  This tutorial will walk you through the process of updating EventSentry v2.70 to v2.71 (you can also follow this tutorial if you are upgrading to v2.72) and also explain how to update your database (if applicable) using a Microsoft SQL Server 2000 database as an example.

• Consolidating information to the EventSentry database

  This tutorial will show you how to create a database, add the appropriate tables and user accounts, and configure EventSentry to log information. If you setup a MSSQL or MySQL database with the installer, then you will not need to take the following steps, but this information may help grant a greater understanding of EventSentry.

• How to use Service Monitoring

  This tutorial will walk you through the Service Monitoring aspect of EventSentry by setting up an email notification when a specific service changes status.

• Using Filter Text to match specific events

  With the release of EventSentry v2.80 the Filter Rules Test Utility was introduced which makes testing your rules a lot easier. Instead of waiting for the event to occur we can now generate it and see a list of all filters that will match that event. This tutorial uses EventSentry v2.80 but illustrates core concepts of EventSentry that been in the product from the beginning.

• Delimited Log File Monitoring