Networking

This section contains guides on collecting logs from network devices and applications such as firewalls, routers, and directory services.

Cisco

Microsoft Active Directory A guide to collecting Microsoft AD security logs.
Microsoft Routing and Remote Access Service A guide to collecting different types of Microsoft RRAS logs.
Microsoft System Center Configuration Manager A guide to collecting Microsoft SCCM server and client logs.
Microsoft System Center Endpoint Protection Collect Microsoft SCP anti-virus and anti-malware logs.
Microsoft System Center Operations Manager Collect Microsoft SCOM administrative and alert logs.
Windows Firewall A guide to collecting Windows Firewall security and audit logs.
Windows Server Failover Clustering A guide to collecting different types of WSFC logs.

Brocade switches A guide to enabling and collecting logs from Brocade switches.
Check Point Collect logs from Check Point devices over the OPSEC LEA protocol.
F5 BIG-IP Collect syslog messages or SNMP traps from F5 BIG-IP appliances.
FreeRADIUS A guide to collecting FreeRADIUS authentication and accounting logs.
HP ProCurve Collect syslog messages from HP ProCurve switches over TCP or UDP.
Nagios Log Server A guide to forwarding logs to Nagios Log Server.
Nessus Vulnerability Scanner Collect and parse Nessus scan results with NXLog Agent.
Symantec Endpoint Protection Collect logs from Symantec Endpoint Protection’s embedded or MSSQL database.
Trellix ePolicy Orchestrator Collect Trellix ePolicy Orchestrator security, audit, and DLP logs.