Multiple WebSites (Full Version)

All Forums >> [Network Security] >> GFI EventsManager



Message


kiddx -> Multiple WebSites (21.Apr.2008 2:57:45 AM)

    I am just looking at Events Manager 7 for a new client and they never had it working correctly. I notice its set to scan under web servers the W3SVC1 directory, however they have about 20 websites and they all seem to log to different W3SVCxxxx folders. Is there anyway to get all the subfolders in the parent set or do I have to go to each web server and add each folder manually?

Thanks




Sven Berger -> RE: Multiple WebSites (21.Apr.2008 3:30:03 AM)

Hi kiddx,

I had this question from a customer before, and unfortunately, there is no way to use wildcards at the folder level in EVM. Wildcards will only work at the file-level ("*.*"). But since there seems to be no way that you can force IIS to write different Logs into the same folder without creating a sub-folder, I guess you would have to create 20 different paths in EVM for this to work.

Unless of course there is a way to set up IIS in such a way that it will not create a subdirectory for the logs, then all our problems would be solved.

Incidentially, you say that you never got it working properly. Probably the most "popular" configuration mistake is to create a full path in the W3C Logs in EVM, whereas the folder that contains the machine is already pojnting to the target machine.

Example: In your folder "Servers", you have a machine named "ISA". In there you configure EVM to collect Logs from a folder named "C:\Documents and Settings\Administrator.TEST.000\Desktop\SMTP Logs". Most EVM Administrators would then attempt to collect Logs from "\\ISA\c$\Documents and Settings\Administrator.TEST.000\Desktop\SMTP Logs". But the folder in which you configure the collection of the logs IS ALREADY on the ISA machine. Therefore you need to configure the path as "c$\Documents and Settings\Administrator.TEST.000\Desktop\SMTP Logs".

Hope this helps.




Page: [1]