################################################################### # # Sample Configuration file for evlogsys.pl. # # Default location is C:/EvLogSys/ # # Blank lines and lines beginning with # are ignored. # Other entries are # syslog_host = xxx (IP addr or hostname of syslog server) # event_log_host = xxx ... (IP addrs or NetBIOS names of monitored NT hosts) # scan_interval_sec = xxx (number of seconds between event log scans) # source = xxxx... (one or more of "system", "security", "application") # Values are case-insensitive. # # Multiple entries on right-hand-side are space-delimited. # This is allowed for "event_log_host", "omit_host", and "source". # # If a domain is specified in config file, poll all hosts in that # domain # except hosts listed under omit_host directives. # # Only one "domain" may be used. # ################################################################### syslog_host = myloghost domain = myNTdomain # if not using "domain" or polling hosts outside domain # event_log_host = sample-host sample-host2 omit_host = bishop nostromo omit_host = caesar scan_interval_sec = 300 source = system application source = security