Security Log Management

There are many tools available to extract data from log files. For this

chapter, we will be using Microsoft Log Parser, because of it versatility and

capability to quickly output reports from large amounts of different types of

information. Additionally, Log Parser has the capability to read Apache’s

NCSA common and combined formats, IIS’s W3C log file format, and many

other native log file formats. We will also explore Awstats graphical output

and charting capabilities. More details on Log Parser can be found in Chapter

7,“Managing Log Files with Log Parser,” and Chapter 8,“Investigating

Intrusions with Log Parser.”

NOTE

Microsoft Log Parser is freely ...