greg haygood

There seem to be a number of fancy ways to get Windows machines to send their Events to a syslog server, but for downright simplicity, I chose evtsys from the Purdue Engineering Computer Network. To make it even easier, I added a silent installer on top of it using NSIS so we could deploy through our systems management tools.This version send logs to the host loghost, so if it's not defined on your network, you could mess up your network, or at least the local host and segment. You can easily modify the installer script to send to a different IP or hostname. At the top of the script is a LOGHOST variable, just change the value of loghost to whatever is appropriate for your own network. Then just recompile using NSIS.Files:

• Installer: evtsys-loghost-installer.exe
• NSIS script: evtsys.nsi