What's going on, guys? It is Bernardo and today is all about configuring your Kiwi system log
server to retrieve Windows Event logs. So let's get right into it. All right,
so the last video we left off, we left off here with the system log from Kiwi up and running.
And I want to start capturing the event logs on my database server.
Now, to do this, we need to go into the SolarWinds Downloads Web page. And on your left hand side,
we are going to click on product types and then enabled free tools. And on your right hand side,
we're going to go all the way to the bottom and locate event log forwarder for windows.
So we are going to click on the download Free Tool and it's going to want you to enter information.
So into the information and then click on proceed to free download and it's going to
give you this and you could click Continue without adding this particular add on
and it's going to take you here. So we are going to click on download. Now,
once it's downloaded, I'm going to click on the Arrow and I'm going to pick on show in folder.
It's going to open up my downloads folder. Now, for this particular
file, it is zipped, so I'm going to right click on it
and then click on seven Zip and then pick extract files. I'm going to click OK
and we're good. So I'm going to double click on the folder and it comes with an EXE file as well.
As an MSI file that allows you to push it out, you know, silently and all that stuff.
Now with these two files, I'm going to copy and paste them inside the C drive under a folder
that I created called Install. Now this install folder, I'm actually going to right click on it
and go to properties. I'm going to go to sharing I'm going to click on advanced
sharing and I'm going to enable share this folder, I'm going to click on Apply, OK,
and then close it now the reason why I shared that that folder is because I'm going to have
multiple Windows servers that I am going to install this particular plug in because I
want the Windows event logs to go into my system log server. Now within my database server,
I'm going to minimize my management studio. I am going to right click on the start menu,
click on Run, I'm going to type in the UNC path of that install file. So basically,
you know, in the network path of my where the installation stuff is at.
So click OK, it's going to load up. I'm going to highlight the EXE one,
which is the first one I'm going to right click on it. I'm going to run it as an administrator
and just follow the prompts. So next here, accept the license and terms.
Next I'm going to leave everything as the default click next here
I'm going to leave the default installation folder as is click next install and you're finished.
You're going to get a shortcut on the desktop. So double click on that and
it's going to load this up. Now, there's a couple of things that we need to configure
on this console. We need to configure our subscription as well as our system log server.
So we are going to go inside the system log server first and we're going to click
on ADD and within ADD, we are going to give our server name and our server IP address.
So this is all the information that I provided. And then you're going to click
on Create. So click on it. Now go back inside the subscription
and within the subscription we are going to click on Add from here. You want to choose what type
of events you want to kind of forward to your system log server. So pick whatever you want.
These are the three that I pick once you pick what type of events you want to do, you're going
to click on next within here we're going to click on the dropdown menu and the one that I pick was
logs alert. So we are going to click on Finish and once you click on Finish, you're good to go.
If you want to test it out, you can click on the test tab and then you're able to
just click on the dropdown menu pick an option. For me, I pick applications and
what type of test event you want to do. I did information and I clicked on create a test event
and it went out successfully. Now, the way that you know it went out successfully is if you go
back inside your system log server, you're going to see a new entry.
Now, behind the scenes, I actually added a bunch of servers. One of the servers that I added was
my Active Directory, my domain controller, and then that started picking up a lot of stuff when
I was logging into a lot of my servers, it was picking up all that information, which was great
and that's it. Hopefully guys enjoy this video and I catch you guys on the next one peace out.