Introduction
Syslog Watcher is a syslog server for Windows. It receives syslog messages from network devices, servers, and workstations, stores them, and lets you search, process, and report on them. Messages are stored in files; no external database is needed.
To install and start collecting, follow Quick Start. Upgrading from Syslog Watcher 6? See What’s New in Syslog Watcher 7 and Migrate from Version 6.
How It Is Organized
Syslog Watcher 7 has four parts: Manager, Collector, syslog storage, and Server. The Collector writes messages to storage, and the Server reads them.
Syslog Watcher Manager
Manager is the desktop application. It connects to a local or remote server, shows status, changes the configuration, and displays stored messages. See Syslog Watcher Manager.
Syslog Watcher Collector
The Collector receives syslog over the network and writes messages to syslog storage. See Syslog Collector.
Syslog Storage
Syslog storage keeps all collected messages in files on disk. See Syslog Storage.
Syslog Watcher Server
The Server runs features, reports, storage maintenance, and remote Manager access. See Syslog Server.
Features run inside the Server. Each feature reads stored messages and sends them to files, a database, another syslog server, email, a web service, or a program. See Features.
System Requirements
-
Windows 8.1 or later (64-bit), or Windows Server 2012 R2 or later
-
A local disk for syslog storage — an SSD for high message rates (see Test Storage Speed)
-
Network access from syslog originators to this computer
-
Administrator privileges for installation
Where to Go Next
| Receive messages |
Network Interfaces (UDP, TCP, TLS), Incoming Filter, Syslog Collector |
| Manage originators |
Syslog Originators — register, group, and select originators |
| Store and archive |
Syslog Storage — location, retention, archive, and the Storage tab |
| View and search |
Viewing Messages — view tabs, layouts, and presets |
| Fields and filters |
Syslog Messages — message fields, format strings, and filter expressions |
| Parse messages |
Syslog Parsers — built-in and custom parsers for each originator |
| Process messages |
Features — export to files or ODBC, forward, email, HTTP, and programs |
| Report |
Syslog Reports — generate or schedule reports |
| Administer |