Welcome to the syslog-ng Agent for Windows Administration Guide.
This document describes how to configure and manage syslog-ng Agent for Windows. Background information for the technology and concepts used by the product is also discussed.
Chapter 1, Introduction describes the main functionality and purpose of syslog-ng PE.
Chapter 2, Installing the syslog-ng Agent describes how to install syslog-ng Agent for Windows in various scenarios and how to upgrade to new versions.
Chapter 3, How to configure the syslog-ng Agent provides detailed description on configuring and managing syslog-ng Agent for Windows.
Chapter 4, Configuring destinations provides detailed description on configuring destinations and message rate control.
Chapter 5, Configuring message sources describes the configuration of message sources.
Chapter 6, Using TLS-encrypted connections with syslog-ng Agent provides detailed description on using TLS-encrypted connections with syslog-ng Agent for Windows.
Chapter 7, Filtering messages describes filtering log messages in blacklist or whitelist fashion.
Chapter 8, Customizing the message format describes customizing the format of the messages received from the eventlog and the file sources, using templates.
Chapter 9, Controlling the syslog-ng Agent services provides details about controlling the syslog-ng Agent for Windows services.
Chapter 10, Troubleshooting syslog-ng Agent for Windows describes how to solve common errors and problems.
Chapter 11, Configuring the auditing policy on Windows provides descriptions on how to enable auditing on various Windows platforms.
This guide is intended for system administrators and consultants responsible for designing and maintaining logging solutions and log centers. It is also useful for IT decision makers looking for a tool to implement centralized logging in heterogeneous environments.
The following skills and knowledge are necessary for a successful syslog-ng PE administrator:
At least basic system administration knowledge.
An understanding of networks, TCP/IP protocols, and general network terminology.
Working knowledge of the Microsoft Windows operating systems.
This guide describes the use of the following products:
syslog-ng Agent for Windows (syslog-ng Agent) 6.0.1 and later
Before you start using this guide, it is important to understand the terms and typographical conventions used in the documentation. For more information on specialized terms and abbreviations used in the documentation, see theGlossary at the end of this document.
The following kinds of text formatting and icons identify special information in the document.
Tips provide best practices and recommendations.
Notes provide additional information on a topic, and emphasize important facts and considerations.
Warnings mark situations where loss of data or misconfiguration of the device is possible if the instructions are not obeyed.