Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Does LEM offer a generic txt/log file connector that we can use to collect log data from any 3rd party application?

$
0
0

Yeah, it's worth submitting it and seeing what happens.

 

Not all requests end up being fulfilled, probably for a couple reasons. First, there are a lot of different kinds of logs out there, and not enough time to make connectors for them all. They have to prioritize the ones that seem likely to get the most use (read: the most requested) so some more obscure ones may not make the cut. But if enough people want it, you may see it released.

 

Also, they presumably have a lot stricter standards for putting out good connectors than when I'm just trying to hack something together. If you look at the connectors they've developed, they're designed to parse and properly account for pretty much any event that might appear in a log source, not just the most common ones. It takes a lot of work--not to mention good documentation that isn't always available from the vendors--to make a connector that can reliably recognize, parse, and normalize all those events. Whereas if I'm making a connector, I can prioritize the events I'm most likely to see and not be as worried if something slips through the cracks.

 

Disclaimer the second: I don't work for Solarwinds or have any real insight into how their connector development process works. I just know that they've made a whole lot of connectors that work extremely well over a huge range of products and devices, and that has to have been a huge amount of work.


Viewing all articles
Browse latest Browse all 5385

Trending Articles