Retrieving file-based logs from Windows servers
The following is what I posted to the loganalysis mailing list. The original question was regarding how to retrieve Web server logs (Apache for Windows) and Application specific logs (written in text format).
You can accomplish this in a couple of ways.
One, you can write a batch script on Windows box and use AT scheduler to upload them periodically to your unix server, using either ftp or curl to upload.
Two, you can setup a sshd server on your Windows box, using Cygwin or some stripped down version of Cygwin. E.g. http://www.certaintysolutions.com/tech-advice/ssh_on_nt.html.
Note that the solution on that link is pretty old, but follow the same instructions using the latest cygwin binaries can get you a ssh2 package.
Once sshd is setup, you can setup rsa key authentication and from your unix box, scp or sftp the files from the windows box.
Three, setup ftp on the WIndows box, then use curl/wget/ncftp on the unix box to grab files off the Windows box. Similarly, you cansetup a web server that has the log dir accessible. Then use curl/wget from the unix box to grab files via HTTP.
Four, share the log dir, then use Samba to mount the shared dir and copy files that way.
All of the options have security concerns, so be sure to think hard before picking a solution.
There are also concerns about log rotation and what not that you will need to consider as well.
Or you could use Windows’s built-in WMI to poll for any information (including a application’s log file…) without needing to add any 3rd party software.
-Mark