Home » Forums » Open Source Software » Project Lasso

Filtering events

Barty001
Filtering events
Wed, 01/07/2009 - 10:47

Can I use Lasso to filter events prior to them going back to the logging appliance? For example "filter event ID 640".

0
Your rating: None
‹ Hourly Error - 0x007f01: 16/01/2009 08:11:20 [Lasso v4.0.5](MsgDLL post-start scan:3628): Error: WDGPDB01: Registry Access Failu 0x007f01: 26/01/2009 01:24:06 [Lasso v4.0.5](272): Error: @.\CommThread.cpp,(Line: 175): Run_WatermarkThread( ... ): catch(...) ›



rrich
Hi Barty, There isn't any
Thu, 01/29/2009 - 14:16

Hi Barty,

There isn't any filtering capability in Lasso. Our solution was to forward events from Lasso to an intermediate syslog host that provides filtering capability before pushing the data over the WAN back to HQ. It's pretty effective and offloads the additional processing from the monitored host (in agent mode anyway, in polling mode it wouldn't be a problem)