Juniper Secure Analytics WinCollect 10 User Guide

keyboard_arrow_up

close

keyboard_arrow_left

Table of Contents Expand all

play_arrow WinCollect 10 Overview
- play_arrow WinCollect 10 overview
  - What's new in WinCollect 10
  - Performance comparison between WinCollect versions
play_arrow Installing WinCollect 10
- play_arrow Installing WinCollect 10
play_arrow Uninstalling WinCollect 10
- play_arrow Uninstalling WinCollect 10
play_arrow WinCollect 10 Stand-alone Console
- play_arrow WinCollect 10 stand-alone console
  - play_arrow Opening the WinCollect 10 stand-alone console
    - Editing a source
    - Adding a destination
  - play_arrow WinCollect 10 stand-alone configuration
    - play_arrow Agent Core
      - Enabling statistics messages
    - play_arrow Credentials
      - Adding a user account
    - Configuring a local source
    - Configuring a remote source
    - play_arrow Destinations
  - play_arrow Agent settings
  - Service status
  - Log Viewer
  - Top Sources
  - Applying pending changes
  - play_arrow Create a source in the Source wizard
    - Creating a local source
    - Creating a remote source
play_arrow Configuration Scripts
- play_arrow Configuration scripts
  - Configuring WinCollect 10 to collect Microsoft security events
  - play_arrow Agent configuration update script use cases
play_arrow WinCollect Sources
- play_arrow WinCollect Sources
play_arrow Advanced Settings
- play_arrow Advanced settings
play_arrow The WinCollect 10 Statistics File
- The WinCollect 10 statistics file
play_arrow WinCollect Terminology
- WinCollect terminology

list Table of Contents

English

keyboard_arrow_right

File Forwarder source

date_range 28-Jun-22

arrow_backward

arrow_forward

The File Forwarder source monitors many types of logs that are not covered as part of the standard WinCollect plug-ins. You can monitor logs continuously (Continuous Monitoring), or you can scan a folder for new files, process the contents, and wait for the next file (File Drop).

Tip:

Because these logs fall outside of the standard plug-ins, there is no DSM to parse the events in JSA. You must either create a custom DSM or use the Universal DSM.

Table 1: File Forwarder source parameters
Parameter	Description
Type	File Forwarder
Root directory	Directory where the log files that you want to pull data from are stored. Note: You no longer need to enter the UNC path for remote sources.
Filename pattern	Only files that match this pattern are considered. This is an OS file filter. . Will match all files .log will match all files with a .log extenstion Server.log will match all files with Server to start with and have.log extenstion
Monitor subdirectories	Select if you would like the agent to monitor subdirectories of the root directory.
Monitoring algorithm	Continuous Monitoring is intended for log files where data is continuously appended to the end of the log file. File Drop is intended for log files that are "dropped" into the root log directory, read one time, and then ignored in the future.

arrow_backward PREVIOUS Netapp Data ONTAP source

NEXT arrow_forward Advanced settings

footer-navigation

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Juniper Secure Analytics WinCollect 10 User Guide

File Forwarder source

Stay in touch