Corner Bowl Log Manager
Event Log Consolidation and Archiving
Event Log consolidation is an important and often requirement of regulatory compliance such as Sarbanes-Oxley.
Corner Bowl Log Manager enables system administrators to automatically download and consolidate Event Log entries to a central database.
Unlike many Event Log consolidation products, Corner Bowl Log Manager's database schema is open and if necessary simple to select from.
No Maximum Size Limit
Unlike the Windows Event Logs which have a maximum size limit, Corner Bowl Log Manager does not impose a limit unless otherwise configured.
No more need to worry about Event Log entries being overwritten.
Automatic Event Log Retention Policy Enforcement
Managing consolidated Event Logs is simplified with our automatic Event Log entry retention policy.
Configure Corner Bowl Log Manager to automatically remove or archive entries to an alternate database.
Once archived, backup your archive database and save it's contents to a DVD or other storage device.
Supported Event Log Consolidation Formats
- Microsoft SQL Server 2000 & 2005
- MySQL 5.0
- Local or Remote Files
Microsoft SQL Server Database Schema
The database schema is simple and straight forward making custom application development a breeze.
There are 2 tables plus a table for each Event Log.
Tables
| event_logs | Contains a list of all consolidated Event Logs. |
| level | Contains the 5 different event types: Information, Warning, Error, Audit Success and Audit Failure. |
Event Log Table Schema
| [id] [int] IDENTITY(1,1) NOT NULL | The primary key. |
| [host] [varchar](256) NULL | The host the entry is was originally sent from. |
| [level_id] [tinyint] NOT NULL | Foreign key to the 'level' table. |
| [source] [varchar](256) NULL | The source of the event. |
| [category] [varchar](256) NULL | The event category. |
| [eventId] [bigint] NULL | The event ID as seen in the Windows Event Viewer. |
| [message] [varchar](4096) NULL | The event message |
| [user] [varchar](128) NULL | The user that caused the event to occur. |
| [data] [varbinary](2048) NULL | The event data |
| [categoryId] [int] NULL | The event category used when exporting event logs to the Windows EVT file format. |
| [insertionString] [varbinary](4096) NULL | The event replacement strings used when exporting event logs to the Windows EVT file format. |
| [date] [datetime] NOT NULL | The date and time the event occurred. |
| [flag] [tinyint] NULL | Follow up flag set by the user from the Event Log viewer. |
| [notes] [varchar](4096) NULL | User assigned notes. |
Event Log Consolidation, Monitoring and Retention Policy Screen Shots
