I'm trying to find a solution that will help me to monitor the product's machines and log files in each one of them. here are some fact about my working environment:
I have a product that's installed on labs composed of several machine (some of them 3 and some 8 VMs) of Windows server 2016 and up and Windows 10.
My laptop is in one LAN and the Lab in another LAN
The product creates several log files (*.log) with different name and purpose in each machine.
I think that those log files are created by the log4net feature...
There are 5 services to follow up: IIS, SQL, RabbitMQ, Product's service
I cannot UNC (like: \server-name\logs\product.log) to those machines from my laptop and vice-versa.
Machines have no access to internet
Currently If I want to monitor a log file I need to RDP to each machine and run the following PowerShell script line:
Get-Content C:\Product\Logs\Product.log -wait -tail 1000OR
to run this script from "outside" (from my laptop) with SSL Connection and and wrap the script line with
Invoke-Commandcommand:
...
#region SSL connecting to server
Add-Type @"
using System.Net;
using System.Security.Cryptography.X509Certificates;
public class TrustAllCertsPolicy : ICertificatePolicy {
public bool CheckValidationResult(
ServicePoint srvPoint, X509Certificate certificate,
WebRequest request, int certificateProblem
)
{
return true;
}
}
"@
[System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy
$AllProtocols = [System.Net.SecurityProtocolType]'Ssl3,Tls,Tls11,Tls12'
[System.Net.ServicePointManager]::SecurityProtocol = $AllProtocols
#endregion
Enter-PSSession -ComputerName $hqappIP -Credential $cred
Invoke-Command -ComputerName $hqappIP -Credential $cred -ScriptBlock {
Get-Content C:\Product\Logs\Product.log -wait -tail 1000
}
...
- I was suggested to raise in my laptop a Docker engine that will run ELK\logstash + Kibana, and install in the Lab's machines - filebeat that would talk with the server in the Docker, but I found that the Lab's machine are in one LAN and cannot ping to my laptop that residence in a different LAN (What's make me confused because I can ping from my laptop to those machines and run the script in the way that I produced to you in the previous section)
- I would not going to get additional machine in the Lab's LAN, so this is not an option
- My laptop has Windows 10 OS
So, I left with a secured Lab in one hand, and my organization laptop in other hand - How can I build in such environment - a monitoring server in my laptop, especially with a free tools (as I mentioned some in the background)?
