in reply to writing a tool to collect workstation events
You don't tell us the network structure, the operating systems or the event sources, so it's hard to give you a pointer in the right direction.
If your operating systems are Windows, there is the WMI which allows you to remotely query the event logs. If your operating systems are unixish, there is the syslogd package, which allows you to forward all log events to remote machines.
If your programs log their events neither into the Win32 Event Log nor via syslogd, you will either have to write adapters from whatever logging mechanism your programs use into whatever logging mechanism you use to collect the messages (say, a named pipe instead of a file), or you will have to write your own collection mechanism. But as you don't tell us how your programs log, it's hard to give you specific pointers.
Please read How (Not) To Ask A Question.
|
|---|