32 lines
1.4 KiB
Markdown
32 lines
1.4 KiB
Markdown
# LOGAR Windows Edge Forwarder
|
|
|
|
Lightweight edge log forwarder for Windows servers.
|
|
|
|
## Features
|
|
- **Zero Local State**: No local database or state tracking. Forwarder simply scans recent logs and streams candidates.
|
|
- **Edge Noise Stripping**: Strips conversational/informational noise (INFO, DEBUG, Audit) at the source.
|
|
- **End-to-End OpenPGP Encryption**: Encrypts logs using the server's public key so that only the server can decrypt them.
|
|
- **Authenticated TCP Socket**: Connects directly via raw TCP framing with token verification.
|
|
- **No GPG Binary Required**: Pure-Python cryptography (`pgpy` + `cryptography`).
|
|
|
|
## Installation
|
|
```powershell
|
|
python -m pip install -r requirements.txt
|
|
```
|
|
|
|
## Configuration
|
|
Place the `client_config.json` generated by the server (`Server.py --create-client-config`) in the same directory as `Win_Client.py`.
|
|
|
|
## Running the Forwarder
|
|
```powershell
|
|
python Win_Client.py --hours 6
|
|
```
|
|
|
|
## Scheduled Task Deployment
|
|
To run periodically via Windows Task Scheduler (e.g., every 3 hours):
|
|
```powershell
|
|
$Action = New-ScheduledTaskAction -Execute "python.exe" -Argument "C:\LOGAR\Win_Client.py --hours 6" -WorkingDirectory "C:\LOGAR"
|
|
$Trigger = New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Hours 3)
|
|
Register-ScheduledTask -TaskName "LOGAR_Windows_Forwarder" -Action $Action -Trigger $Trigger -Description "LOGAR Edge Forwarder"
|
|
```
|