1.4 KiB
1.4 KiB
LOGAR Windows Edge Forwarder
Lightweight edge log forwarder for Windows servers.
Features
- Zero Local State: No local database or state tracking. Forwarder simply scans recent logs and streams candidates.
- Edge Noise Stripping: Strips conversational/informational noise (INFO, DEBUG, Audit) at the source.
- End-to-End OpenPGP Encryption: Encrypts logs using the server's public key so that only the server can decrypt them.
- Authenticated TCP Socket: Connects directly via raw TCP framing with token verification.
- No GPG Binary Required: Pure-Python cryptography (
pgpy+cryptography).
Installation
python -m pip install -r requirements.txt
Configuration
Place the client_config.json generated by the server (Server.py --create-client-config) in the same directory as Win_Client.py.
Running the Forwarder
python Win_Client.py --hours 6
Scheduled Task Deployment
To run periodically via Windows Task Scheduler (e.g., every 3 hours):
$Action = New-ScheduledTaskAction -Execute "python.exe" -Argument "C:\LOGAR\Win_Client.py --hours 6" -WorkingDirectory "C:\LOGAR"
$Trigger = New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Hours 3)
Register-ScheduledTask -TaskName "LOGAR_Windows_Forwarder" -Action $Action -Trigger $Trigger -Description "LOGAR Edge Forwarder"