LOGAR/out/win_client/README.md

LOGAR Windows Edge Forwarder

Lightweight edge log forwarder for Windows servers.

Features

• Zero Local State: No local database or state tracking. Forwarder simply scans recent logs and streams candidates.
• Edge Noise Stripping: Strips conversational/informational noise (INFO, DEBUG, Audit) at the source.
• End-to-End OpenPGP Encryption: Encrypts logs using the server's public key so that only the server can decrypt them.
• Authenticated TCP Socket: Connects directly via raw TCP framing with token verification.
• No GPG Binary Required: Pure-Python cryptography (pgpy + cryptography).

Installation

python -m pip install -r requirements.txt

Configuration

Place the client_config.json generated by the server (Server.py --create-client-config) in the same directory as Win_Client.py.

Running the Forwarder

python Win_Client.py --hours 6

Scheduled Task Deployment

To run periodically via Windows Task Scheduler (e.g., every 3 hours):

$Action = New-ScheduledTaskAction -Execute "python.exe" -Argument "C:\LOGAR\Win_Client.py --hours 6" -WorkingDirectory "C:\LOGAR"
$Trigger = New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Hours 3)
Register-ScheduledTask -TaskName "LOGAR_Windows_Forwarder" -Action $Action -Trigger $Trigger -Description "LOGAR Edge Forwarder"