SysMon is a system monitor. It is designed to collect a range of events via plugins and process them. The plugins are: Debug output - collects any message sent by OutputDebugString Windows System Events - enables real time view of all system events IIS hits - enables real time view of all IIS hits log4j - accepts incoming connections from log4j loggers The event processors are: File-System log - The events are persisted in the host file-system Scripting - each event may be filtered/altered via javascript/vbscript Additional plugins and processors are being developped. SysMon is a client server application. The server is a Win32 service. The client is a viewer that is also a native Win32 application. The clients communicate to the server through TCP/IP so remote access is supported.