Support Get Quote

DHCP Server Auditing

Monitoring DHCP Server logs

The Dynamic Host Configuration Protocol or DHCP application server, is a vital part of any network infrastructure, and it is important to audit its activity. DHCP server auditing can throw light on client-server exchanges that occur when IP addresses are allotted, which is useful to network administrators. The DHCP server logging system provides information on successful or failed lease grants, depletion of the server's IP pool, or requests for messages and their corresponding acknowledgements. Analyzing DHCP server log files is thus an ideal audit mechanism. In addition, admins can track security information such as authorization messages (where relevant) and warning messages to implement security measures if needed.

EventLog Analyzer for DHCP servers

EventLog Analyzer can read and report on DHCP server software for Windows and Linux systems. It provides various reports that simplifies network administration. These reports detail all DHCP-related communication (discover and offer messages), activity (logging, authorization, and DNS updates), and error events. EventLog Analyzer also brings you overview and Top N reports, including lists on active clients and MAC addresses.

DHCP Windows based server reports

DHCP Windows based server reports

  • Dedicated reports list actions on leases such as granted, renewed, or denied.
  • DNS server reports show success and failure for server updates, following DHCP IP address assignments.
  • Reports detail the DHCP server's connection to, and authorization within, the Active Directory domain.
  • The DHCP server works with a pool of IP addresses that are assigned around the network. EventLog Analyzer reports specify whether this pool is expanded or exhausted.
  • Independent reports collate events of varying severity, such as critical, error, or warning.
  • Top N reports help identify the most active clients and MAC addresses.
  • Reports on the DHCP logging process and a general overview on all of the above events are also available.

Available Reports

Lease renewed by client | Lease denied | Lease Granted | Lease Released | Lease Expired | Lease Deleted | IP Found To Use in Network | Pool Exhausted | DNS Update Request | DNS Update failed | DNS update successful | Unreachable domain | BOOTP Lease Report | Authorization succeeded | Authorization failed | Server found in domain | Network failure | DHCP Logging started | DHCP Logging stopped | DHCP logging paused due to low disk | Critical Events Report | Error Reports | Warning Reports | Top Clients | Top Mac Address | DHCP Reports Overview

DHCP Linux based server reports

DHCP Linux based server reports

  • Each step in the exchange of client-server messages can be viewed in its own report.
  • All information messages are listed in a single report.
  • Most active IP addresses, MAC addresses, gateways, and operations are displayed in the top N reports.
  • An overview report summarizes all DHCP log events.

Available Reports

Discovers | Offers | Requests | Acknowledges | Releases | Negative Acknowledges | Abandoning IP | Information Report | DHCP Linux Overview | Top Operation | Top Ip Address | Top MAC Address | Top Gateway

Efficiently monitor your network activity by auditing DHCP server logs.

  • Please enter a business email id
    By clicking 'Get Your Free Trial', you agree to processing of personal data according to the Privacy Policy.


Your download is in progress and it will be completed in just a few seconds!
If you face any issues, download manually here

Bottom banner


EventLog Analyzer Trusted By

Los Alamos National Bank Michigan State University
Panasonic Comcast
Oklahoma State University IBM
Accenture Bank of America
Ernst Young

Customer Speaks

  • Credit Union of Denver has been using EventLog Analyzer for more than four years for our internal user activity monitoring. EventLog Analyzer provides great value as a network forensic tool and for regulatory due diligence. This product can rapidly be scaled to meet our dynamic business needs.
    Benjamin Shumaker
    Vice President of IT / ISO
    Credit Union of Denver
  • The best thing, I like about the application, is the well structured GUI and the automated reports. This is a great help for network engineers to monitor all the devices in a single dashboard. The canned reports are a clever piece of work.
    Joseph Graziano, MCSE CCA VCP
    Senior Network Engineer
  • EventLog Analyzer has been a good event log reporting and alerting solution for our information technology needs. It minimizes the amount of time we spent on filtering through event logs and provides almost near real-time notification of administratively defined alerts.
    Joseph E. Veretto
    Operations Review Specialist
    Office of Information System
    Florida Department of Transportation
  • Windows Event logs and device Syslogs are a real time synopsis of what is happening on a computer or network. EventLog Analyzer is an economical, functional and easy-to-utilize tool that allows me to know what is going on in the network by pushing alerts and reports, both in real time and scheduled. It is a premium software Intrusion Detection System application.
    Jim Lloyd
    Information Systems Manager
    First Mountain Bank

Awards and Recognitions

A Single Pane of Glass for Comprehensive Log Management