NetIQ Security Manager
Security Log Analysis
- Click to Enlarge
Log management encompasses the processes of log archiving and log analyzing. These processes enable your organization to collect and consolidate audit logs from operating systems, applications and network devices. Security events logs are typically collected, consolidated and stored, normalized and preserved (archived) as a record of system activity. In many cases, logs are analyzed to identify incident trends, for audit and review purposes, or used in a forensic investigation of a specific security incident.
Proper log management is critical if your organization is affected by laws and regulations that require the collection and archiving of event logs. Audit and control reviews are held annually, if not more frequently, to uncover violations of organizational policy or separation of duties, as well as breaches in the use of private or confidential customer or patient information.
Ready to try it?
NetIQ Security Manager quickly identifies hidden threats while meeting audit and regulatory requirements with scalable and centralized log and event consolidation combined with powerful archival, forensics and trending analysis tools. The product essentially puts powerful reporting and analysis capabilities in the hands of security teams. To help your organization maintain effective and efficient log management, NetIQ Security Manager:
- Helps satisfy legal log-retention requirements and supplies a powerful, yet simple solution that enables you to meet audit and regulatory requirements that mandate security log and event information be collected and retained for extended periods of time.
- Facilitates regular and easy review of security information by providing reports, based on summarized security data, that present key security information, (e.g., failed log-on attempts), and which allow more in-depth analysis by clicking down into the report to reveal more detailed information. Updated daily, these reports facilitate regular reviews of security information, helping to meet both security best practice and regulatory requirements.
- Enables the analysis of security trends and provides for the faster identification of anomalies through detailed and flexible trend analysis reports. With charts and data manipulation capabilities, you can show different visual representations of security event information.
- Provides powerful forensics investigation capabilities which dramatically reduces the time to find the root-cause behind an incident or anomaly through powerful forensics queries. With a forensics reporting interface, your alerts can be easily filtered, grouped and sorted for improved data mining.
