Log Management Features
|
 |
|
 |
|
 |
Features
EventTracker is a 100% software solution that enables users to effectively monitor and manage their IT infrastructure. In addition to providing a powerful defense in depth for cyber attacks and a complete compliance solution, EventTracker delivers operational efficiencies – reducing IT costs and freeing resources for other duties that increase the business value of your organization. EventTracker’s powerful built-in knowledge base provides the ability to gain business intelligence providing increased security, performance, availability, and reliability of your systems.
Collection
EventTracker allows you to automate the collection of log data in either agent or agentless mode from the entire IT environment. This provides you with the data to analyze events throughout your entire environment including servers, workstations, network devices, applications, processes, and services.
Consolidation
The advanced, central console puts the security manager, event log monitor, event log reporting and analytics engines at your fingertips. The Console instantly displays events from all systems on a centralized console with customized views using multiple windows and rule based filtering.
Correlation
Events from multiple servers and domains can be correlated to provide for faster decision making and greater security. EventCorrelator makes it easy to define patterns of events and create rules and actions that can prevent the loss of revenue and increase overall security.
EventTracker includes comprehensive analytics capability to quickly search and drill down into all your logs – in real-time or as part of a post-incident forensics process, all from a central location.
Reporting
EventTracker includes comprehensive reporting tools to generate trend and auditor-grade reports on either an ad-hoc or scheduled basis. EventTracker automates the delivery and review of reports. Built-in compliance workflows allow reports to be securely annotated to demonstrate compliance.
Storage
EventTracker provides an integrated solution for efficient storage of event logs. EventVault archives event logs across the enterprise without the need for additional DBMS licenses. All events are compressed (over 96% compression ratio) and sealed with an MD-5 signature.