logo
PRODUCTS
       

Log Management Features

Features

EventTracker is a 100% software solution that enables users to effectively monitor and manage their IT infrastructure. In addition to providing a powerful defense in depth for cyber attacks and a complete compliance solution, EventTracker delivers operational efficiencies – reducing IT costs and freeing resources for other duties that increase the business value of your organization. EventTracker’s powerful built-in knowledge base provides the ability to gain business intelligence providing increased security, performance, availability, and reliability of your systems.

Collection

EventTracker allows you to automate the collection of log data in either agent or agentless mode from the entire IT environment. This provides you with the data to analyze events throughout your entire environment including servers, workstations, network devices, applications, processes, and services.

Consolidation

The advanced, central console puts the security manager, event log monitor, event log reporting and analytics engines at your fingertips. The console instantly displays events from all systems on a centralized console with customized views using multiple windows and rule based filtering.

Correlation

Events from multiple servers and domains can be correlated to provide for faster decision making and greater security. The EventCorrelator makes it easy to define patterns of events and create rules and actions that can prevent the loss of revenue and increase overall security.

Analytics

EventTracker includes comprehensive analytics capability to quickly search and drill down into all your logs – in real-time or as part of a post-incident forensics process, all from a central location.

Reporting

EventTracker includes comprehensive reporting tools to generate trend and auditor-grade reports on either an ad-hoc or scheduled basis. EventTracker automates the delivery and review of reports. Built-in compliance workflows allow reports to be securely annotated to demonstrate compliance.

Storage

EventTracker provides an integrated solution for efficient storage of event logs. EventVault archives event logs across the enterprise without the need for additional DBMS licenses. All events are compressed (over 96% compression ratio) and sealed with an SHA-1 signature.

USB Monitoring

With EventTracker all USB storage device activity can be monitored on both Windows Servers and Workstations. EventTracker provides not only insert/removal and sophisticated rule capability to limit usage to a set of permitted drives only, it also provides the ability to monitor and record all file writes to the device.

Automatic Remediation

Many of the conditions detected by EventTracker result in a well defined action on the part of IT staff. EventTracker enables these common actions to be automated, and provides packaged remedial actions for many common conditions. Especially useful for smaller enterprises without 24X7X365 coverage, EventTracker can take action immediately, saving precious time while IT staff are paged.