LOGLOGIC
LogLogic provides award-winning solutions for protecting information assets, automating compliance, and mitigating risk.
The need to protect vital information assets and enforce new business mandates and regulations – such as the Sarbanes-Oxley Act of 2002, HIPAA, and PCI – is driving new approaches to log management and intelligence. Automating critical IT controls, including COBIT and ITIL, gives enterprises the opportunity to improve business performance while reducing costs.
LogLogic’s Log Management Intelligence solutions effectively address these challenges. Enterprises have access to log data that can make it easy to find vital information such as employee activity, network services and application availability, and unauthorized infrastructure changes.
LogLogic appliances can be deployed in stand-alone mode or as a distributed platform for processing all your log data. These appliances collect, report, alert, and store log data from virtually any source, thanks to LogLogic’s Universal Log Processing Engine. LogLogic provides “Google” for your log data – a powerful platform and central repository for securing, indexing, and searching and reporting on terabytes of log data in seconds.
With an ROI of six months or less, LogLogic’s solutions are used by more than 200 Global 2000 enterprises – and they’re supported by a global network of technology and solutions partners.
Here’s how LogLogic easily collects, alerts, stores, searches, reports and shares log data:
COLLECT
LogLogic’s family of appliances can be up and running in just minutes, collecting 100% of log data from virtually any source. The appliance will even auto-identify your network log sources.
ALERT
LogLogic’s system dashboard gives you a quick glance at all of the activity happening on your infrastructure. The Alert module shows you how many alerts you have received in the past 12 hours, classified by severity. Quickly drill down into the Alert viewer to see exactly what alerts have been generated in the past hour.
LogLogic’s policy-based alerting allows you to set up an audit report policy to quickly determine whether any of your firewall configurations have been changed to allow unauthorized traffic.
The “Risky Firewall Traffic” Alert is set up to monitor unsafe connections allowed through the firewall. In this policy, we want to monitor FTP, Telnet, and NetBIOS traffic. Any accepted connections with those ports will trigger an immediate alert. You can customize this policy by adding or removing rules.
STORE
The data is securely stored and normalized across all network devices. LogLogic’s ST Appliance enables an immutable set of log data to be retained for evidentiary purposes such as legal and audit. Data is secure at rest, and LogLogic enables a complete chain of custody to be maintained over the data.
SEARCH AND REPORT
The LogLogic appliance can generate more than 13,000 reports from 30 easy-to-use reporting templates. Using LogLogic’s pre-packaged compliance and controls reports, you now have visibility into employees’ access to critical information and applications, and can identify critical breaches and potential information leaks.
LogLogic reports can be created in seconds using LogLogic Agile Reporting, or, through out-of-the-box LogLogic Compliance and Automation suites for regulations and controls such as PCI, SOX, COBIT, and ITIL.
SHARE
Finally, with LogLogic’s Open Log Services, you have the ability to forward the exact log messages that third-party applications need. That could mean sharing real-time alerting with your current IT management dashboard, such as IBM Tivoli, HP OpenView, and EMC Smarts, or even sending alerts to your internal Intranet applications and portals.
CONCLUSION
LogLogic makes sense of log data, transforming it into actionable insight and information for automating compliance, mitigating risk, and driving operational excellence. For more information, visit www.loglogic.com.