- Overview
- Configuration
ManageEngine Log360
Comprehensive security insights with ADSelfService Plus and Log360
ManageEngine Log360 is a comprehensive SIEM solution that combines data loss prevention (DLP) and cloud access security broker (CASB) capabilities, enabling organizations to detect, prioritize, investigate, and respond to security threats. Integrating ADSelfService Plus with Log360 allows organizations to forward logs for in-depth monitoring and analysis, offering real-time insights into user activities and improving incident response capabilities.
Forward ADSelfService Plus logs to ManageEngine Log360
Automatically send ADSelfService Plus logs to Log360, providing centralized storage and analysis within a unified SIEM environment.
Correlate logs across the network
Combine ADSelfService Plus logs with other network logs in Log360 to gain holistic insights into user activities, detect unusual patterns, and identify potential security threats.
Generate reports and trigger alerts
Create detailed reports and configure alerts for critical security events to support proactive monitoring and incident response.
Integrating Log360 with ADSelfService Plus
- Log in to ADSelfService Plus with your admin credentials.
- Navigate to Overview > Admin > Product Settings > Integration Settings.
-
Click on the Log360 tab and configure the following:
- Server Name or IP: Enter the name or IP Address of the machine where EventLog Analyzer, the log management component of Log360, is installed.
- Port Number: Enter the port number where the EventLog Analyzer service is running.
- Protocol: Select the protocol that must be used to connect to the EventLog Analyzer server.
- Username and Password: Configure the EventLog Analyzer Super Admin's credentials in the Username and Password fields.
- Log Type: Select the type of log that you would like to forward to EventLog Analyzer: Access Logs, Debug Logs, or both.
- Access Log: Select Access Logs if you would like to forward ADSelfService Plus' web server access logs.
- Debug Log: Select this log if you would like to forward event logs related to startup and logins.
- Once you have selected the ADSelfService Plus log types that you want to export to Log360, click Save.
However, implementing High Availability or Load Balancing on ADSelfService Plus deployments that are already forwarding log files to Log360 can disrupt log file recognition from the secondary nodes. Reintegration of Log360 and ADSelfService Plus will be required in such cases.