Syslog and Windows Event Log Collection

Syslog and Windows Event Log Collection

EventLog Analyzer collects event logs from distributed Windows hosts or syslogs from distributed Linux and UNIX hosts, Switches and Routers (Cisco). Event log reports are generated in real-time to display important system information across the network.

No agents/client software required for log collection

For event log collection, eventlog analyzer application does not require a separate agent to be installed on each machine from which logs are collected. Rather the agent that collects Windows event log and syslog messages is present as part of the EventLog Analyzer server itself. In this way, eventlog analyzer application performs event log collections task without introducing additional load on the hosts.

Windows event log and Linux/Unix syslog collection

EventLog Analyzer collects events generated by Windows and UNIX machines without deploying an agent. Setting up EventLog Analyzer to collect and report on events from a server, is a simple process for both Windows and UNIX systems.

Cisco Switches and Routers log collection

EventLog Analyzer collects logs generated by Cisco Switches and Routers. Setting up the Cisco Switches and Routers to send the syslogs to EventLog Analyzer is simple.

Database Filters for logs noise reduction during event log collection

EventLog Analyzer lets you apply event filters on the collected event logs, before storing them in the database. With event filters, you can store only the necessary event logs in the database, making it easier to search for particular events, and optimizing the capacity of the database.

Automatically collect logs for the period, ELA Log Collector process is down

This critical log collection feature ensures that the logs are not lost even during the log collector process down time.

Alert notification for ELA Log Collector process goes down

EventLog Analyzer lets you to configure Email alert notification to user(s), in case Log Collector process of EventLog Analyzer goes down. Email alert can be configured to multiple Email IDs.

Host Groups

EventLog Analyzer lets you create host groups to collect and report on specific hosts alone. This is useful when tracking event behavior and system performance for a select group of critical servers.

Advanced User Management

Create different users to access event logs and generate reports. While Admin users have access to all features, Guest users will only be able to generate reports and retrieve archived event logs.

Other features

SIEM

EventLog Analyzer offers log management, file integrity monitoring, and real-time event correlation capabilities in a single console that help meeting SIEM needs, combat security attacks, and prevent data breaches.

IT Compliance Management

Comply with the stringent requirements of regulatory mandates viz., PCI DSS, FISMA, HIPAA, and more with predefined reports & alerts. Customize existing reports or build new reports to meet internal security needs.

File Integrity Monitoring

Monitor critical changes to confidential files/folders with real-time alerts. Get detailed information such as 'who made the change, what was changed, when and from where' with predefined reports.

Log analysis

Analyze log data from sources across the network. Detect anomalies, track critical security events, and monitor user behaviors with predefined reports, intuitive dashboards, and instant alerts.

Log forensic analysis

Perform in-depth forensic analysis to backtrack attacks and identify the root cause of incidents. Save search queries as alert profile to mitigate future threats.

Syslog management

Collect and analyze Syslog data from routers, switches, firewalls, IDS/IPS, Linux/Unix servers, and more. Get in-depth reports for every security event. Receive real-time alerts for anomalies and breaches.

Need Features? Tell Us
If you want to see additional features implemented in EventLog Analyzer, we would love to hear. Click here to continue

Customer Speaks
  • Credit Union of Denver has been using EventLog Analyzer for more than four years for our internal user activity monitoring. EventLog Analyzer provides great value as a network forensic tool and for regulatory due diligence. This product can rapidly be scaled to meet our dynamic business needs.
     
    Benjamin Shumaker
    Vice President of IT / ISO
    Credit Union of Denver
  • The best thing, I like about the application, is the well structured GUI and the automated reports. This is a great help for network engineers to monitor all the devices in a single dashboard. The canned reports are a clever piece of work.
     
    Joseph Graziano, MCSE CCA VCP
    Senior Network Engineer
    Citadel
  • EventLog Analyzer has been a good event log reporting and alerting solution for our information technology needs. It minimizes the amount of time we spent on filtering through event logs and provides almost near real-time notification of administratively defined alerts.
     
    Joseph E. Veretto
    Operations Review Specialist
    Office of Information System
    Florida Department of Transportation
  • I love the alerts feature of the product. We are able to send immediate alerts based on pretty much anything we can think of. We send alerts when certain accounts login, or when groups are changed, etc. That has been very helpful. Also the automatic archive of the log files has been very helpful and has taken the worry out of keeping old logs. The “Ask Me” function is very nice as well. It is great to have some natural language queries built in where you can just click a button and get an answer.
     
    Jim Earnshaw
    Senior Computer Specialist
    Department of Chemistry
    University of Washington
  • Windows Event logs and device Syslogs are a real time synopsis of what is happening on a computer or network. EventLog Analyzer is an economical, functional and easy-to-utilize tool that allows me to know what is going on in the network by pushing alerts and reports, both in real time and scheduled. It is a premium software Intrusion Detection System application.
     
    Jim Lloyd
    Information Systems Manager
    First Mountain Bank

EventLog Analyzer Trusted By

A Single Pane of Glass for Comprehensive Threat Management