Support
 
Support Get Quote
 
 
 
 

OpenVAS Reporting Tool

EventLog Analyzer: An OpenVAS reporting tool

Vulnerability scanners have become an integral part of network security. The widespread availability of free vulnerability scanning software, such as OpenVAS, has made them even more popular. Vulnerability scanner logs, which are repositories of security information, can be channeled into a log management tool that will correlate them with logs from other sources in the network.

Analyzing OpenVAS log data with EventLog Analyzer

EventLog Analyzer is a comprehensive log management tool that supports over 40 log formats out of the box, including logs generated by OpenVAS. After collecting logs from OpenVAS, EventLog Analyzer passes the logs through its parsing engine, where they'll be broken down into values that can be mapped to appropriate fields. To make this data more understandable, EventLog Analyzer builds reports which present you with actionable data.

The following are a few datapoints you can get from OpenVAS logs processed by EventLog Analyzer:

  • Threat classification reports: Classifies all the vulnerabilities in your network based on their severity level. You'll be presented with separate reports for each level of severity such as high, medium, and low. This helps you identify which vulnerabilities you need to devote attention to, and which ones aren't as threatening yet.
  • Common vulnerability scoring system (CVSS)-based reports: Presents the number of vulnerabilities found in each CVSS category. CVSS is an industry standard for assessing the severity of computer system security vulnerabilities. This report will give you an idea of the number of vulnerabilities in your network that require remediation.
  • Top vulnerabilities report: Shows the types of vulnerabilities that are most commonly found in your network. This helps you assess your network and group vulnerabilities that share a common cause.

EventLog Analyzer's correlation engine

As the reporting module accesses broken-down log data, that log data is also simultaneously fed into EventLog Analyzer's correlation engine. The correlation engine compares the values extracted from OpenVAS logs with similar ones from other log sources to check if they match any of the correlation rules. If the criteria for a correlation rule is satisfied, corresponding alerts are triggered.

 
Customer Speaks
  • Credit Union of Denver has been using EventLog Analyzer for more than four years for our internal user activity monitoring. EventLog Analyzer provides great value as a network forensic tool and for regulatory due diligence. This product can rapidly be scaled to meet our dynamic business needs.
     
    Benjamin Shumaker
    Vice President of IT / ISO
    Credit Union of Denver
  • The best thing, I like about the application, is the well structured GUI and the automated reports. This is a great help for network engineers to monitor all the devices in a single dashboard. The canned reports are a clever piece of work.
     
    Joseph Graziano, MCSE CCA VCP
    Senior Network Engineer
    Citadel
  • EventLog Analyzer has been a good event log reporting and alerting solution for our information technology needs. It minimizes the amount of time we spent on filtering through event logs and provides almost near real-time notification of administratively defined alerts.
     
    Joseph E. Veretto
    Operations Review Specialist
    Office of Information System
    Florida Department of Transportation
  • I love the alerts feature of the product. We are able to send immediate alerts based on pretty much anything we can think of. We send alerts when certain accounts login, or when groups are changed, etc. That has been very helpful. Also the automatic archive of the log files has been very helpful and has taken the worry out of keeping old logs. The “Ask Me” function is very nice as well. It is great to have some natural language queries built in where you can just click a button and get an answer.
     
    Jim Earnshaw
    Senior Computer Specialist
    Department of Chemistry
    University of Washington
  • Windows Event logs and device Syslogs are a real time synopsis of what is happening on a computer or network. EventLog Analyzer is an economical, functional and easy-to-utilize tool that allows me to know what is going on in the network by pushing alerts and reports, both in real time and scheduled. It is a premium software Intrusion Detection System application.
     
    Jim Lloyd
    Information Systems Manager
    First Mountain Bank

EventLog Analyzer Trusted By

A Single Pane of Glass for Comprehensive Log Management