HCL Technologies uses Log360 to solve log management challenges in thin clients

Challenges

HCL has a large employee count at their office in Noida, India. As a software company, HCL has a constant need for computers, which is directly reflected by its infrastructure spending. To cut down on spending, HCL started providing its employees with systems running on thin clients. However, managing logs from those thin clients turned out to be an issue. Thin clients have comparatively little storage, which limits the volume of data that can be saved in them. In HCL's case, the built-in memory for those thin clients was insufficient for storing the logs generated by them.

The Solution

The person in charge of IT security in HCL's Noida office, Arvind Kumar, learned about ManageEngine's SIEM solution, Log360, and decided to give it a try. Log360 doesn't require built-in drive space in any device that it collects logs from—instead, logs are transferred to a central repository, where they're parsed, indexed, and analyzed to create reports. This process of log collection convinced Kumar that Log360 was ideal for addressing the challenge his company was facing. When the trial period ended, he opted for the paid version of the product.

After using Log360 for a considerable amount of time, Kumar expressed his satisfaction with the product. He mentioned that Log360 and its sub-components were extremely helpful, particularly for audits. It helped his team sail through audit processes, which would have otherwise been cumbersome.

Key features of Log360

Log360 is a tightly-integrated SIEM solution combining the capabilities of five of ManageEngine's most powerful tools: ADAudit Plus, EventLog Analyzer, O365 Manager Plus, Exchange Reporter Plus, and Cloud Security Plus. Some of the important features that Log360 offers are:

• Monitoring and auditing for critical Active Directory changes in real time.
• Automatic collection, analysis, reporting, and archiving of logs from Windows and Linux/Unix machines, IIS and Apache web servers, SQL and Oracle databases, and perimeter security devices.
• Real-time reporting of critical events in Azure Active Directory, Exchange Online, and Microsoft Exchange Servers.
• A holistic view of activities happening in AWS and Azure cloud infrastructures.
• Real-time feeds from STIX/TAXII servers to protect networks from malicious IPs and URLs.

About Log360

Log360 is a unified SIEM solution with integrated DLP and CASB capabilities that detects, prioritizes, investigates, and responds to security threats. Vigil IQ, the solution's TDIR module, combines threat intelligence, an analytical Incident Workbench, ML-based anomaly detection, and rule-based attack detection techniques to detect sophisticated attacks, and it offers an incident management console for effectively remediating detected threats. Log360 provides holistic security visibility across on-premises, cloud, and hybrid networks with its intuitive and advanced security analytics and monitoring capabilities. For more information about Log360, visit manageengine.com/log-management/ and follow the LinkedIn page for regular updates.