Assuria Log Manager
Assuria Log Manager (ALM) is designed to meet the requirements of enterprise wide management of audit logs generated by systems, devices and applications. ALM is equally applicable to installations with ten systems or tens of thousands of systems.Assuria Log Manager manages large communities of logs from Servers and Workstations, Windows, LINUX and UNIX as well as Databases, Applications and network devices such as firewalls and routers. Assuria Log Manager does not preclude the collection of logs from other devices such as building access control systems.
Features
Enterprise wide log collection. Secure and forensically sound collection of logs into a central store.
Real-time alerts. Configurable to specific log events, sent via SNMP or configurable to other tools.
Agent based collection ensures the Security, Continuity and Integrity of all collected logs.
Digitally signed. A SHA256 checksum is calculated and the log digitally signed before transfer. The transfer of logs over the network is encrypted using TLS.
Secure storage. Log cataloguing, chain of custody records, archive creation and management.
Archive to secure long terms storage, complete with a digitally-signed manifest.
Forensic readiness. Centrally stored, with all of the handling of the logs preserving the original format so that forensically sound data is available for investigation when required.
Scalable and Modular architecture. Designed to support from 1 to 000’s of log sources.
Content packs provided by Assuria are flexible and extensible used to describe each log allowing ‘interesting events’ in the collected logs to be tagged and indexed within the ALM database.
Analysis: Collected logs are processed by a rules-based analysis engine, allowing ‘interesting’ events to be tagged and written to a database for further analysis and reporting.
Reporting. Flexible analysis, correlation, aggregation and reporting in HTML or PDF.
Console. Assuria Log Manager Console provides all agent control and the management of collected logs along with facilities to run queries, generate and print reports.
Assuria Log Manager Architecture and components
Assuria® is a registered trademark of Assuria Limited.
Assuria Auditor and AutoUpdate are trademarks of Assuria Limited.
System Scanner and X-Press Update are registered trademarks of Internet Security Systems Inc. of Atlanta, Georgia, USA
© Copyright 2005, 2006, 2007, 2008 Assuria Limited. All rights reserved.
05/08/2008
