ManageEngine EventLog Analyzer

Sobre o ManageEngine EventLog Analyzer

EventLog Analyzer is a web-based security information and event management (SIEM) solution, which assists small to large organizations with the monitoring of network devices, servers and applications. Key features include auditing, traffic analysis, threat detection, and compliance management.

The application comes with a log management module, which helps administrators collect information on network activities from multiple sources such as routers, switches, and scanners, and generate mechanism reports. EventLog Analyzer enables users to scan database servers, detect data thefts, and troubleshoot system crashes. The file integrity monitoring feature allows security teams to track changes in various file types such as system configuration/zipped and receive real-time alerts.

EventLog Analyzer lets network engineers view a chronological sequence of logs in a timeline format, allowing identification of threat patterns using correlation rules. Administrators can use the solution to monitor user activities such as log-in/out, account validation, policy changes, and data access. Malicious IP addresses, URL or domain names can be detected through the threat intelligence system by utilizing feeds at the time of risk events.