Enterprise-Class Log Management & Intelligence Appliance

"Before LogLogic, we had a difficult time collecting, analyzing and storing network and systems log data which is used for network security, availability and performance. A standardized and enterprise-wide log management solution isn't just a requirement for security and performance, it is compliance and risk mitigation best practice. Loglogic 3.0 provides us with better visibility to business impacting events and enables us to automate compliance and other related processes, saving time and money."
--
Pete Boergermann, AVP Sr. Network Engineer from Citizens and Northern Bank

Driven by compliance, risk mitigation and security, CIOs and IT departments are turning to LogLogic for log management and intelligence (LMI) as a best practice and integral part of their IT strategy.

LogLogic 4 brings more than 30 new features to LogLogic's award-winning log management and intelligence platform, with the Industry's first ever Multi-dimensional Search, LogReplay™ and Taxonomy-based Reporting. Breakthroughs in Universal Log Processing™ extend reporting, search and alerting capabilities to logs from any source - including homegrown and business applications - without custom development. Open Log Services™ provide the first integrated Services Oriented Architecture (SOA) to enable log data, reports and alerts to be routed to existing security, network management, trouble ticketing and other solutions.

Compliance and business processes can be quickly automated and portals developed so that end users can transform log data into intelligence. Reports can be created on-the-fly from indexed data. And threats to information assets and your business quickly mitigated. LogLogic 4 improves IT productivity while reducing the cost and complexity of audits, investigations and troubleshooting.

Today's log management challenge is simple but clear - collect, secure, store and extract actionable intelligence from log and audit data in real-time. Traditional tools, siloed approaches and homegrown solutions are no longer enough. More than 300 major Enterprises Globally, including many of the Fortune 500, have turned to LogLogic to underpin their compliance, security and information asset protection initiatives.

Over 30 New Features & Industry Firsts

Delivers 30 New Features. 35% Performance Increase. 2x storage of LogLogic 3 and competitors. Leading support for Oracle, IBM, Microsoft, and more.

  • First Open Log Services platform: Full Services Oriented Architecture (SOA) and Web Services Compliant. Create portals for compliance, risk and forensics - and for automating compliance and business processes.
  • Fully integrated Log Data Warehouse: Eliminate log silos in the Enterprise with an open, distributed, efficient platform. Collect and store once. Share many times.
  • Multi-Dimensional Search: Improves IT productivity, accuracy and coverage for audit, investigations and troubleshooting. "Google-like" search on terabytes of data and instant drill-down without complex scripts.
  • Universal Log Processing: Report, search and alert on logs and audit trails from any source - including homegrown and business applications - without any custom development.
  • Quad Processing™ of logs. Parse, normalize, index and alert in real-time, on single platform.

LogLogic 4 Creates Actionable Insights in Seconds

Multi-Dimensional Analytics speeds forensics & data drill-downs

LogLogic 4 is the first solution to deliver both parsing (multi-dimensional search, indexing, categorization and reporting) as well as indexing (one-dimensional search and reporting) in a single platform. This breakthrough combination combines rapid forensics with deep drill-downs on log data. LogLogic's data structure offers hundreds of fields that can be individually manipulated on-the-fly for deep analysis of terabytes of log data. Create reports and alerts off indexed data or, use LogLogic's 24 easy-to-use templates to create up to 15,000 highly customized reports. Add-on Compliance and Control suites provide more than 500 built-in best practices for compliance and support for 10 compliance frameworks including SOX, FISMA, HIPAA, COBIT 4.0 and ISO17799.

LogReplay offers richer data analysis

LogLogic's LogReplay technology allows users to re-analyze historical data using new rules and reports. Most systems only analyze logs at the time of collection meaning users can't easily re-analyze old log information through a new report with new parameters. With LogLogic 4, logs stored on the LogLogic ST device can be sent back to the LX appliance for re-parsing and secondary analysis, allowing users to respond to forensic analysis or historical trend reporting requests fast and efficiently. This is particularly useful in IT or legal investigations that require evidence from old logs that are already in long-term storage. Users can also combine new and old data for more complete, richer analysis.

Taxonomy-based reporting gives instant context for compliance

LogLogic 4 automatically classifies data into categories, such as Identity and Access Management, User Activity Monitoring, and Change and Configuration Management - the categories common to best-practice frameworks for compliance and network security. These categories provide standard, repeatable reports to support operational management, security risk management and compliance control and reporting. Taxonomy-based reporting allows administrators to easily and quickly report and alert on common activities just minutes after installation, with no custom scripting required.

Flexible, High-Performance & Open Platform Reduces Cost & Complexity

Open Log Services platform links key systems & services

With LogLogic's Open Log Services platform, users can create web portals to track compliance, risk mitigation and forensic activities and to automate various compliance and business processes. The platform's open SOAP/XML architecture enables integration with a wide variety of networking and security devices, as well as legacy applications and systems. Using Open Log Services, users route raw data, reports and alerts to existing SIEM/SIM, network management, trouble-ticket, or other IT solutions. For example, enterprises using a SIEM/SIM or other IT management consoles can use LogLogic tehnology to collect, analyze, and store high-volumes of log data in one central location, then establish bi-directional communication with the SIEM/SIM to create a seamless link between the two systems. Users can also create custom dashboards for executives and auditors by pulling IT controls information from the LMI system and combining that information with policy data from yet other applications.

The Log Data Warehouse breaks down silos

LogLogic 4 features a fully integrated Log Data Warehouse that replaces log silos with a secure, distributed, efficient platform. Now all log data can be centrally stored, streamlining access to and reporting on key information needed to demonstrate compliance, answer legal inquiries or investigate security and/or performance incidents. New aggregated search capabilities across multiple LogLogic ST systems reduce the time and resources needed for forensic analysis.

LogLogic 4 supports WORM drives with certified integration for NetApp, Snaplock, EMC Centera, and Nexsan Assureon, providing additional log archival options to ensure immutable, secure logs for extended data retention and to meet regulatory compliance.

 

Copyright © 2005 iQwest Technologies. All Rights Reserved.