Log Management Forum
Jan 21 2020
Let the community know what you think. Share your opinions now!
Jeff Uhlich-Searchability -Compression -Encryption
it_user632850Log compression and metadata storage capability Ease of implementation/integration Relational or Full Text English Query Support, Efficient Query Response Compatibility with existing security vendors/products Responsiveness of Tech Support and Integration Support Services Support for breadth of security vendors and speed of new security product log integration ID Management, Ticketing, and Geolocation Visualization Support
Gerrit BoeleLog Management should be a separate function of correlation. Correlation is best served in a SIEM tool. Analytics technology can be something that crawls your meta data to find issue, but buying a log management tool that does correlation is asking the bus boy to cook dinner. He can do it cause he is in the restaurant but doesn't mean the food will be good.