Progress WhatsUp Log Management
Collect, Analyze, and Report Log Data

Overview:

A modular set of applications that can automatically collect, store, alert, analyze and report on log files for real-time security event detection and response.

Log files contain a wealth of information to reduce an organization’s exposure to intruders, malware, damage, loss and legal liabilities. Log data needs to be collected, stored, analyzed and monitored to meet and report on regulatory compliance standards like Sarbanes Oxley, Basel II, HIPAA, GLB, FISMA, PCI DSS, MiFID and NISPOM. Yet, monitoring log files is impossible without the right tools since log files come from many different sources, in different formats, and in massive volumes.

Introducing WhatsUp Log Management Suite

A modular set of applications that can automatically collect, store, alert, analyze and report on Windows Event, Syslog and W3C/IIS log files for real-time security event detection and response, and compliance assurance and forensics. And, when you integrate the suite with your installation of WhatsUp Gold, you’ll have insight into your network and log data from a SINGLE pane of glass.

Event Archiver: Automate log collection, clearing and consolidation. Great for assisting in auditing and regulatory compliance.

Event Alarm: Monitor log files and receive real-time notification on key events. Great for intrusion detection and monitoring for domain controller lock-outs and file or folder access.

Event Analyst: Analyze and report on log data and trends. Automatically distribute reports to management, security officers, auditors and other key stakeholders.

Event Rover: Single console for in-depth forensics across all servers and workstations to increase efficiency and save time.

IT operations, compliance officers and security personnel can be sure that the WhatsUp Log Management Suite will not only capture and document every event, but also deliver:

• Comprehensive visibility into internal and external security threats
• Automated collection of Windows Event, Syslog or W3C/IIS logs across your entire infrastructure
• Easier regulatory compliance with point-and-click reporting
• Multi-year data storage to comply with key regulations (i.e. HIPAA mandates six years of retention)
• Ability to correlate events from different sources in a single, holistic view
• Protection of archived log data from tampering via FIPS 140-2 validated cryptographic hashing – key for evidentiary use
• FIPS 140-2 encryption & validation – the highest level of cryptography
• Real-time data views, status and alerting
• Reduced effort to locate and remediate events
• Achieving regulatory compliance at reduced cost

Store and analyze log files quickly. Get compliance ready.

The Log Management Suite is an automated tool that collects, stores, archives and backs-up Syslog, Windows events, or W3C/IIS logs. Get alerted to suspicious activities with continuous log monitoring.

Features:

• Document and prove compliance for key compliance initiatives such as HIPAA, SOX, MiFID, etc., with out-of-the-box, point-and-click reporting
• Protect archived logs via cryptographic hashing (key for evidentiary use)
• Identify unauthorized events immediately (i.e. access to folders containing sensitive data)
• Collect Auotmatically Syslog, Windows Event or W3C/IIS log files across your entire infrastructure
• Store log data as long as you need to – multi-year data storage capabilities help you comply with key regulations
• Analyze and Extract the right information across thousands of log entries
• Report on critical errors or compliancecentric failures right from a WUG dashboard
• Remote & agent-based collection of Syslog, W3C/IIS and Windows Event Files. Log Management adapts to your network security policies, simplifies configuration tasks and saves time

System Requirements:

Software Requirements

The WhatsUp Log Management Suite runs on several 32-bit and 64-bit Windows operating systems. The following is a list of the Windows operating system and release requirements for the WhatsUp Log Management Suite.

• Microsoft Windows 7 Professional / Ultimate
• Microsoft Windows XP Professional SP2
• Microsoft Windows Server 2003 SP2
• Microsoft Windows Server 2003 R2 SP2
• Microsoft Windows Server 2008 SP2
• Microsoft Windows Server 2008 R2 SP1
• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 R2 (support added in 10.1.8)

Database Requirements

The WhatsUp Log Management Suite v10 has been tested against and supports:

• Microsoft SQL Server Express 2005 (local installation only)
• Microsoft SQL Server 2005 Workgroup or greater installation (local or remote installation)
• Microsoft SQL Server Express 2008 R2 (local or remote installation)
• Microsoft SQL Server 2008 Workgroup or later edition (local or remote installation)
• Microsoft SQL Server 2008/R2 Standard or Enterprise Editions (local or remote installation)
• Microsoft SQL Server 2012 Express, Standard, or Enterprise Editions (local or remote installation) (support added in 10.1.5)
• Microsoft Access MDB files for small implementations

For small organizations with 5 or fewer servers who do not own a license of Microsoft SQL Server, Microsoft SQL Server Express 2008 R2 is the recommended platform, as it provides the greatest maximum database size (e.g. 10GB) in a free version. However, networks who wish to collect and analyze logs from over 5 servers should acquire license(s) for the Workgroup or later edition of Microsoft SQL Server 2005 or 2008, as there is no maximum database size limit in those versions.

Hardware Requirements

• Dual-core 2GHz or faster processor
• 2 GB RAM or greater
• 4 GB available hard disk space minimum for data and/or database storage. The hard disk space required is completely dependent on the volume of log data stored, how long the data is stored, and how the data is stored (e.g. in compressed EVT/EVTX files and/or in database tables)

Documentation:

Download the Progress Log Management Datasheet (.PDF)