RE: Logging

["Lee Hilt" <lhilt () mbc edu>]

If you are simply looking for a storage solution, (logs in, emails on
threshold of error rates, etc) Kiwi would be the way to go. 

If you are looking for a more granular look, along with searchable questions
like "Show me accounts with a high incidence of password failures" and other
questions, your solution might best be serviced by

http://manageengine.adventnet.com/products/eventlog/index.html

Pricing is kinda high, but it is a pretty good product.
 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Krzyston, Randy
Sent: 2008-01-18 1:19
To: security-basics () securityfocus com
Cc: listbounce () securityfocus com
Subject: Logging

We are looking to implement a syslog server.  It needs to not only be
capable of storing logs ,but also detailed reporting for things such as SOX.
I've looked at LogLogic's products.  I also heard about Kiwi, but have not
experience with it.

Any comments?


Randy