Introduction > Products > LogRhythm (SIEM)

LogRhythm SIEM (Security Information and Event Management)

Typically organizations acquire and managed separate products for log management, event management, file integrity monitoring and endpoint monitoring & control. LogRhythm brings these traditionally disparate functions together in one fully integrated system. With LogRhythm, organizations can quickly and efficiently comply with government regulations, secure their networks and optimize the availability and performance of their IT infrastructures.

LogRhythm automates the collection, organization, analysis and archival of all log data, providing real-time correlation and alerting of critical events, intelligent IT search and extended visibility and control to activity on desktops and laptops. LogRhythm empowers organizations to efficiently comply with numerous regulatory requirements and gain valuable, timely and actionable insights into security, availability, performance and audit-related issues within their infrastructures.

LogRhythm is cross-platform, highly-reliable and easily-scalable across an enterprise, providing a completely integrated, easy-touse solution for organizations of all sizes.

Get quick overview: Demo video (4 MB)

 

Design of LogRhythm						GUI
						Monitoring	Dashboard	Reporting
						Monitoring	Alerting	Reporting

 

LogRhythm Delivers Increased Protection and Greater Compliance Assurance in One Solution

LogRhythm offers organizations the convenience and value of best-in-class log & event management, near real-time File Integrity Monitoring & Endpoint Monitoring & Control in one solution.

Most organizations face regulatory requirements for log management, event management, file integrity monitoring and endpoint monitoring and control. Whatever the driver – PCI DSS, SOX, HIPAA, FISMA, NERC CIP, GLBA, GCSx, etc. – organizations in a wide array of industries face huge challenges meeting these requirements easily, efficiently, and affordably. The common approach is to buy, install and manage distinct products to address each of these four functional mandates. The cost of acquisition, deployment and ongoing management of disparate solutions, even if they are offered by one vendor is substantial. That’s where LogRhythm comes in.

By fully integrating Log & Event Management with File Integrity Monitoring and Endpoint Monitoring & Control in one solution LogRhythm enables customers to:

• Reduce acquisition costs
• Decrease the “Time-to-Comply”
• Simplify ongoing management
• Increase the collective value derived from their solution

 

One Integrated Solution

	LOG & EVENT MANAGEMENT			FILE INTEGRITY MONITORING			ENDPOINT MONITORING & CONTROL
	Automatically centralize & archive ALL logs Real-time event monitoring & alerting Powerful analytics & trending Automated reporting Real-time correlation & forensic investigations High-performance, scalable & easy-to-use Performs log deduplication for enterprise-wide data reduction			Monitors ALL types of files in near real-time Provides “user-aware” context to file changes Automated alerting on changes to critical files Fine-grain controls & filters Out-of-the-box policies provided for O/S & common applications Tracks user views/modifications of confidential files			Prevents the movement of data to & from removable media Extends Monitoring of data use to desktops/laptops Independently audits & logs the transfer of data to and from a variety of removable devices Alerts & reports on inappropriate data transfers Performs user activity monitoring for independent user access auditing
	Intelligent IT Search Pre-packaged Compliance Reports-Alerts-Investigations Fully Integrated Centralized Mnagement Console

 

Turnkey Appliance Solutions

LogRhythm appliances provide turnkey, scalable solutions for enterprises of all sizes. All software is
pre-installed, configured and ready to go. Just add logs.

LogRhythm appliances come in five convenient models, including two new File Integrity Monitoring bundles that include System Monitor Pro agents. Because of LogRhythm’s distributed, incrementally scalable architecture, deployments can start with a single appliance and scale from there by simply adding appliances. Regardless of the performance, storage or geographic requirements, LogRhythm is architected for flexible and efficient scaling.

Model	LRX1 (1U) LM/EM/XM	LRX2 (2U)  LM/EM/XM	LRX3 (3U)  LM/EM/XM
Processor	Quad Core Xeon	2x  Quad Core Xeon	2x  Quad Core Xeon
Memory  / HDD	12 GB / 2x73GB + 4x 146GB	24 GB / 2x146GB + 6x 300GB	32 GB / 2x146GB + up to 2,5TB
OS	64bit WIN Server 2003/2008 R2	64bit WIN Server 2003/2008 R2	64bit WIN Server 2003/2008 R2
Database	SQL 2005 Enterprise (3C)	SQL 2005 Enterprise (5C)	SQL 2005 Enterprise (5C)