For more information on LEM, visit: http://www.solarwinds.com/log-event-manager.aspx Watch this webcast: http://www.solarwinds.com/resources/webcasts/back-to-the-basics-of-log-and-event-management.html Everyone in the IT industry seems to talk about log and event management, but what makes it so important? Is it really something we need to be concerned about? Join SolarWinds Geeks (a.k.a. Sales Engineers) Chris Jeffreys and Rob Johnson, as they discuss the importance of log and event management, why it is so vital, pitfalls we’re likely to encounter and some possible solutions available in SolarWinds Log and Event Manager 5.4. Topics to be covered include: • What is Log and Event Management? • Why is it so important? • What problems does it present? • How can we make it more manageable? • LEM 5.4 – How it can help?

1. A SolarWinds®
Geek Speak
© 2012 SOLARWINDS WORLDWIDE, LLC. ALL RIGHTS RESERVED.

2. Today’s Session
Hosts
Chris Jeffreys – Sales Engineer
Gerry Pond – Education & Certification Specialist
Producer – Catherine Jackson
®
Are You Certified?

3. A Few Notes about Today’s Session
 Today’s Session will be an Overview of Log and Event
Management Technologies
» We only have an hour
 Ask Questions!
» Don’t wait until the end – ask away!
© iStock photo

4. Agenda
 Introductions & Housekeeping
 Why Does Log Management Matter?
 Log and Event Management Basics
» Events and Logs
» Normalization
» Correlation
» Data Volume Management
» Compliance
» Security
 Summary and Q&A
© iStock photo

5. Log and Event Management
 Why is Log and Event Management Important?
» Security Visibility
• See the details of events from multiple points
» Compliance
• Risk mitigation and avoidance
» Control
• Ability to act on the information
© iStock photo

6. Log and Event Management
 Events
» What Triggers an Event?
» How are Events Defined?
» Are there Standards for Events?
 Logs
» What Entities use Logs and Why?
» Are there set Formats and Conventions?
» How many Types of Logs are there?

7. Log and Event Management
 Normalization
» Fits Event Information into Defined Formats
» Eliminates Unnecessary or Duplicated Information
» Allows for Comparison of Events from Disparate Sources
© iStock photo

8. Log and Event Management
 Correlation
» Automated – Too Data Intensive for a Manual Process
» Allows an Understanding of Event Scope
• How many systems saw the event and where?
 Reduces the Event Data
» Allows the same event across multiple systems to be seen as one
event
© iStock photo

9. Log and Event Management
 Data Volume Management
» Logs may send much more Data than you need
» Understand the System Types and Know which may need Log Tuning
• Windows® PC OS for example
» Other Technologies for Data Reduction
© iStock photo

10. Log and Event Management
 Compliance
» Medical, Financial, Government
» Again, automation is key!
• Comparison between events and requirements
• Automate reporting and violation notifications
© iStock photo

11. Log and Event Management
 Security
» Unapproved devices
• USB
» Security Events
• Hacking, attacks, snooping and spoofing
• Provide cope and duration information
© iStock photo
- Slide 11 -

12. SolarWinds Log & Event Manager
- Slide 12 -

13. Additional Resources
Thwack Forums
http://thwack.solarwinds.com/
Support Site
http://www.solarwinds.com/documentation/
SolarWinds Knowledge Base
http://knowledgebase.solarwinds.com/kb/
SolarWinds Log and Event Manager
http://www.solarwinds.com/products/log-management/log-management.aspx

14. Wrap-Up
To learn more or to download free 30-day
trials of SolarWinds products visit:
www.solarwinds.com
Contact information
Chris.Jeffreys@solarwinds.com
Gerry.Pond@solarwinds.com
P.S. Remember to renew your maintenance!!!

15. © 2012 SOLARWINDS WORLDWIDE, LLC. ALL RIGHTS RESERVED.