November 25, 2008

Log and Event Management Solution Secures Phoenix Suns

Team takes LogRhythm product and runs with it
RSS
Subscribe to Windows IT Pro | See More Security Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!
back to blog index

While the Phoenix Suns NBA basketball team hits the boards at practice, the Phoenix Suns IT staff hits the server room. The four-person team manages 30 or so servers and infrastructure devices. "To say they're pressed from a staffing perspective is an understatement,” says Mike Reagan, vice president of marketing at LogRhythm. Which, he says, is one reason why the vice president for IT at the Suns chose LogRhythm’s integrated solution of the same name, which incorporates log management, log analysis, event management, and reporting.

“They were missing information that could prevent outages and security breaches. Though they hadn’t had any breaches, they wanted to be proactive.” Log data from server and devices provided information but the Suns didn’t have the staff to mine it.

In looking for a solution, the IT team checked out log management solutions and event management solutions. Ease of deployment and ease of use were most important. “A lot of organizations going to log and event management are short on staff and can't allocate a person to go off and become an expert,” Reagan says. “Bill Bolt [the Suns VP of IT] wanted to monitor his Windows server logs and email Exchange logs. We demoed and showed him he could also monitor infrastructure event logs. A Windows server log looks different from a firewall log, but we put all the information into a single format through a log normalization process and correlate and extract the data.”

In the past 18 months, Reagan says, LogRhythm has acquired 70 percent of its customers because of compliance. “Analysts see this growing in importance, too. IT needs tools to get insight to cut problems off at the pass—often drilling into user logs or server logs will give you insight.” Out of the box, LogRhythm can be set up with canned alarms and reports; after log sources are set, you decide the frequency. To meet compliance requirements, the solution lets you generate reports on a regular basis and email them. Data is archived on the Log Manager appliance, which is part of the LogRhythm solution. Metadata is kept online in LogRhythm’s Log Mart tool, which lets IT staff search for trends and anomalies. Most clients use Active Directory logon privileges to access the device, Reagan says, though it lets you define specific users as well. To learn more, visit LogRhythm's website.

End of Article



Windows IT Pro Community
Blogs






Search Industry Bytes
 
Industry Bytes
JANUARY 2009
     1 2 3
4 5 6 7 8 9 10
11 12 13 14 15 16 17
18 19 20 21 22 23 24
25 26 27 28 29 30 31
       
or

 Recently in Industry Bytes
Computerless Email for the Technology Challenged
Make a Comment
Technology Aims to Prevent Cell Phone Use While Driving
Make a Comment
A 5-Step Security Plan
Make a Comment
Great IT Words: #158 from Jeff the Security Expert: Munge
Make a Comment
Hosted and Bundled: A Complete Messaging and Collaboration Solution

Last Comment
nSynergy SharePoint Document management and collaboration software architectures allow organisations...
(2 Comments)

More blogs about technology,
software, and Windows.

SQL Server Magazine Office & SharePoint Pro Windows Dev Pro ITTV
IT Library Technology Resource Directory Connected Home Windows Excavator Windows SuperSite
 
 Windows IT Pro is a Division of Penton Media Inc.
 Copyright © 2009 Penton Media, Inc., All rights reserved. Terms and Use | Privacy Statement | Reprints and Licensing