SureLog User Guide
SureLog User Guide
Preface
Intended Audience
Technical Support
Chapter 1: Introduction to SureLog
Comprehensive Log Data Collection and Log Management
Cross-Platform Log Collection
Windows Event Logs: Agent-less or Agent-based
Supported Devices
Supported Applications
Supported Operating Systems
Supported Network Devices
Introduction to Syslog Protocol
SNMP Trap Reception and Processing
SureLog Server Features
Chapter 2: System Requirements
Supported Operating Systems
Hardware Requirements
Chapter 3: First Time Users
Installing and Uninstalling SureLog
Uninstalling SureLog
Accessing the Web Client
Navigating Through SureLog
Login and Log out
Chapter 4: Performance
Why Fast EPS Performance Matters
Chapter 5: Dashboards
Transition Between Dashboard
To add a Statistic Report on Dashboard
To add a Top list Report on Dashboard:
To add a Trend Report on Dashboard:
To add a SQL Query Report on Dashboard:
To add a SQL Query (Graphic) Report on Dashboard:
Last Logs
Log Sources
Drill –Down Feature
Adding a Dashboard Panel
Customizing Dashboard View
Chapter 6: Reports
Log Management
Creating Dynamic Top List Reports
Statistics
Schedule Reports
Combining Reports
Creating Reports
Creating Statistics Reports
Creating Report Categories
Chapter 7: Search
Google like Search
Structured Search
Chapter 8: Compliance Reports
Payment Card Industry – Data Security Standards (PCI-DSS) Compliance Reports
Health Insurance Portability and Accountability Act (HIPAA) Compliance Reports
Federal Information Security Management Act (FISMA) Compliance Reports
Sarbanes-Oxley Act (SOX) Compliance Reports
Gramm-Leach-Bliley Act (GLBA) Compliance Reports
ISO 27001:2013 Compliance Reports
Chapter 9: Correlation
Why Use Correlation?
SureLog Correlation GUI
SureLog Advanced Correlation Engine
Out-of-the-Box Correlation Rules
Advantages of SureLog Correlation Engine
Template Rules
Chapter 10: Creating Custom Correlation Rules
Observed Rule
Treshold Rule
Trend Monitor Rule
Statistic Rule
Value Changed Rule
Never Seen Before Rule
Add List Rule
Expert Rule
Chapter 11: Alerts
Activating an alert
Chapter 12: Historical Correlation
Chapter 13: User Management
Chapter 14: Incident Management
Chapter 15: Maps
Chapter 16: Threat Intelligence
Chapter 17: Settings
The Update Changes
Changing Theme
General Configuration
General Configuration
Managing Protocol Groups
DNS Converter
Mail Configuration
Log Configuration
Schedule Configuration
Domain Configuration
Correlation Configuration
Network User Configuration
File Access Configuration
Network Access Configuration
Intranet Configuration
ARP Table Configuration
License Configuration
Backup Configuration
Custom Parser Configuration
User Activities:
Configuration Files:
Log Files:
Data Storage Options:
Database Console:
File Sign Control:
AD (Active Directory) Authentication
Tag Configurations
Preparser Rule
Powered by
GitBook
Chapter 11: Alerts
Chapter 11: Alerts
results matching "
"
No results matching "
"