McAfee Enterprise Log Manager automates log management and analysis for all log types, including Windows Event logs, Database logs, Application logs, and Syslogs. Logs are signed and validated, ensuring authenticity and integrity — a necessity for regulatory compliance. Out-of-the-box compliance rule sets and reports make it simple to prove your organization is in compliance and policies are being enforced.
Using this tightly integrated log collection, management, and analysis environment will both strengthen your security profile and dramatically improve your ability to comply with over 240 standards, such as PCI DSS, HIPAA/HITECH, NERC-CIP, FISMA, GLBA, and SOX.
Intelligent log management — Enterprise Log Manager collects logs intelligently, storing the right logs for compliance, and parsing and analyzing those logs for security. You can retain logs in their original format for as long as you require for specific compliance needs. Since we do not alter the original log files, McAfee supports chain of custody and non-repudiation efforts.
Integrated with Enterprise Security Manager — Enterprise Log Manager is an optional, integrated part of McAfee Enterprise Security Manager. While Enterprise Log Manager stores the logs, they can be deeply parsed, normalized, and analyzed by Enterprise Security Manager. Log information is immediately available for real-time security investigations and incident response.
Collect, sign, and store any log type in its original format for as long as you require to support your specific compliance needs.
Use easily customizable storage pools to ensure that your logs are stored correctly and for the right amount of time.
Differentiate logs stored for compliance from logs to be parsed and analyzed for security.
Choose the best storage option for your needs — with up to 7.5 TB of usable HDD storage on the appliances, and optional fiber channel cards for high-speed SAN storage.
Get one-click access to original log files and even the specific log record from any point in the event management process.
Provide log management and retention capabilities to support advanced use cases, including:
| Hardware Specifications | ELM-5750 | ELM-5510 | ELM-5205 | ELM-4245 |
|---|---|---|---|---|
| Collection Rates | 50,000 events per second | 35,000 events per second | 20,000 events per second | 40,000 events per second |
| Analytical Performance | 7 TB | 3.75 TB | 2.5 TB | N/A |
McAfee integrates NitroSecurity products into its portfolio, improving its SIEM offering.
Topics : SIEM
For a technical summary on the McAfee product listed above, please view the product data sheet.