McAfee Enterprise Log Manager

Reduce compliance costs with automated log collection, storage, and management

McAfee Enterprise Log Manager collects, compresses, signs, and stores all original events with a clear audit trail of activity that can’t be repudiated.

Comprehensive log collection and management

Universal event log collection and retention meets compliance requirements and supports chain of custody and forensics.

Flexible storage

Adapt storage and retention appropriate to each log source. Store logs locally or via a managed storage area network.

Rich context for analysis

Leverage built-in event log management, analysis, and search functions.

Integrated with your infrastructure

McAfee Enterprise Log Manager is an optional, integrated component of McAfee Enterprise Security Manager that advances security investigations and incident response.

Download Data Sheet

Automate event log management and analysis

Intelligent event log management

McAfee Enterprise Log Manager collects logs intelligently, storing the right logs for compliance, and parsing and analyzing the right logs for security.

Meet compliance log retention requirements

Collect, sign, and store any log type in its original format to support specific compliance needs. Unaltered original log files support chain of custody and non-repudiation efforts.

Store logs locally or via a managed SAN

Customizable storage pools ensure logs are stored correctly, for the right amount of time. Choose from flexible storage options, including HDD appliance storage, and optional DAS and SAN storage.

A Gartner Magic Quadrant Leader

McAfee is a leader in the Gartner Magic Quadrant for SIEM for the seventh year in a row.

Download Report

McAfee Connect

Maximize the value of your McAfee Enterprise Security Manager with pre-built content packs to streamline security monitoring, threat management, and incident response.

Learn More

System requirements

McAfee Enterprise Log Manager can be deployed as a physical or virtual appliance. Specific McAfee Enterprise Log Manager models require McAfee Enterprise Security Manager (ESM) and McAfee Event Receiver (ERC). McAfee SIEM appliance specifications and descriptions are provided for information only, subject to change without notice, and provided without warranty of any kind, expressed or implied.

Model Number	Appliance Size	Local Storage¹	CPU Cores	System Requirements
ELM-VM-8	VM	Recommended 250GB	8	VM (AWS, ESX, KVM), 4GB of memory
ELM-VM-12	VM	Recommended 500GB+240GB SSD²	12	VM (AWS, ESX, KVM), 64GB of memory
ELM-VM-32	VM	Recommended 2TB+480GB SSD²	32	VM (AWS, ESX, KVM), 96GB of memory
ELM-4700	2U	5.6 TB SSD	28	Requires ESM or ETM and ERC
ELM-5700	2U	32 TB + 800 GB SSD	20	Requires ESM or ETM and ERC
ELM-6050	2U	40 TB + 800 GB SSD	28	Requires ESM or ETM and ERC

¹Usable event and flow data storage capacity will vary by customer event types, event rates, software version, and other factors.
²Minimum 50K IOPS for SSD; additional storage should be a minimum of 100 IOPS.

Need additional technical resources? Visit the McAfee Expert Center >

Customer success stories

MGM Resorts International

Global Entertainment and Resort Company Continues to Slash Time to Protect, Detect, and Correct.

County Durham Darlington NHS Trust

By building an adaptable security infrastructure based on the McAfee integrated security platform, this small information security team at a UK acute healthcare provider...

View all customer success stories

Learn more about McAfee Enterprise Log Manager

REPORT

Gartner: Critical Capabilities for Security Information and Event Management

As a companion to the Gartner Magic Quadrant for SIEM, the Gartner Critical Capabilities report for SIEM helps IT security organizations compare their requirements with the most common SIEM use cases. Discover in-depth how Gartner rates McAfee SIEM by critical capabilities.

Read Report >

DATA SHEET