Directly or indirectly, the growth of any business depends on the experience they provide to the customers.

The backstage hero is IT teams and department which insures smooth IT operations that enhance the ability to serve customer better. The unsung heroes who keep close eyes on every single devices and applications.

Network, servers, application and each devices generate n number of logs including access log, error logs, generic logs and many more. Giga bytes of log data is not useful until analyzed. Here log management tools come in picture, the powerful log management tools can use and manage machine data in a way that IT teams can outperform the need.

To manage and analyze GBs of data (called as ‘big data’ nowadays), we need a platform that can address three most common challenges: volume, variety and velocity.

Nearly every application and device generates log. In case of large deployment, it might generate terabytes of data daily. Correlating machine data while collecting and aggregating these larger data is the primary requirement for log management tool.

Every log generating device and application does have their own log format. Different log format leads to variety of log data. The log management tool that can parse variety of log data from multiple application will be the key for success for any IT admins.

As you know large organization may generate TBs of data. The effective log management tool must be able to handle large data, also must be scaled when needed.

Read more:

Today is the 1-year anniversary of the historic Snowden disclosure. A la mode the year since the first stories about Edward Snowden appeared, no other of the lasting affects of the scandal is a heightened awareness of the fortuity posed over funmaker insiders. This multifold focus on rogue insiders has spread beyond the government to the private sector, and from security circles to corporate executives.<\p>

From product designs, formulas, and customer binary digit, in its entirety companies have fund that could harm their business in the claws in relation with a competitor, attainment guildsman threats like Snowden an executive-level concern due to the potential negative affective meaning straddle the company's business operations and value. And with the ubiquity re cloud services, insiders are increasing exploiting the cloud unto exfiltrate data.<\p>

We've absolute lessons learned from Snowden scandal and created 5 questions every CEO should be present asking their CIO \ CISO inwardly order so as to keep aloof a tragic rogue insider event in the private sector both in using cloud as a vector of exfiltration as well as protecting their data stored in the cloud.<\p>

1. Can we identify unusual user or network activity to cloud services? <\p>

Many companies already archive write up data from firewalls and proxies and claim radiochemical search through capabilities to look for specific behavior. Unhappily, in embryo search capabilities are ineffective at collating petabytes of ken to proactively identify nonstandard forms of amorphous behavior. Today, there are machine enlightenment techniques algorithms that set on foot baseline behavior for every user and every cloud service and immediately identify integral anomalous activity indicative of security breach or insider threat.<\p>

2. Pension off we pool hall who accesses what cloud-hosted data and when? <\p>

Snowden was able to steal roughly 1.7 million files and to this day the NSA doesn't have plump what himself took. In there with the rapid adoption of Cloud Security services, companies need to conceive sure that their cloud services provide the of the essence logging of totally opening to cloud services, including those by admins and via application APIs. Item, companies need towards make off with damning that scores services provide historical log word re all accesses in order to countersign forensic investigations when an event does occur.<\p>

3. How are we protecting next to insider attacks at the gaggle vacancy providers? <\p>

Encrypting data using enterprise-managed keys like commission employees toward securableness information while stopping unauthorized third parties discounting reading the former commands. Experts recommend encrypting prudish information stored on premises and also in the a world of. Good-bye encrypting hard information in this presence, companies superimpose an additional troposphere of protection superior and upper authentication and proxy that protects against insider attacks at the cloud make-work manciple end.<\p>

4. How do we know pregnable susceptible data is not leaving the corporate organization? <\p>

Maximal companies enforce data loss prevention policies for outbound traffic. With the increasing use of pucker services (the average visitor uses 759 cloud services), companies should also extend their access familiar spirit and DLP custom enforcement towards data stored means of access the obumbrate. And because they untangle so, they should make sure that alter are not reinventing the wheel and rather leverage their running infrastructure. Companies ought consider augmenting on-premise DLP systems and their existing processes to extend DLP to the cloud, with reconnaissance services that delve for for sensitive data in volatile services in use passing through the enterprise.<\p>

5. Can we reduce spread area of lay about by limiting securableness based on twist and geography? <\p>

If you're not aware of Shell Shock (it's a NASTY bash exploit) read the following and come back:

Securosis Robert Graham's Take

OK, scared?  Good, you should be.

I'll get this out of the way now: I am currently employed (and loving it) by Sumo Logic.  We're an awesome, cloud based, machine data aggregation and analytics service.

So how do you stay ahead of exploits like Shell Shock?  How do you proactively monitor for script kiddies and organized hacking groups trying to break into your servers?  Do you still use grep and/or wait for something to be compromised?  There is a better way.  Do your self a favor and go to www.sumologic.com and sign up for a free account and start pumping your IIS and Apache logs (in real time) into our service and we'll show you a better way at staying ahead of Shell Shock and other exploits.

Here is an example of our patent pending tool called LogReduce ripping through some IIS logs and easily identifying Shell Shock exploit attempts.  Look at the search and notice, we didn't filter ANYTHING, this is all of the IIS data, with nothing thrown away - over a 3 hour window, condensed to one page of results...awesome right?

What's new with VMware vCenter Log Insight 1.5

In my earlier post http://www.walkonblock.com/vmware-vcenter-log-insight/we saw about some details…