Advanced Log Analysis
Within the scope of this module, we provide you with a dedicated platform for collecting and evaluating security-relevant log data. Special use cases developed by us help you to recognise common attacker tactics and techniques and to evaluate security incidents in the specific context.
Individual use cases for reliable protection
An essential part of the Advanced Log Analytics Service (ALA) is centralised log data that we can use to monitor services and detect security incidents at an early stage. If required, forensic root cause analyses can also be carried out as part of the service.
Technologically, the ALA service is based on Splunk Enterprise - an innovative log management system that offers maximum flexibility, performance and scalability: The state-of-the-art solution is able to capture and index all types of data - besides machine data, also historical data, Windows event logs, web server logs, application logs, network feeds, metrics, change monitoring, message queues, archives and more.
Once collected and indexed, the data can be flexibly searched and correlated, individually narrowed down and combined into clear dashboards and reports to get a complete overview of the security status at any time. For a quick start, we also provide you with the solution pre-configured with the Controlware Security App. In this way, you benefit from a comprehensive collection of practical basic and cyber use cases and can fully exploit the potential of Splunk Enterprise from day one.
Contact
Do you have any questions? The "Managed Services" team will be happy to help you.
