The GDPR compliance is demanding that we use automated event log monitoring on our 8-9 servers.
Which tool would you recommend using for this Windows environment? Why?
Thanks in advance for your help!
Consultant at a computer software company with 11-50 employees
May 4, 2022
SolarWinds SEM (Security Event Manager) is quickly implemented, easy to understand and will do the job regarding GDPR and other compliance regulations.
Getting events from Windows Servers is an easy task with the Agent.
If you have more time for the topic and are more into deep data analytics probably other solutions may be more satisfying.
That would also depend on how much the budget will support and how granular you want to get.
If you want a full solution that will be significantly more than a patched-together solution using open source tools and Windows native logging tools.
What specifically are your objectives? Do they want to scan events for PII, health data, simple website cookies and expirations?
This is a complex question and much more detail, in a general sense, is needed for proper context.
Hot data is necessary for live security monitoring.
Archive data (cold data) is not available fastly. It takes days to make archive data live if the archive data time frame is more than 30 days (in most of the SIEM solutions).
As an example, SolarWinds said the attackers first compromised its development environment on Sept. 4, 2019. So, to investigate the SolarWinds case, we have to go bac...
Splunker, Networking and E-Mail Security Architect, Engineer and Guru at a healthcare company with 10,001+ employees
Sep 13, 2021
We changed our model to be able to cover such critical long-term cases.
We upload all our critical log sources to AWS S3 for a 3-year retention period. Based on compliance needs we either leave the log files as-is or scrub them from metadata that does not serve any purpose.
In a second pass, we then inject the last 180 days of data into our SIEM. Should the need be we can always search our original log files for required data or re-ingest older data.
This helps us save money while addressing security needs.
Hi PeerSpot community members,
This is a fresh-from-the-oven Community Spotlight for you. Here, we've summarized and selected the latest posts (professional questions, articles and discussions) by PeerSpot community members. Check them out!
Also, please share with us your feedback and suggestions by commenting below!
See what is trending at the moment and chime in to discuss!
PeerSpot’s crowdsourced user review platform helps technology decision-makers around the world to better connect with peers and other independent experts who provide advice without vendor bias.
Our users have ranked these solutions according to their valuable features, and discuss which features they like most and why.
You can read user reviews for the Top 8 Log Management Tools to help you d...