View Cart  

EventLog Analyzer

ManageEngine EventLog analyzer is licensed based on the number of log sources (devices, applications, Windows servers, and workstations) added for monitoring.

Note: If you monitor an application and also the server in which the application is installed, then you will be licensed for 1 log source.
Enter value for atleast one primary component. +
ico-get-quo-ban

Thank you for your interest in EventLog Analyzer.

Please fill-up the form to get a personalized quote, that best suits your requirements. Our sales representative will get back to you shortly.

   
 
Number of Log Sources
( Windows Servers, Linux/Unix , Firewalls, Routers, Switches, IDS/IPS, AS400, Microsoft SQL Server, IIS Sites and Other applications)
Number of Endpoints
(Windows Workstation)
Number of Cloud Accounts
(AWS Accounts, Microsoft 365 Tenants)
 
   
 
Onboarding and Implementation (optional)
By signing up, I agree to the terms of service and Privacy Policy.
 
Compare Editions EventLog Analyzer is available in two editions viz., Premium and Distributed Edition.
×
Features Free Edition * Premium Distributed
Multiple OS Support Available Available Available
Monitored Device Support
(Windows, Linux, Unix, AIX, Routers, Switches, VMWare,
Any Syslog device)
Available Available Available
Customizable dashboard widgets Available Available Available
Log search using boolean operator, phrase, value ranges, wildcards & grouped search Available Available Available
FTP Active Mode support for log file import Available Available Available
Import and Analyze Event files Available Available Available
Auto Discovery of Hosts Available Available Available
Filter Events before Storing in Database Available Available Available
Compressed Archives Available Available Available
Archive log files encryption Available Available Available
Hashing and Time stamping of Archive log files Available Available Available
Real-time Display of Events Available Available Available
Automated Alerts Available Available Available
Authorized Access Available Available Available
Host Grouping for Policy Implementation Available Available Available
Schedule Data Collection Available Available Available
Custom Reports Available Available Available
Scheduling Reports Available Available Available
PUMA Reports Available Available Available
Multiple Report Formats Available Available Available
Multi-level Drilldown Available Available Available
Trend Analysis Available Available Available
Security Analysis Available Available Available
Compliance Reports (EventLog & Syslog) (Predefined and Customization) Available Available Available
Command Execution on Alerts Available Available Available
SMS and SNMP Trap Notification for Alerts Available Available Available
Internationalization Support to handle Native Logs Available Available Available
Export/Import of Alert, Report, and Filter Profiles Available Available Available
Advanced Search in Raw Logs, Save Result as Report Profile Available Available Available
Scheduled import from local and remote (FTP/SFTP) machines Available Available Available
Log collection during log collector down time Available Available Available
Monitoring Users Accessing EventLog Analyzer Application Available Available Available
File Integrity Monitoring   Available Available
Server specific reports     Available
Multi-geographical location monitoring     Available
Scalable architecture     Available
Log field extraction using an interactive regular expression (regex) syntax builder   Available Available
Universal log parsing and indexing (ULPI) to support any log format (Human Readable & non-encrypted log formats)   Available Available
Import users from Active Directory groups   Available Available
Agent for log collection across WAN/Firewalls   Available Available
Import of saved Syslog Files   Available Available
Re-branding Web Client   Available Available
Instant Reports   Available Available

Analyze Application specific Logs

  • MS IIS Web server
  • MS IIS FTP servers
  • DHCP Windows server
  • DHCP Linux server
  • MS SQL database
  • Oracle database
  • Apache Web server
  • Print server
  Available Available
Support for MS SQL Server and MS SQL Cluster as Backend Database   Available Available
Custom View & User based Views   Available Available
Active Directory & RADIUS Server based Third Party User Authentication   Available Available
IBM AS/400 Logs Analysis (V5R series) Filter, Report, Alert, Archive & Import   Available Available
Real-Time Event Correlation   Available Available
Windows Terminal Server Log Monitoring   Available Available
User Session Monitoring   Available Available

Cloud Source Auditing

  • AWS Cloud Logs
  Available Available
Standard Implementation Activities:
×
Implementation Activity Description SPECIFICATION
Installation Installation of EventLog Analyzer. -
Domain Controllers Configuration of log collection from all Domain Controllers. Up to 10 Domain controllers
Log Sources Configuration of all specified log sources. i. 50 Windows Servers
ii. 10 supported syslog devices
iii. A maximum of two applications
File Integrity Monitoring Configuration of file integrity monitoring for folders on Windows and Linux devices. Up to 5 Windows Devices
Up to 2 Linux devices
Endpoints (Windows workstations) Configuration of log collection from endpoints. Up to 200 endpoints.
Agents and NAT configuration Configuration of agent-based log collection and NAT or Proxy server (if needed in your environment). If requested.
Cloud Accounts (AWS Accounts, Microsoft 365 Tenants) Configuration of log collection from cloud log sources such as AWS, M365 and Salesforce. Up to 3 cloud accounts.
Advanced Threat Analytics Configuration of Advanced Threat Analytics for added threat intelligence from reputed sources. If requested.
Report Schedules Scheduling select audit report to the customer's inbox. Configuration of up to 4 reports schedules.
Custom Reports Creating custom reporting template as per customer's requirements. Configuration of up to 4 custom reports.
Custom Alert Profiles Creation of custom alert profiles to notify the concerned teams as per customer's requirements. Configuration of up to 5 custom alert profiles.
Custom Security Rules Creation of custom security rules for threat/security detection as per customer's requirements. Configuring a maximum of
Standard rules - 2
Anomaly rules - 2
Advanced rules - 2
Custom Playbook and Incident Rules Creation of custom playbooks for remediation and incident rules as per customer's requirement. Configuring a maximum of 2 playbook and 2 incident rules.
Custom Compliance Reports Creation of reporting template for custom compliance requirements from the customer. Configuring 1 custom compliance report.
Risk Posture Analysis Configuration of all required log sources for risk posture analysis and scheduling risk analysis reports. If requested.
Dashboard customization Customizing the dashboard to suit the customer's preferences. If requested.
Technicians & Roles Creation and assignment of technicians and technician roles within EventLog Analyzer. Configuring technician and roles for:
i. 5 technicians
Ii. 4 custom roles
Ticketing Tool integration Configuration of supported ticketing tools in EventLog Analyzer for incident management. If requested.
Automatic Device Configuration Configuration of automatic addition and/or removal of Windows devices. If requested.
Custom Device Groups Customized device grouping for reporting and other purposes based on customer's preference. Creation of up to 2 custom device groups.
Product Settings Configuration of all Mandatory product settings. Configuration of Admin configurations, Mail Settings, and Security Hardening.
Logon Settings Configuration of Logon settings as per customer's preferences. As requested.
Work Hour Settings Configuration of Business hours for report views and alerts. If requested.
Privacy Settings Configuration of data security for GDPR compliance and product usage statistics. If requested.
Archives and Retention Settings Configuring log archival settings according to organization policy. As requested.
Log Collection Filters Setting up log filters to support user-specific and event-specific audit exclusions. As requested.
Log Collection Failure Alerts Configuring alerts to notify failure of log collection in the customer's instance. As requested.
Log Forwarding Configuring log forwarding. As requested.
Zia insights Configuration of Zia Insights integration, provided the customer has subscription to the Azure OpenAI service. If requested, provided the customer has subscription to the Azure OpenAI service.
System Settings - General Settings Configuration of the following settings: Connection Settings Notification Settings Listener Ports Re-branding Reverse Proxy. As requested.
Database setup Database migration from the default PostgreSQL to MS SQL if preferred. As requested.
Integrated Walkthrough Educate the customer/stakeholder through the implementation process for better adoption. Integrated walkthrough will be provided at the end of the implementation.

Customizations offered:
Custom log format and custom parser rules Support for Custom log sources (if feasible)
Custom Extensions Development of a new extension (if feasible)
Custom Incident detection and management Creation of an end-to-end incident detection and management plan for proposed use cases.
Database migration Backend DB migration from PGSQL to MSSQL
Data migration Migration of ES and Archive data
Product migration Migration of EventLog Anaylzer folders from one drive to another within the same server or from one server to another.
Scalable architecture Configuration of multiple instances for enterprise accounts
(or)
License above 1000 log sources.
Training A 4-hour training session on EventLog Analyzer.
Pick your edition:

A. Standard Edition
Choose this edition for a ready to deploy setup and core implementation.

Includes:
  • All standard implementation activities within specified limits.
  • Customizations as add-ons.
  • Up to 10 implementation hours
$4995

B. Advanced Edition
Choose this edition for complex environments that demand extensive customization and tailored integrations.

Includes:
  • All standard implementation activities with customizable specifications.
  • Implementation man-hours calculated as per requirement.


Add-ons:
  • Customizations offered.
Get Quote

For customizing your product implementation plan and other queries, reach out to onboarding@eventloganalyzer.com today!

Note: The project will be carried out based on the Scope of Work defined at the beginning of the project, with a detailed breakdown of activities and man-hour allocation.