Seci-log 1.09 release log analysis adds multiple reports and function points
Log analysis software adds several function points:
1, when adding users, the password can be entered by yourself, which used to be the default password, and then you can log in and modify it.
2. Asset management adds the function of asset import.
3. The alarm export function has been added.
4. Added three-party interface configuration, which can configure mail, syslog and snmp trap. In this way, when a new alarm is generated, the alarm message can be sent to the third-party interface.
5. The alarm rule adds editing function and the ability of alarm output third-party interface. If it is linux and configure ip, port, account and password in the asset, the firewall can be enabled remotely. This is the source ip.
6. Two large modules, audit monitoring and system monitoring, are added.
Audit monitoring includes two parts: overall report and log audit.
Overall monitoring. It includes collection protocol distribution, log source ranking, * alarm distribution and * source ranking.
Log audit mainly completes the audit reports commonly used by window and linux.
7. The system monitoring function is added, which mainly includes system status and event monitoring.
The system state mainly includes the use of cpu, memory, hard disk and the acquisition alarm of the collector.
Event monitoring mainly monitors the number of events collected from time to time.