{"id":2363,"date":"2010-01-13T09:34:39","date_gmt":"2010-01-13T09:34:39","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=2363"},"modified":"2015-09-09T19:37:45","modified_gmt":"2015-09-09T11:37:45","slug":"gfi-eventsmanager-event-monitoring-archiving-management","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2010\/01\/gfi-eventsmanager-event-monitoring-archiving-management\/","title":{"rendered":"GFI EventsManager &#8211; Event Monitoring, Archiving &#038; Management"},"content":{"rendered":"<p>You may remember a while back we reviewed the latest update of <a href=\"https:\/\/www.darknet.org.uk\/2009\/07\/gfi-languard-9-review-network-security-scanner-vulnerability-management-tool\/\">GFI LANguard 9<\/a>, another powerful product developed by GFI is <a href=\"http:\/\/www.gfi.com\/eventsmanager\">EventsManager<\/a>.<\/p>\n<p>Managing, archiving and monitoring logs and SNMP traps for a whole network can be a bit of a logistical nightmare, that&#8217;s where products like this come in. Commonly they are known under the umbrella term Business Intelligence Systems or more specifically Log\/Event Management.<\/p>\n<p>Installation is easy enough as per usual with GFI software, configuration will be a little more complex depending on the architecture of your network. If you have any problems however you can download the user manual here &#8211; <a href=\"http:\/\/www.gfi.com\/esm\/esm8manual.pdf\">esm8manual.pdf<\/a> [PDF]. Do note you will require a local or remote instance of MS-SQL for events archiving. You can download and use <a href=\"http:\/\/www.microsoft.com\/Sqlserver\/2005\/en\/us\/express.aspx\">MS-SQL 2005 Express Edition<\/a> (which is free).<\/p>\n<p>You can find an overview of the software <a href=\"http:\/\/www.gfi.com\/eventsmanager\">here<\/a> and a full features list <a href=\"http:\/\/www.gfi.com\/eventsmanager\/esmfeatures.htm\">here<\/a>.<\/p>\n<p>Once you get started you&#8217;ll need to setup the MS-SQL database before you can do anything else, so either put the details for your remote server or install the free express edition then set up the database.<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"http:\/\/farm3.static.flickr.com\/2769\/4271339498_32d2769622.jpg\" alt=\"GFI EventsManager\" \/><\/p>\n<p>After that you can select if you wish to process local computer events, selected machines or setup custom config (snmp traps\/syslog). There are a lot of options in the configuration management and allows you to easily aggregate the logs\/SNMP output from a whole network. It allows logging from a plethora of devices including Windows and Linux servers, Cisco devices, Juniper devices, laptops, desktops and databases.<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"http:\/\/farm5.static.flickr.com\/4053\/4271339726_08fda6e466.jpg\" alt=\"Config Manager\" \/><\/p>\n<p>The main screen gives you a very simple overview that the services are running correctly and the global events count with a break-down by type.<\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p align=\"center\"><img decoding=\"async\" src=\"http:\/\/farm5.static.flickr.com\/4022\/4271339554_b28af09ac3.jpg\" alt=\"Status Screen\" \/><\/p>\n<p>The graphing view allows you to visually see by source or globally by event classification and volume flow by hour.<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"http:\/\/farm5.static.flickr.com\/4028\/4271339642_45b105285a.jpg\" alt=\"Graph View\" \/><\/p>\n<p>The Event Browser allows you to view individual events, drill down to the details captured and sort them by status allowing you to track down problems easily and diagnose which application is causing the problem.<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"http:\/\/farm5.static.flickr.com\/4003\/4270594451_384403b941.jpg\" alt=\"Event Browser\" \/><\/p>\n<p>You can also add the free <a href=\"http:\/\/www.gfi.com\/eventsmanager\/esmreportpack.htm\">GFI EventsManager ReportPack<\/a>, which enables you to generate graphical IT-level, technical and management reports based on the hardware and software events processed by GFI EventsManager.<\/p>\n<p><a href=\"http:\/\/www.gfi.com\/products\/gfi-eventsmanager\/pricing\">Pricing<\/a> runs as low as $45.00 per node for Servers and $4.50 per node for Workstations if you buy in bulk.<\/p>\n<p>You can download the free trial here:<\/p>\n<p><a href=\"http:\/\/www.gfi.com\/downloads\/register.aspx?pid=esm\">http:\/\/www.gfi.com\/downloads\/register.aspx?pid=esm<\/a><\/p>\n<p>You can find the full details on GFI EventsManager here:<\/p>\n<p><a href=\"http:\/\/www.gfi.com\/eventsmanager\">http:\/\/www.gfi.com\/eventsmanager<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>You may remember a while back we reviewed the latest update of GFI LANguard 9, another powerful product developed by GFI is EventsManager. Managing, archiving and monitoring logs and SNMP traps for a whole network can be a bit of a logistical nightmare, that&#8217;s where products like this come in. Commonly they are known under [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[8437,12,11],"tags":[1934],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/2363"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=2363"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/2363\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=2363"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=2363"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=2363"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}