GFI EventsManager 7.1, 100 user ESM100 Manual De Usuario

GFI EventsManager ships with a pre-configured set of log processing rules that allow
you to filter and classify events that satisfy particular conditions. You can run these
default rules without performing any configuration or you can choose to customize
these rules or create tailored ones that suite your network infrastructure.

GFI EventsManager’s powerful filtering sieves through the recorded event logs and
allows you to browse the required events without deleting any records from your
database backend. You may also selectively highlight specific events using a color or
the integrated event finder tool.

Scanning profiles allow you to configure the set of event log monitoring rules that will
be applied to a specific computer or to a group of computers and provide a centralized
way of tuning event log processing rules. You can also setup a set of rules that only
apply to workstations in a particular department. You may also create separate
complementary profiles that provide additional and more specialized event log rules
on a computer by computer basis.

GFI EventsManager reporter enables you to identify security trends. Use its standard
reports – which you can customize – or create custom reports from scratch. The
standard reports include:

GFI EventsManager management console

Makes cryptic logs easier to understand

Centralized event logging

Support for multiple log types (Windows event
logs, W3C, Syslog)

Report showing Top 10 event-generating
machines

· Account usage reports

· Account management reports

· Policy changes reports

· Object access reports

· Application management reports

· Print server reports

· Windows event log system reports

· Events trend reports

GFI EventsManager helps your organization to address the following 4 areas:

· Information system and network security: Detect intruders and security breaches

· System health monitoring: Proactively monitor your servers

· Legal and regulatory compliance: An aid to meet regulatory compliance

· Forensic investigations: A reference point when something goes wrong.

· Remove “noise” or untrivial events that make up a large ratio of all security events

· Real-time 24 x 7 x 365 day monitoring and alerting

· Graphically monitor the status of GFI EventsManager and your network through the

built-in status monitor

· Report scheduling and automated distribution via email.

Many leading companies have chosen GFI EventsManager. Here are just a few:
Primerica, Pepsico France, Royal & Sunalliance USA Inc., ATP, Ceridian Canada and
many more.