Discussion

The biggest disadvantage in all log analyzers and log files in general, is that the right data has to be put there by you first. From a development perspective, it means that if an exception isnt logged, or the variable data you need to understand why it happened isnt there, no log file or analyzer in the world can help you. For the discussion, share how could you see this tool being used? If you have used one of these products before, share your experience. Consider what you found interesting about the features of the tools? Did you see any disadvantages? Share your thoughts on any usage situations you would use this tool for and any key insights you may have regarding the tool.

Goals of Discussion

You should understand the basic concept of SIEM and system log analysis and be able to answer simple questions on the use of the tool, to include the resources they are monitoring and how you might leverage the information provided when performing your security analysis. For example, what type of information do you feel will be more valuable to you if you were a security analysts.