IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more
Reviews

LogRhythm LR-500-XM review

Compliancy with data protection regulations is not to be taken lightly and LogRhythm offers the means to stay on the right side of the law.

Price
£15,900

There are plenty of standards designed to protect personal and sensitive data and businesses that don't take regulatory compliance seriously are finding this can be a costly mistake. Log data management and analysis are important parts of the process and LogRhythm combines these functions into an appliance based solution and augments them with detailed log and event analysis.

LogRhythm is deployed as an appliance running Windows Server 2003 R2 and it offers a number of hardware solutions. On review we have the entry-level LR-500-XM, which is delivered as a good quality Dell PowerEdge 1950 1U rack server. The price shown includes support for 100 log sources but this can be upgraded as required.

We deployed our appliance as an all-in-one solution running the Log Manager and Event Manager components but you can distribute functions such as log gathering across multiple servers running LogRhythm agents. LogRhythm offers Log Manager agents for Windows, Unix and Solaris host systems and these don't need to be dedicated to this task.

LogRhythm accepts log data from a wide range of sources and support includes syslog, syslog-ng, Windows drive mapping and Event Logs, ODBC connectors for database logs, flat files such as ASCII text, Cisco NetFlow and CheckPoint OPSEC/LEA collections.

The software is managed locally or remotely with a dedicated console, which we found easy to get to grips with. The console can be installed on any remote system and supports all versions of Windows. Deployment is simple enough as you tell your source devices where to send their log data to and LogRhythm will automatically collect this traffic.

Devices such as Windows servers can be automatically identified by their traffic so the appliance can add information such as the OS and version, hostname, associated IP address and Windows Event Logs. Other devices such as security appliances and routers that may be sending syslog data will need to be updated manually to specify the device type. LogRhythm does this as part of its customer deployment service so no user intervention is required.

Logs stored on the appliance are all digitally signed on receipt so it can be proved they haven't been subsequently tampered with and archives are also digitally signed to ensure their integrity. Archive locations can be any type of storage device such as DAS, NAS, IP SAN and FC SAN.

Featured Resources

Three ways manual coding is killing your business productivity

...and how you can fix it

Free Download

Goodbye broadcasts, hello conversations

Drive conversations across the funnel with the WhatsApp Business Platform

Free Download

Winning with multi-cloud

How to drive a competitive advantage and overcome data integration challenges

Free Download

Talking to a business should feel like messaging a friend

Managing customer conversations at scale with the WhatsApp Business Platform

Free Download

Recommended

Dell EMC PowerEdge R650xs review: An ‘xtra special’ rack server
Server & storage

Dell EMC PowerEdge R650xs review: An ‘xtra special’ rack server

26 Aug 2022
Dell EMC PowerEdge R250 review: A powerful package at a promising price
Server & storage

Dell EMC PowerEdge R250 review: A powerful package at a promising price

14 Jul 2022
Dell EMC PowerEdge R350 review: A compact and powerful server
Server & storage

Dell EMC PowerEdge R350 review: A compact and powerful server

23 Jun 2022
Dell EMC PowerEdge R450 review: Rack-dense server power for SMBs
Server & storage

Dell EMC PowerEdge R450 review: Rack-dense server power for SMBs

9 Mar 2022

Most Popular

How to secure your hybrid workforce
Advertisement Feature

How to secure your hybrid workforce

23 Sep 2022
Vodafone UK confirms talks to merge with Three are underway
mergers and acquisitions

Vodafone UK confirms talks to merge with Three are underway

3 Oct 2022
What your hybrid workforce needs from their laptops
Advertisement Feature

What your hybrid workforce needs from their laptops

21 Sep 2022