Re: Open Source centralized log management/SIEM solutions

[Adam Garside <Adam.Garside () CPCC EDU>]

On Apr 26, 2010, at 11:02 AM, Youngquist, Jason R. wrote:

> Is anyone using any Open Source or low cost centralized log management/SIEM solution in a production environment 
> which you would recommend?

Jason, we use OSSEC-HIDS. It is primarily a HIDS solution but can take logs via syslog if you don't wish to place 
agents on your systems. It is very configurable, easy to setup, has a standard correlation configuration, and doesn't 
require a lot in terms of hardware.

The website is at: www.ossec.net

Warm regards,
Adam

--
Adam Garside <adam.garside () cpcc edu>
Director of Network Services
Information Security Officer
Central Piedmont Community College