Blog Entries

22. 05. 2019 TobiasGoller Application Performance Management, Cloud, Log Auditing, NetEye

Cloud Monitoring

The new challenge for monitoring solutions is to monitor infrastructure, software, and platforms that run in the cloud, or that are outsourced. The various contract models with cloud providers/outsourcers no longer focus on infrastructure monitoring, such as monitoring the fans or power supply in a physical server, but rather the availability and performance of applications,… Read More

03. 04. 2019 Michele Santuari Log Auditing, NetEye

How to Manage Permissions in Log Analytics with NetEye 4

NetEye 4 Log Manager, as already presented in this blog post, allows you to easily manage the collection, navigation, visualization and analysis of large numbers of logs. For many reasons, I as a user may want to limit log access to a subset of users. For example a network administrator should only see the logs… Read More

29. 03. 2019 Angelo Rosace Log Auditing, NetEye

Host Creation via Icingacli Commands for Monitoring and Deploying a Safed Agent Configuration

Creating hosts in NetEye’s Director module can sometimes be time-consuming and a repetitious, tiring and boring job. Especially if you have to populate Director with a large number of hosts for setting up a test environment, for example. One solution is to create a script consisting of nothing but icingacli commands. Each command line instruction… Read More

25. 03. 2019 Oreste Attanasio Information Security Operations Center, Log Auditing, Microsoft Management, NetEye

Safed improvements since 1.10.1

The Safed agent keeps track of the events it receives from the Eventlog by keeping the LastEventID in registry. At start time the agent tries to retrieve all events from Windows Eventlog since starting from the LastEventID. When the amount of events since LastEventID is too large or the LastEventID has been removed from the… Read More

20. 03. 2019 MarinovMihail Log Auditing, NetEye Updates, Syslog

Updated Safed Agent v1.10.1

– Retrieved events from eventlog (win 2008 +) starts from bookmark but should not be older than defined cache days

15. 10. 2018 TobiasGoller Log Auditing, NetEye, Syslog

NetEye 4 Log Management with Search Guard

With the release of NetEye 4, we have also redesigned the Log Management module. In this blog post I would like to briefly discuss the main innovations and improvements in NetEye 4 Log Management. First, the management and configuration interface of NetEye 4 Log Manager appears in the unified NetEye 4 layout. Basically, it has… Read More

05. 10. 2018 Michele Santuari Log Auditing, NetEye

How an Elasticsearch Cluster Fits in with a NetEye Cluster

This blog post describes the basic architecture of an Elasticsearch cluster.  The deployment of a cluster is needed to provide high-availability and, whenever possible, to increase performance. NetEye 4’s clustering service is based on RedHat 7’s High Availability Clustering technologies: Corosync:  Provides group communication between a set of nodes, application restart upon failure, and a quorum… Read More

25. 09. 2018 Gianluca Piccolo Linux, Log Auditing, NetEye, Syslog

NetEye 4 Log Management: Rsyslog and the Elastic Stack

When you need to manage and collect large amounts of data, there can be a lot of hard tasks to do.  So we decided to take some of the best Open Source tools to help us do it in the best possible way.  Let me introduce you to Rsyslog and the Elastic Stack implementation for… Read More

13. 03. 2018 Arianna Cunaccia Application Performance Management, Asset Management, EriZone & OTRS, Log Auditing, NetEye, NetEye ITOA

Out Now – The New NetEye & EriZone Training Program

Ready to take your IT process skills beyond the traditional?  Our new training offerings will help you acquire, maintain and improve your knowledge and skills around our solutions.  This year’s training program contains courses for NetEye, EriZone or Alyvix customers and partners, each lasting between 2 and 4 working days. The main focus will be… Read More

28. 11. 2017 Giuseppe Di Garbo Log Auditing, NetEye

The Role of IT Asset Management in GDPR Compliance – Part I

In this post, and in the one that will follow in the next weeks, I would like to analyze the role of IT Asset Management in adapting to the new General Data Protection Regulations (GDPR). In this first article I will briefly introduce what the GDPR is, what measures it introduces, and how the IT… Read More

31. 10. 2017 Juergen Vigna Log Auditing, NetEye, Syslog

Sending Cisco Syslogs to Elasticsearch: A simple guide

Do you use Cisco’s network infrastructure? Would you like to view its logs through the syslog protocol in an Elasticsearch database? Find out below about the filters and templates needed for the Logstash setup. As you probably already know, you need a Logstash instance in order to get indexed data into the Elasticsearch database. Cisco… Read More

06. 06. 2017 Giuseppe Di Garbo Log Auditing, NetEye, Syslog

How to send logs from servers in the cloud to NetEye?

Keeping an offline copy of your logs does not only provide better visibility from the system management point of view, but also turns out to be extremely precious in case of a security incident during which your local copies have been affected. As many of you might know, the Log Management module of NetEye offers… Read More

22. 05. 2017 TobiasGoller Log Auditing, NetEye

NetEye as essential component of a Security Operations Centers

During my last projects I noticed that the implementation of a „Security Operations Center“ (in short SOC) is becoming increasingly important, especially for our enterprise customers. Mainly for big companies that are of public interest like banks, energy providers, assurances etc. the topic of cyber threats is getting more actual and requires special attention. This… Read More

25. 11. 2016 Juergen Vigna Log Auditing, NetEye

Some Words about Logstash Filters and Dates

Some time ago I published an article about how to store the NetEye SMS Protocol log into an ELK environment. Now, after using it some times, I discovered that it was not completely correct as the time/date functions for the Logstash filters are a bit more complicated. In particular, it was that the date was… Read More

05. 07. 2016 Juergen Vigna Log Auditing, NetEye

Practical Application of the NetEye Log Management Module to visualize SMS Notifications

Sometimes it is not so visible how many SMS are sent by a NetEye Server and to whom. So it could be a good idea to give the sms-send-protocol file to the Log Management and to include it into the Elasticsearch Index. Then you may create a Dashboard in Kibana to show the usage of your… Read More

Archive