MORE INFORMATION


Products > Infraskope Server 2012 > SIEM Features

INFRASKOPE ENTERPRISE EDITION

Infraskope Server Enterprise Edition comes with all the features you're looking in a SIEM product.


SEARCH

Thanks to Microsoft SQL Server 2008's full-text-search feature, you can search for any value and get the results in seconds. After you've retrieved the results you can refine your search using advanced filtering, grouping, and sorting features built-in to the product.


NORMALIZATION

Normalization is a must-have feature in a SIEM product and Infraskope provides you all the features you'd look for in a log management product.


TAGGING and CLASSIFICATION

In addition to role-based authorization, Infraskope lets you tag and classify the events sent by collectors and agents. With this feature you can restrict operators viewing specific events.


CORRELATION

Infraskope lets you define unlimited number of rules to define an event. You can define sequences such as a specific event, number of events from a specific source exceeds a predefined value, detect missing events, and any combination of those rules.