Logs scattered across devices
Instead of logging in to each device, every syslog and trap record is searchable on one screen.
Syslog, SNMP trap, signed logs
Centralised syslog and SNMP trap management
Syslog and SNMP trap messages from every network device land in one place. Filter by severity, facility, tag and message content, follow the live stream, and sign selected records with RFC 3161 time stamps to prove they have not been altered.
Problems it solves
What this module brings to your team
Prove log integrity
Signed log archives show that records have not been modified since they were signed, supporting Turkish Law No. 5651 log retention requirements.
Notice devices that go quiet
Sources that have stopped sending logs are listed separately on the statistics screen.
Capabilities
What Log Management can do
Syslog collection
Stored with receive time, source, severity, facility, tag (SysLogTag) and unit; full-text search in messages.
SNMP trap collection
Collect traps centrally; only traps sent with an allowed community string are accepted.
Live stream
Watch incoming logs in real time; your filters apply in live mode too.
Time-stamped signatures
Sign filtered records with an RFC 3161 time stamp, either into a single file or one file per source. List and download signed archives.
Qualified time-stamp authority
Time stamps can come from the appliance’s own TSA or, where configured, from a qualified TSA such as TÜBİTAK Kamu SM.
Scheduled signing
Run signing jobs regularly with the Task Scheduler; the signing window is counted back from each run.
Log statistics
Daily syslog and trap counts for the last 30 days, share per source device, and silent sources.
Alarms from logs
Bind a specific log or trap message to an alarm rule, or use it to trigger configuration change detection.
Detailed feature list
Also included
- Human-readable syslog severities (Emergency – Debug) and facility codes
- Filters for time range, device, source IP/name, severity and facility
- Allow-list of SNMP trap communities
- Each signed archive keeps the time-stamp query (.tsq) and reply (.der) together
- Separate permissions for signing and for viewing signed logs
- Data retention configurable in days; expired data is purged automatically
- Export of filtered records
Related modules
Better together
Traffic Analysis (Flow)
See who is using your bandwidth, with which application and toward which country, and catch malicious traffic and DoS patterns in your flow data.
Explore the moduleConfiguration Management
Back up device configurations with templates, compare versions, and audit them against your policies and known vulnerabilities.
Explore the moduleAdministration & Security
Users, groups and a granular permission matrix; Active Directory/LDAP sign-in, signed automatic updates and on-premises deployment.
Explore the moduleSee your network with Netronus
Let’s schedule a demo in your own environment or prepare a quote for your needs. Pricing depends on the number of devices and the modules you choose.