Last year or so Microsoft finally entered the security log management market with Audit Collection Services (ACS) as a free add-on component to System Center Operations Manager (SCOM) 2007. ACS is an interesting technology because it is designed solely for the Windows security log and uses a highly normalized relational database model to store every single security event from every system monitored.
I’m frequently asked about ACS as a log management solution and the time has come with this webinar to provide a candid look at this technology, its strengths and its weaknesses.
First I’ll you to the ACS architecture and clarifying where and how it relates to the rest of SCOM. You’ll learn about the ACS forwarder/collector model as well as the structure of the database and how it is designed to handle the challenges high volumes of record insertions, gigs and gigs of data, pruning, heterogeneous log support and efficient querying. Because of the ACS product team requirement to capture all log data from all systems Microsoft had to come up with some rather interesting methods to achieve this.
Then I will give you a run down on the gaps in ACS as a log management solution including consolidation of log from multiple collectors, long term archival, reporting and alerting. I won’t just point out the gaps though – I will show you a valuable freeware solution that integrates with ACS to fill an number of these important gaps.
This real-training (tm) webinar will make you conversant with ACS as a technology and provide valuable insight into ACS as a log management solution for comparison to your current solution or other candidates.
This webinar is not sponsored by Microsoft. Instead Brian Hymer from Quest Software will briefly show you how Quest’s complimentary solutions integrate with and fill the gaps with ACS.
I’m frequently asked about ACS as a log management solution and the time has come with this webinar to provide a candid look at this technology, its strengths and its weaknesses.
First I’ll you to the ACS architecture and clarifying where and how it relates to the rest of SCOM. You’ll learn about the ACS forwarder/collector model as well as the structure of the database and how it is designed to handle the challenges high volumes of record insertions, gigs and gigs of data, pruning, heterogeneous log support and efficient querying. Because of the ACS product team requirement to capture all log data from all systems Microsoft had to come up with some rather interesting methods to achieve this.
Then I will give you a run down on the gaps in ACS as a log management solution including consolidation of log from multiple collectors, long term archival, reporting and alerting. I won’t just point out the gaps though – I will show you a valuable freeware solution that integrates with ACS to fill an number of these important gaps.
This real-training (tm) webinar will make you conversant with ACS as a technology and provide valuable insight into ACS as a log management solution for comparison to your current solution or other candidates.
This webinar is not sponsored by Microsoft. Instead Brian Hymer from Quest Software will briefly show you how Quest’s complimentary solutions integrate with and fill the gaps with ACS.
CAN'T MAKE THE LIVE EVENT? REGISTER ANYWAY TO GET THE RECORDED VERSION.
Title: Microsoft Audit Collection Services: How Does It Stack Up as a Security Log Solution?
Date: Thursday, January 22, 2009 12:00 PM - 1:00 PM EST
To make this webinar possible your registration data will be shared with our sponsor.
This is real training.
Thanks as always for reading and best wishes on security,
Randy Franklin Smith
Subscription Information
You can unsubscribe below but try fine-tuning what type of information I send you. I have 5 different categories emails I send out - you can choose which to receive.
Ultimate Windows Security is a division of Monterey Technology Group, Inc. ©2006-2008 Monterey Technology Group, All rights reserved. You may forward this email in its entirety but all other rights reserved.
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk.
I missed the webcast and clicking the register link tells me the webcast is over. The article refers to a recorded version. is that available anywhere? Thanks
ReplyDelete