Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Quick 250 points: How do you use the OpsCenter dashboard?

$
0
0

I can't show you my Dashboard for security reasons, but I/we use the Dashboard for two reasons on our team. I use it for availability and to quickly see any denial of service type of events. My role is an SA/SE so I want to quickly see if the logs are coming in, if they are I'm pretty sure my servers are up. I also want to see if the events are trending above average or spiking. I've been able to find two application errors because I saw the spike, drilled down and found countless log events that pointed us to problems.

 

My ISSE and ISSO are more interested in logins and access. They use the Events graph as well but look at some rules I put in place and some of the out of the box rules, to see if they have been fired off and how many times. They have found invalid access and access that was valid but folks forgot about it.

 

The bottom line, I'm training folks to build their own dashboards and we talk/share the views. Teach a person how to fish, then they leave one alone to learn more funky stuff:)


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>