SN29: Best Practices for Scaling Log Management

Document created by jmerrill on Sep 28, 2009Last modified by jmerrill on Jul 8, 2014
Version 2Show Document
  • View in full screen mode
Best Practices for Scaling Log Management
Speaker: John Bradshaw, Principal Federal Sales Engineer-ArcSight
This session will discuss the differences between Agent and Agentless log collection and how each provide capabilities and benefits that should be considered before deploying a SEIM or Log Aggregation solution. The focus of this discussion will cover centralized vs. de-centralized deployments, considerations for guaranteeing log/event delivery, and network performance issues administrators should consider when making deployment decisions.
Level: Basic