SN04: Scaling Log Management Best Practices

Document created by beleslie on Aug 25, 2011Last modified by beleslie on Jul 8, 2014
Version 3Show Document
  • View in full screen mode

Scaling Log Management Best Practices
John Stoner, Principal Technical Consultant, HP ArcSight
This session will discuss the differences between agent and agent-less log collection, and how each provides capabilities and benefits that should be considered before deploying a SEIM or log aggregation solution. We will focus on centralized vs. decentralized deployments, considerations for guaranteeing log and event delivery, as well as network and storage performance considerations administrators should consider when making deployment decisions.