Log Correlation Engine 3.6 – Now with its own GUI
Tenable Network Security has released version 3.6 of the Log Correlation Engine. This new version includes many performance enhancements as well as its own web-based user interface. This blog entry describes the new user interface, the increased performance and the new features of LCE 3.6.
Dedicated GUI
Previously, all LCE installations were required to be managed by SecurityCenter. This is great for correlating vulnerabilities and configurations with logs and events, but could be out of scope for a project focused solely on log management or log analysis.
Since many customers expressed interest in a pure log management solution based on the LCE, we developed a user interface dedicated to log analysis, event management and creating dashboards, alerts and reports. An example screen shot is shown below:
The LCE user interface can be used to manage logs stored locally. The same user interface can be used to access other LCEs for distributed queries and distributed log management.
Increased Performance and New Features
Version 3.6 of the LCE also includes several new performance and product enhancements.
An in-memory cache daemon for events is now used to accelerate analysis of events. As users summarize and perform refined searches for various events, the caching daemon accelerates their queries by pre-caching event data. This allows for hundreds of millions of events to be searched and filtered in near real-time.
LCE 3.6 also uses less disk space than previous versions. The reduction in disk space usage also increases performance as less raw data needs to be read from or written to the file system.
Whether you choose to use LCE as a stand-alone product or integrated with SecurityCenter, the new version is sure to increase efficiency in analyzing security events!
For More Information
To learn more about the Log Correlation Engine, please visit our web site, watch our demo videos and webinars or contact our sales team to set up an evaluation.
Related Articles
Taking IBM QRadar SIEM One Step Further Using Tenable.ad
September 30, 2021If you can't continuously monitor Active Directory, it's impossible to achieve full visibility into your evolving attack surface. Here's how combining Tenable.ad with IBM QRadar can help. It's no sec...
PVS App for Splunk
August 22, 2014<p>Splunk Enterprise analyzes everything from customer clickstreams and transactions to network activity and call records, turning your machine data into valuable insights. The <a href="http://apps.splunk.com/app/1844/">Tenable™ PVS app for Splunk</a> increases the security threat intelligence of Splunk by sending it critical security-relevant information.</p>
Detecting Errata Security's Port 22 Internet-Wide Scan
September 18, 2013<p>The security researchers at Errata Security performed an Internet-wide port 22 scan to gather SSH daemon banner information. The scan happened on September 12th from 71.6.151.167 with a tool named masscan. If you run a SIM, a network IDS or any type of passive network monitoring, this is a really easy and safe "known" to go and see if your monitoring is configured correctly. It is the proverbial “shooting fish in a barrel” example where you can show that your network security monitoring is in fact working.</p>
Operational Technology in the DoD: Ensuring a Secure and Efficient Power Grid
April 19, 2024In an evolving threat landscape, the DoD must make sure that its mission-critical operations don’t experience power outages.
Cybersecurity Snapshot: Cyber Agencies Offer Secure AI Tips, while Stanford Issues In-Depth AI Trends Analysis, Including of AI Security
April 19, 2024Check out recommendations for securing AI systems from the Five Eyes cybersecurity agencies. Plus, Stanford University offers a comprehensive review of AI trends. Meanwhile, a new open-source tool aims to simplify SBOM usage. And don’t miss the latest CIS Benchmarks updates. And much more!
Tenable and Thales Collaborate to Provide Cyber Defense Simulations to Better Secure Operational Technology Environments
April 18, 2024The heart of the Welsh Valleys is home to the Thales Ebbw Vale campus, a world-class facility jointly funded by the Welsh government as part of its regeneration program for the region. At the core of the facility is the Cyber Range, a simulation and virtualization platform for training, testing, exercising and R&D. Tenable has joined the lineup of solutions used to run real world simulations in this controlled environment.
- Event Monitoring
- Log Analysis