Scribd
Upload
445 views

Introduction To LogRhythm and Its Components

This document provides an introduction to LogRhythm and its components. It discusses LogRhythm's capabilities for intuitive correlation, anomaly detection, event classification, and host and network monitoring. It then describes the key components of LogRhythm including the System Monitor, Data Processor, Data Indexer, Platform Manager, AI Engine, Client Console, and Web Console. It outlines the life cycle of a log as it flows through LogRhythm and is processed. Finally, it provides a high-level overview of LogRhythm's architecture.

Uploaded by

amithvaishnav
Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
445 views

Introduction To LogRhythm and Its Components

This document provides an introduction to LogRhythm and its components. It discusses LogRhythm's capabilities for intuitive correlation, anomaly detection, event classification, and host and network monitoring. It then describes the key components of LogRhythm including the System Monitor, Data Processor, Data Indexer, Platform Manager, AI Engine, Client Console, and Web Console. It outlines the life cycle of a log as it flows through LogRhythm and is processed. Finally, it provides a high-level overview of LogRhythm's architecture.

Uploaded by

amithvaishnav
Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 15

Introduction to

LogRhythm &
Components
LogRhythm v/s Other SIEMS

• Intuitive Co-relation Building


Blocks.

• Powerful anomaly detection


capabilities.

• It does better event


classification.

• Host and network monitoring


2
capabilities.
Data Flow in LogRhythm

3
Component: System Monitor

▪ System Monitor Pro


4
▪ System Monitor Lite
Component: Data Processor

 Log Storage
5
 Active Archive
 Inactive Archive
Component: Data Processor

Services
 Mediator
 Storage
 Forwarding

 Message Processing Engine (MPE)


 Log Identification
 Log Classification
 Event Processing ( RBP)
 Metadata Processing
6
Component: Data Indexer

7
Component: Platform Manager

8
Component: Platform Manager

Services:

 Job Manager Service

 Alarming, Reporting, and Response Manager (ARM) Service

9
Component: AI Engine

10
Component: Client Console

11
Component: Web Console

12
Life of a Log in LogRhythm

13
Architecture

14
Q&A

You might also like