Case Study: On the Front-Line of National Defense

Don, a network administrator at a major United States Air Force Base, was confronted with a policy requiring him to maintain his server and workstation event logs over a lengthy period of time. Initially, Don contacted Dorian Software Creations to inquire generally about Event Archiver's ability to centrally collect and maintain event logs from computers on his network. While evaluating Event Archiver, Don also discovered that with such volume, he wanted a powerful tool to help him cut through the mountain of event logs generated by hundreds of machines. Desiring an easier way to accomplish occasional analysis and review of the entries inside his servers’ event logs, he began evaluating Event Analyst as well.

Don soon saw just how Event Archiver and Event Analyst would help him in the automated consolidation and management of his logs, and in doing so, meet the demanding security and auditing requirements of the United States Air Force. After thorough yet successful evaluations, Don acquired both Event Archiver and Event Analyst to archive and analyze the logs of 700 workstations and 10 servers.

To be sure that his implementation went smoothly, Don was assisted by Dorian staff in establishing collection from the hundreds of computers over multiple physical networks. First, collection stations in different buildings throughout the base were established. Then, Dorian's flexible software architecture went to work, allowing Don to roll out the solution while minimizing the impact to his network both in implementation and during the actual log collection process.

With Event Archiver successfully deployed, Don began to use Event Analyst for periodic review of his servers' event logs, checking for anomalies or other details that could indicate a compromise in network security.

In a matter of a few months, Don went from the prospect of manual collection, deletion, and consolidation to a robust automated event management solution at work for him.

Several years later, Don left the USAF to work for a major defense contractor. He was able to recommend the same solution be deployed there for a similar volume of log data. As of 2008, both installations continue to operate, performing just as intended years ago.