CorreLog for Windows Server Hyper-V
Contact us
CorreLog for Hyper-V

CorreLog Windows Agent And Toolkit

We have pioneered one of the best Windows Agents for SIEM management available anywhere. This powerful agent program is designed for installation ease, non-intrusive operation, and flexibility. Join the all enterprises currently standardizing on this SIEM component, which is setting a new benchmark for Windows syslog operability. CorreLog is pleased to offer this agent and tool kit for free, with no strings attached!


Syslog is one of the most interoperable protocols currently in existence. It is supported by all UNIX platforms, and most network hardware vendors, and has been in operation since at least 1985 with no significant change to its basic specification.

Strangely, although Microsoft generally adopts popular standards such as TCP/IP, SNMP, HTTP, XML, and specifications, Microsoft support for syslog protocol is conspicuously absent. While Microsoft has an elegant logging system for the Windows operating system, Windows event messages to not generally interoperate directly with standard SIEM strategies.

Two popular techniques currently exist to compensate for this omission by Microsoft: agentless operation can be achieved via WMI or RPC calls, via a periodic polling scheme. However, this technique imposes a number of security risks and complications. In particular, it is difficult for real-time SIEM systems to guarantee timely detection of critical system events.

A second popular method of monitoring Windows event logs is to install a light-weight Windows Service. This "agent" process reads Microsoft event log information, logged in real-time, and converts these messages to standard syslog messages, which are sent to a syslog receiver.

CorreLog Unix Linux Agents

CorreLog offers a suite of specialized UNIX agents and tools to augment the native syslog capability found in UNIX platforms. Although agents are not required to manage UNIX platforms, this additional software leverages the power of CorreLog Server to detect, log, and correlate security and performance issues not otherwise covered with native syslog capability. We support Linux, Solaris, AIX, HPUX, and other popular UNIX platforms.

Product Overview

The CorreLog system works with UNIX platforms in an "agentless" mode, without the need to install any other software component. In particular, you can manage virtually any UNIX platform using the native Syslog capability, simply by directing syslog messages to the CorreLog Server site.

To extend your UNIX monitoring capability to include arbitrary log file management, remote configuration of source filters, and data encryption, you can install the CorreLog UNIX Agent, which usually takes under one minute, and does not require the platform to be rebooted. After installation, log messages will immediately begin forwarding over to the CorreLog program, permitting data aggregations and correlation of UNIX logs. This greatly expands your ability to proactively manage UNIX platforms, making the CorreLog system aware of any log file on any UNIX system.

CorreLog Adapters and Plug-Ins

These special adapters and plug-in components extend the CorreLog Server's monitoring functions to include active polling of devices and programs, file integrity monitoring, and monitoring of special data stores and application data. CorreLog's plug-in capability enhances the life-cycle of your software, provides high return on investment, and satisfies exacting and hard to meet requirements of your enterprise.

Adapter Overview

The CorreLog Server plug-in facility allows you to easily add pre-configured screens, processes, and configuration components to the main server installation. These components leverage CorreLog's Sigma Framework foundation to seamlessly add tightly coupled software to your existing site. Adapters and plug-ins include (but are not limited to) the following components:

CorreLog SIEM Security Server, Log Management & Compliance solutions

Search Agileise.Com

Download Datasheets:-

Free Trial Product Downloads:-

Learn more about this Product:-

Request a Product Demo