ArcSight announces new versions of ESM and Logger technology
ArcSight has announced the launch of two new products into its Logger and Enterprise Threat and Risk Management (ETRM) platforms.
The company, who confirmed a definitive agreement to be acquired by HP last week, has now launched version 5.0 of its Logger and ESM technology, as well as IdentityView 2.0.
It said that the main benefit of ArcSight Logger 5.0 is that it is available for the first time as software rather than as an appliance for customers who wish to operate within a cloud or virtualised environment.
ArcSight said that Logger 5.0 includes the ability to create reports against both structured and unstructured data, as well as unified search across data types and offers a simplified search language for users who prefer iterative searches.
Hugh Njemanze, CTO and executive vice president of research and development for ArcSight, said: “Today enterprises want a first class log management and analysis solution that is capable of spanning both IT operations and information security needs across an entire organisation. That's why we've designed Logger 5.0 as the universal log management solution, with features for analysing logs across the enterprise, including distributed deployments.”
Also launched as the fifth version of the ESM core analysis engine. It said that this enables organisations to get better insight into threats and risks in their enterprise, and provides real-time correlation of threats and risks.
New platform features include user risk monitoring framework for powerful analysis of user behaviour, industry-specific field sets, a web services API for easy integration and a developer framework for rule creation.
Tom Reilly, president and CEO of ArcSight, said: “Organisations can no longer simply look for external attacks as the only threat. With the number of cyber threats and attacks on the rise, organisations are learning that a security approach must be multi-dimensional, taking into account all data within an organisation, who has access to it and what they are doing at all times.
“With the new capabilities provided with our ETRM platform, ArcSight provides a single solution to monitor your risk related data across and beyond the enterprise.”
Also taking advantage of the new ESM platform features is an enhancement to IdentityView, with version 2.0 improving compliance and security by detecting shared account usage, role-based access violations and unauthorised user activity.