[Os-sim-support] edus using OSSIM in a production environment

[Youngquist, J. R. <jry...@cc...>]

Are there any educational institutions using OSSIM in a production
environment? If so, I'm wondering how well it is working for you. I've
been looking at different commercial log management products, but
SEIM/SIM technology is really what I'm after. 

We're looking for a good way to centralize all of our logs, and logging
software would do this, but I'm looking for something that will
normalize data, allow me to perform correlations across logs, and
generate actionable items from log data. 

I've been playing around with OSSIM a bit, but I'm not sure how well it
will scale in our environment, off the top of my head, I'd like to send
logs from 100 servers, 50 APs, 100 routers/switches, and several other
devices.

I've looked a few commercial SEIM/SIM devices, but they are all quite
pricey, so that's why I've been looking at OSSIM as an alternative.

Appreciate any information you can provide.




Jason Youngquist

Information Technology Security Engineer

Technology Services

Columbia College

1001 Rogers Street, Columbia, MO  65216

(573) 875-7334

jry...@cc...

http://www.ccis.edu