Some of Nava SIEM Agent key features are:
- Retrieving Google Apps and Amazon S3 audit logs
- Archiving the audit logs
- Ability to export the logs to the known formats
- Real time output to Windows Event Logs
Currently Nava SIEM Agent supports Google Apps Admin Console audit logs and Docs audit logs.
Google Apps: Admin Activity
By default, any activity performed by an administrator in Google Apps is logged as part of the Google Apps Admin Audit logs. All 17 different types of administrative actions currently available are supported by Nava SIEM Agent:
- CHROME OS_SETTINGS
Google Apps: Google Docs Activity
Google Apps administrators may not be aware that Google supports audit logging of all Google Docs activity. This includes events such as viewing a Google Document or editing one. The logs contain valuable information on the source IP of the event, the user performing the activity, and the unique ID of the Google Document being modified/accessed.
Supported Output Types
All of the retrieved audit logs will be outputted to either Windows Event Logs, text file format or both depending on user’s choice.
There is only one software prerequisites to install Nava SIEM Agent:
Microsoft .Net Framework 4.5 or higher
Downloading and Licensing
You can download a 5 day free trial version of the product from Linkgard.