Log360 is ManageEngine's comprehensive security information and event management (SIEM) solution. Log360 can monitor your entire network, provide visibility on crucial security events, and help you detect and mitigate security threats at an early stage. Log360 can also help you meet various compliance regulations such as the PCI DSS, HIPAA, SOX, the GDPR, and more.
Log360 is a comprehensive SIEM solution that can be used by enterprises of all sizes across different industries. Below are the unique selling propositions of the solution:
Log360 has been positioned in the Gartner Magic Quadrant for SIEM for five years in a row. Read the latest report here.
Log360 is an integrated SIEM solution with components and modules focused on securing different parts of your infrastructure.
Listed below are the components of Log360:
Log360's key features are listed below:
Licensing is based on the log sources and add-ons required. Pricing is based on the number of:
The following add-ons are available for addressing specific needs:
Refer to Log360 license components to learn more about the various components and their pricing criteria.
Get a quote now.
Yes, please fill out this form to get a personalized quote that best suits your requirements.
The Free edition supports only a limited number of log sources and has restricted capabilities. In the Premium edition, there is no limit in the number of log sources that can be supported and all features can be accessed without any restrictions. Learn more about the differences between the Free and Premium Editions.
Yes, download the fully functional 30-day trial version here. The 30-day free trial version will automatically be converted to the Free edition after the evaluation period.
If you are interested in exploring the solution more before making a purchase decision, fill out this form to extend your evaluator license.
When you buy the auditing license for a member server in ADAudit Plus, you will be able to monitor the same server in EventLog Analyzer, too.
The member servers added for auditing will be automatically synchronized with EventLog Analyzer without any additional license.
Yes. You can choose to un-integrate any of the components from Log360. To remove any components:
Log360 can be downloaded here. Log360 can be installed as an application (by default) or as a Windows service. The standard installation downloads all the components of Log360. Alternatively, you can customize the installation by choosing the components of Log360 that you would like to download.
Click here for the complete list of system requirements for installing and working with Log360.
Best practices for installation of Log360 can be found in this guide.
Best practices for securing your installation can be found in this guide.
Yes. Once Log360 has been deployed and started, the web client can be accessed from anywhere.
ManageEngine Log360 requires one of the following browsers to be installed on the system to access the Log360 web client.
EventLog Analyzer is a log management solution. While this component takes care of log collection, analysis, and secured storage, it doesn't offer the complete security that Log360 provides for your network. Log360 protects your network by:
While ADAudit Plus takes care of Active Directory change monitoring, user behavior analysis, it isn't enough to protect your network from attacks. Log360 helps you:
Any device or server added in one component of Log360 will be automatically synchronized with the other component. These devices or servers are called synced hosts.
For instance, when you add a member server in the ADAudit Plus component of Log360, the server will be automatically synchronized with EventLog Analyzer components as well. In this case, that particular member server is a synced host.
Once you have Log360 in place, at any point of time you can purchase and integrate these auditing components: ADAudit Plus, M365 Manager Plus and Exchange Reporter Plus.
All you need to do is get the corresponding license of these auditing components by contacting us. Once you've purchased the license, follow the below steps:
The ADAudit Plus component will now be integrated. You can follow the same steps for M365 Manager Plus and Exchange Reporter Plus.
All the hosts between ADAudit Plus and EventLog Analyzer will be automatically synchronized everyday at 12 am. If you need to sync the host manually:
The hosts will now be integrated automatically.
Yes. At any point of time, you can remove any one of the components from Log360. To do so, follow the below steps:
This will remove the corresponding component.
The Active Directory reporting component of Log360 is a variant of standalone ManageEngine ADManager Plus, a comprehensive AD management and reporting solution.
While Log360's component brings in the security-related AD information such as data about permissions and changes to user roles, the standalone solution takes care of entire AD management and reporting needs of enterprises. Click here for the complete list of differences between the standalone edition and Log360's add-on.
M365 auditing or reporting in Log360 primarily brings in the security auditing data of Microsoft 365 whereas the standalone solution helps you manage Microsoft 365 applications. Click here for the complete list of features supported by the M365 Manager Plus module in Log360 compared to those of the standalone edition.
While the Exchange reporting and auditing module of Log360 supports dedicated reporting and auditing of Exchange Servers, the standalone edition helps you manage hybrid Exchange and Skype for Business. Click here for the complete list of features supported by the Exchange Reporter Plus module in Log360 compared to those of the standalone edition.
Yes, Log360 Cloud is a cloud-based log management solution for monitoring activities and detecting security threats in your network. This solution allows security teams to aggregate, store, and manage logs from various network devices on a secure cloud platform, helping them to cut down on their IT storage spending and achieve their IT security and compliance objectives.
Log360 supports the following databases:
Bundled with the product:
External databases:
Click here for the complete list of system requirements for installing and working with Log360.
Click here to view the complete solution architecture.
To uninstall Log360, follow the below steps:
Please let us know why Log360 didn't work out for your organization. We really appreciate your feedback.
Log360 supports a wide range of log sources out-of-the-box. Additionally, logs from legacy systems and in-house applications can be parsed using the custom log parser. Below are the commonly added log sources to Log360:
For the complete list of supported log sources, click here.
By default, Log360's auto updating capability is disabled. Manually enable it to keep Log360 automatically updated to the latest version.
No, you need to update the individual components separately with their respective service packs.
Yes, an individual component can be upgraded to Log360. If you are already using one of the components of Log360, you can easily license the other components and upgrade your Log360 installation. The components can be integrated in the Admin Settings of Log360.
Yes, click here to explore the fully functional online demo of Log360.
Click here to sign up for and listen to our latest podcast series.
Click here to sign up and join our upcoming virtual seminars.
If you need technical assistance, you can contact our support team by filling out this form.
Yes, fill this form to make a suggestion for a new feature you would like to see in our future releases of Log360.