System Requirements

Hardware Requirements

Databases

Log360 can use the following databases as its back-end database.

Bundled with the product

• PostgreSQL

External databases

• Microsoft SQL 2008 & above
• PostgreSQL: 10 to 14

Please note the hardware requirements needed to configure the External database for Log360

Log360 Setup with its child products is recommended to be split across two servers with the following configurations.

1. EventLog Analyzer, Active Directory AuditPlus and Log360 combined can be installed in the server with the following configuration.

2. M365 Manager Plus, Log360 UEBA combined can be installed in the server with the following configuration

EventLog Analyzer: https://www.manageengine.com/products/eventlog/system_requirement.html

M365 Manager Plus: https://www.manageengine.com/microsoft-365-management-reporting/system-requirements.html

Active Directory AuditPlus: https://www.manageengine.com/products/active-directory-audit/system-requirements.html

Log360 UEBA: https://www.manageengine.com/log-management/ueba/help/system-requirements.html

General Recommendations

VM infrastructure

• Allocate 100 percent RAM/CPU to the virtual machine running EventLog Analyzer. Sharing memory/CPU with other virtual machines on the same host may result in RAM/CPU starvation and may negatively impact EventLog Analyzer's performance.
• Enabling VM snapshots is not recommended as the host duplicates data in multiple blocks by increasing reads and writes, resulting in increased IO latency and degraded performance.

CPU & RAM

• Server CPU utilization should be maintained below 85% always to ensure optimal performance.
• 50% of server RAM should be kept free for Off-heap utilization of Elasticsearch for optimal performance.

DISK

• Disk latency greatly affects the performance of SIEM solutions. Direct-attached storage(DAS) is recommended on par with an SSD with near zero latency and high throughput. An enterprise SAN can be faster than SSD.

Log360

• Log360 components are resource intensive processes. It is recommended to provide each component with a dedicated server for better performance.
• It is recommended to split the load with Multiple ES Nodes, with Each node handling 800GB - 1.2 TB of Data.
• Log360 uses Elasticsearch, which is expected to utilize off-heap usage for better performance. Off-heap usage is maintained by OS and will free up when necessary.

Additional ES Node Recommendations:

Software Requirements

ManageEngine Log360 supports the following Microsoft Windows operating system versions:

• Versions requirements for Evaluation
  Windows 8 & above (or) Windows Server 2012
• Version requirements for Production
  Windows Server 2022/ 2019/ 2016/ 2012 R2/ 2012

Supported Browsers

ManageEngine Log360 requires one of the following browsers to be installed on the system to access the Log360 web client.

• Microsoft Edge
• Firefox 4 and above
• Chrome 10 and above
• Safari 5 and above