Monitor AWS EC2 Windows instances using EventLog Analyzer
EventLog Analyzer can monitor logs from AWS EC2 instances to prevent against cyberattacks and audit activities on the cloud. You must install EventLog Analyzer AWS agent in the EC2 instances.
Note:
- Ensure that your EC2 Windows instance can be accessed from the EventLog Analyzer server.
- Install one agent on each EC2 Windows server instance.
- Refrain from associating other EC2 server instances with EventLog Analyzer's EC2 agents.
Steps to llinsta EventLog Analyzer AWS agent in the EC2 Windows
Download the EventLog Analyzer AWS agent (EventLogAgent.msi) in the EC2 Windows instance from the given URL:
Enter the following server details:
- Server Name or Server IP Address
- Server Database ( PostgreSQL, MySQL, or MS SQL)
- Server Protocol (HTTP or HTTPS)
- AWS Instance (choose Yes if agent installation is on AWS or No if it is otherwise)
- Server Port (mention the HTTP/HTTPS server port, default port will be 8400)
EventLog Analyzer agent will now installed as a service in AWS Windows instance. You can check the AWS instance displayed in the Agent Administration page of EventLog Analyzer. You can view reports generated for activities taking place in your EC2 instances within a few minutes.
Other features
Collect and analyze Syslog data from routers, switches, firewalls, IDS/IPS, Linux/Unix servers, and more. Get in-depth reports for every security event. Receive real-time alerts for anomalies and breaches.
Analyze event log data to detect security events such as file/folder changes, registry changes, and more. Study DDoS, Flood, Syn, and Spoof attacks in detail with predefined reports.
Comply with the stringent requirements of regulatory mandates viz., PCI DSS, FISMA, HIPAA, and more with predefined reports & alerts. Customize existing reports or build new reports to meet internal security needs.
Monitor all types of log data from Active Directory infrastructure. Track failure incidents in real-time and build custom reports to monitor specific Active Directory events of your interest.
Monitor and track privileged user activities to meet PUMA requirements. Get out-of-the-box reports on critical activities such as logon failures, reason for logon failure, and more.
Monitor and audit print server with detailed reports on documents printed, attempts to print documents without proper permission, failed print jobs and their causes, and more.
Need Features? Tell Us
If you want to see additional features implemented in EventLog Analyzer, we would love to hear. Click here to continue