ManageEngine Log360 Implementation & Sourcing

Capabilities

• Centralized real-time log collection from multi-vendor sources
• High-speed indexed log search and forensic investigation
• Pre-built correlation rules for threat pattern identification
• Machine-learning based User and Entity Behavior Analytics (UEBA)
• Deep Active Directory and Entra ID change auditing
• Out-of-the-box compliance reports (ISO 27001, PCI-DSS, GDPR, SOX)
• Automated incident remediation workflows (disable account, kill process, isolate host)
• Custom operational dashboards for IT security teams

A capability is included only in the licensed edition. Report names are not Novatelia certifications.

Typical environment

• Active Directory Domain Controllers (Security, System, DNS logs)
• Windows Server and Workstation Event Logs
• Linux and Unix servers via secure Syslog
• Enterprise Firewalls (Fortinet, Palo Alto, Cisco, Sophos)
• Core network switches, routers, and VPN concentrators
• Microsoft 365 audit logs and Azure Active Directory
• Custom database and business application audit trails

Architecture

Log360 operates on standard Windows Server virtual machines with dedicated high-performance disk storage (Elasticsearch-powered back-end). Distributed log collectors forward telemetry over encrypted TLS channels from remote branches back to the central server.

Deployment model

The platform runs on infrastructure the customer provides, or on the vendor’s documented hybrid option. Novatelia does not publish a hosted price on this page.

Novatelia implementation scope

• Requirement discovery and EPS (Events Per Second) sizing calculation
• Server sizing, CPU/RAM resource planning, and disk retention modeling
• Installation and initial cluster database configuration
• Active Directory and domain controller integration
• Syslog forwarder and agent onboarding across network devices and servers
• Normalization rule verification and custom log parser creation
• Correlation rule activation and email/SMS alert threshold tuning
• Compliance report scheduling and executive dashboard creation
• Operational documentation handover and administrator training

Sizing inputs

• Total number of user accounts in Active Directory
• Number of Windows, Linux, and database servers to be monitored
• Number of firewalls, routers, and switches forwarding syslog
• Estimated Events Per Second (EPS) volume across the infrastructure
• Mandatory log retention duration (e.g., 90 days, 180 days, 1 year, 3 years)
• Microsoft 365 user counts and cloud telemetry integration scope
• High-availability requirement for the SIEM database

Licensing qualification

Log360 licensing depends on the selected edition and the devices being monitored. Novatelia does not publish a price on this page. A quotation is issued only after the environment is sized.