iso17799

Splunk Server is a tool that indexes logs from ANY source (apache, OS X, sendmail, routers). No need to configure it for specific formats, write regular expressions or change your logging output.

Search mountains of data by time, keywords, type of event, source, host or relationships to other events. Note: Splunk is server software. You configure and use the software via a web browser.

Application Availability
Navigate web sessions, container calls and database transactions to investigate J2EE, LAMP, .Net and custom applications problems.

Server Management
Search Linux, Unix and Windows events across thousands of servers from one place to find problems and automate change analysis.

Network Management
Alert and report on terabytes of router, firewall, IDS, SNMP and syslog data to find and fix problems and automate security reporting.

Email Administration
Trace inbound and outbound messages across complex MTA, antispam, authentication and delivery agent components in seconds.

Transaction Analysis
Speed your ability to answer questions from business people, help desk and customer support staff asking about customer transactions.

Compliance
Meet your compliance requirements to manage, alert and report on logs and IT data for specific mandates including CoBIT, COSO, FFIEC, FISMA, GLBA, HIPAA, ISO17799/BS7799, NISPOM, PCI, SOX.

Whats New in This Release:

· LDAP Authentication support
· ZFS Support


Whats New in This Release:

· Splunk Servers older than 2.2.3 had problems authenticating users in LDAP when those users map to more then one Splunk role or when a user is a member of multiple groups and only one group maps to a Splunk role. Splunk Server 2.2.6 solves this problem and provides more information about user mapping when debug logging is in effect.
· Splunk Servers older than 2.2.3 configured to use an LDAP server that accepts anonymous binds allowed a user to login to Splunk without a password. Splunk Server 2.2.6 blocks all attempts at login without as password.
· Splunk Servers older than 2.2.3 had a problem where Splunks password file could become corrupted if edits were made and more than 10 users existed. Splunk Server 2.2.6 fixes this problem and will not corrupt the password file when there are more than 10 users.