Our organization is going thru the PCI-DSS process and need to have 10.1- 10.6 fulfilled. Does anyone have a recommendation of what their organization uses for their syslog server?
Just in-case someone stumbles upon this...
We have decided to use GFI's logging software. I demo'ed a bunch of different ones and this one seems to have the best cost/feature ratio we need. If anyone still has any thoughts or is going thru the same thing, let me know.
We are in the same boat. We have been researching Soft Tree's DB Audit, which seems to be very comprehensive and cost beneficial.
Naomi
Might like to take a look at Log Rhythm, good product and we are just in the stages of implementing it. Thanks