DATASHEET (TRIPWIRE)

Tripwire LogCenter

Centralized Log Management Made Simple
As the volume and sophistication of cyberthreats increase, organizations must
sift through mountains of data to identify real threats. The traditional approachof relying on inadequate log collection tools to deliver ever-increasing log andevent data to expensive, large-scale SIEM deployments is no longer sufficient.
Fortra’s Tripwire® LogCenter® provides secure and reliable centralized log
collection, analysis, and delivery. It readily integrates with your existing
infrastructure, and with a large library of available correlation rules it
empowers your team to monitor, detect, and quickly respond to threats in yourenvironment.
Whether you collect logs strictly for regulatory compliance or to increaseawareness of credible cyber threats, Tripwire LogCenter ensures the process isGiven today’senvironment ofsophisticated security
threats, security
analytics solutions andregulatory compliancedemands, the need fora more intelligent log
solution has becomeclear.

secure and reliable.

What Distinguishes Tripwire LogCenter?

Tripwire LogCenter offers an alternative to traditional approaches to meeting organizational needs for early breach detection,compliance, and secure, reliable log collection.

Centralized Forensics Data

Tripwire LogCenter integrates data from Tripwire Enterprise and Tripwire IP360™ to provide organizations insight into therelationships between suspicious events, system changes, weak configurations and current vulnerabilities. This rich combinationof information enables you to identify risk and prioritize your security efforts more effectively. For those using the CIS Controls as asecurity framework, Tripwire protects your critical infrastructure by correlating data and pro­viding context from the critical first six.

Enabling Local Expertise

Deploying Tripwire LogCenter at the departmental or agency level allows for faster response and investigation of incidents byputting the data in the hands of the individuals who know it best—the local engineers and operators. A centralized SIEM or analytics
tool can provide great value across a wide set of data, but investigating an incident requires detailed data at your fingertips.
Tripwire LogCenter can support a centralized analytics function while simultaneously enabling local visibility.

Efficient Analytics and Filtering

Most SIEMs and security analytics tools are licensed based on consumption—either data indexed or events per second—which isa model that suffers from high cost, difficult budget planning, and a poor signal to noise ratio. Tripwire LogCenter can be used tocollect and store all log events while only forwarding those that are relevant to centralized analytics tools. This reduces the costthose tools while improving the signal to noise ratio.

Fortra.com

Fortra Datasheet

Tripwire LogCenter

Cost Effective Compliance

Most compliance standards require collection and storageof log events, but meeting these requirements with acentralized SIEM can be expensive. It can also be difficult toensure that geographic compliance requirements for log
storage are met. Tripwire LogCenter can be used as thecomprehensive log storage tool for compliance, at a lower
cost than traditional SIEMs. It can also support keeping
log data local to a geography, while providing centralized
access for analysis.

Faster Time-to-Value:
Mitigate Risks Out of the Box

Tripwire LogCenter allows you to quickly define andSecurity dashboards and trending analysis views help you manage your security risks
and dynamically drill down on areas requiring greater scrutiny.

customize correlation rules. When a correlation rule istriggered, you choose the response: store for reporting,proactively alert, or launch a scripted action. Its rule builder
reduces the need for specialized expertise and resources tocreate complex rules.
To get your team quickly up to speed, Tripwire LogCenter
includes the following solution packs:• Threat & Security Solution Packs• Insider Threat• User Audit and Authentication• Denial of Service Detection• Breach and Intrusion Detection• Network and System Audit• Vulnerability and Cybercrime Control Integration• Database Audit

Tripwire LogCenter lets you define complex combinations of events by easily creatingcorrelation rules with a graphical drag and drop rule creator.

• Compliance Solution Packs• NERC• PCI• NIST 800-53• HIPAA

Business and User Context

Tripwire LogCenter makes it easy to gather and sharesecurity data. Its standards-based classification of log andevent activity supports searches across platforms anddevices, which yields comprehensive and accurate resultsfor security investigations or in compliance reports.
Tripwire LogCenter can automatically use the context fromits integration with the other Tripwire solutions throughdynamic correlation lists. In addition, you can monitor

Obtain leading indicators of breach activity by adding business and user context toyour incident detection efforts.

specific users and user groups based on user attributes,
such as entitlements, groups and roles.

Fortra.com

Page 2Fortra Datasheet

Tripwire LogCenter

Combining business and user context lets you easily monitor
assets and users that together may warrant a closer
watch—for example, your highest value assets to which
contractors have access. You can further prioritize risk bycorrelating suspicious events from Tripwire LogCenter withsuspicious changes detected by Tripwire Enterprise and withvulnerabilities identified by Tripwire IP360.

Asset Discovery

Tripwire LogCenter can mine collected log data to discoverpreviously unknown assets through their activity andinteractions with monitored assets. This method of passive
asset discovery doesn’t rely on network scans or monitoring
captured traffic. Users can then add discovered assets toTripwire LogCenter for log collection.

Secure, Reliable Log Collection

Tripwire LogCenter’s comprehensive log collection ensuresthat organizations can meet regulatory requirements forlogging and have the data they need for security analytics
and incident response. The Tripwire Axon® agent, used tocollect log data, ensures that if a system, device or otherasset fails, your log data is still safe. And Tripwire LogCenter
supports agentless log collection on platforms where agentsHigh Availability

To ensure seamless logging, Tripwire LogCenter’s Failover
Manager provides high availability in the event that thePrimary Manager goes offline. In the event that the Active
Manager remains unresponsive for a certain amount oftime, the Failover Manager will automatically takes over theworkload.

cannot be installed.

Integration with Tripwire Products

Log Storage, Indexing and Search

in-class capabilities alone, they deliver additional value

While Tripwire’s products are designed to deliver best-

Collected logs are stored and indexed for efficient searching,allowing for the examination of every collected detail during
an incident investigation. Tripwire LogCenter can store logs
centrally or distribute them via secondary managers toretain local storage while facilitating centralized access.

by working together. Tripwire LogCenter can use thevulnerability data from Tripwire IP360 and the business
context data from Tripwire Enterprise to deliver moreaccurate, complete correlation results. These integrations
increase your visibility and reduce time spent on switchingtools, improving efficiency to protect your system.

Event Correlation

While Tripwire LogCenter comprehensively collects log
events, it can also extract the signal from the noise throughthe use of its correlation engine. Prebuilt correlation rules areincluded for a number of platforms and purposes, including
compliance standards and security use cases. Users caneasily create custom correlation rules using a simple dragand drop user interface.

Ready for a Demo?
Let us take you through a demo of Tripwire LogCenter andanswer any questions you have. Visit tripwire.com/demo

About Fortra
Fortra is a cybersecurity company like no other. We’re creating a simpler, stronger future for ourcustomers. Our trusted experts and portfolio of integrated, scalable solutions bring balance andFortra.com

control to organizations around the world. We’re the positive changemakers and your relentless ally toprovide peace of mind through every step of your cybersecurity journey. Learn more at fortra.com.

© Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective owners.

(fta-tw-ds-0623-r1-hm)