Event Logging

Category: Security
Audience: Faculty, Staff, IT

Overview 

The Event logging service provides a secure central log repository with search capabilities for departmental use.

Features 

  • Collect and index any machine data from virtually any source, format, or location in real time. Data can be any kind of machine data such as logs, application data, raw data from hardware and software sensors, user feedback data, survey responses, IoT device data, and more.
  • Search and navigate machine data, through real-time, fast, free-form searches using five different types of correlation (time, transactions, sub-searches, lookups, joins) and interactive results.
  • Gain operational intelligence by correlating and analyzing relationships within the data, across multiple sources, to facilitate event pattern detection.
  • Visualize and report via custom dashboards and views, as well as scheduled reports, with interactive charts, graphs, and tables.
  • Monitor and alert based on events, conditions, or key performance metrics. Alerts can be sent to indicate emerging issues and abnormal conditions that enable administrators to take preventative and proactive measures.
  • Includes secure data handling, fine grain access controls, auditability, assurance of data integrity, and integration with existing authentication solutions.
  • Add vendor supplied, community created and custom apps to enhance and extend the Splunk core features.

For a more detailed description of features and capabilities, see https://www.splunk.com/en_us/products/splunk-enterprise/features.html

Cost 

  1. Initial consultation and set-up fee: $2,083 one-time fee
  2. Monthly rate: The monthly rate is determined by which option you select for retention time of event logs. Both options allow up to 5GB daily usage with higher usage resulting in additional charges.
    1. 6-month retention option:  $745 monthly
    2. 6-year retention option: $1,748 monthly

Support 

Email logging@uic.edu

 

Further Information 

ACCC Service Level Agreement (SLA)

Service Request Fulfillment Time

3 business days, unless in-person training/discussion is required.

Incident Resolution Time

3 business days.

Service Availability 24x7
Maintenance Window(s) Approved ACCC maintenance window(s): accc.uic.edu/service-status
Service Notification Channel(s) ACCC News and Alerts: accc.uic.edu/news/all
Reviewed to Ensure SLA Meets Business Requirements

Provisional SLA - Currently under IT Governance review.

Date Reviewed

Provisional SLA - Currently under IT Governance review.