100% Developed & Supported in the state of Washington, U.S.A.
December 5, 2007 - Volume 2, Number 13- In this Issue -
Try us out today.
Free, Full-Featured
30-Day Trial!
What our customers
share with us:
"We are in production and ELM is a pretty cool tool. The executives here love the reporting capability."
Security Contractor
U.S. Government Agency
|
Contact Us: Phone: 360-546-0878 |
|
Happy Holidays from the Gang at TNT Software!
From all of us at TNT Software, we wish you the absolute best this holiday season – a Merry Christmas and a Happy New Year!
Merritt, Susie, John, Linda, Jamie, Joe, Greg, Brent, Steve W, Steve T, Keith, Jeff, Ryan, Aaron K, Martin, Richie, Brittany, Aaron W
End of the Year Special on ELM Log Manager
Now through the end of December you can purchase ELM Log Manager 5.0 Server Agents for 25% off list price! TNT Software is extending this special offer to both our new and existing clients for all orders quoted and placed between October 1 and December 31, 2007. Been waiting to add on? Last minute budget dollars you need to use? Now is the time to make your move!
Promotion Details
- 25% off Server Agent list price – quantity discounts still apply
- ELM Log Manager Version 5.0 Server Agents only
- Offer available to both new and existing customers
- All orders quoted after October 1, 2007 and purchased by December 31, 2007
Contact our sales staff today! http://www.tntsoftware.com/elmdecemberspecial
Check Out the Product Demonstration Webinar Schedule for December
December 11, 2007
Security Monitoring, Reporting, and Notification Using ELM Enterprise Manager 5.0Frequently we are asked about how TNT Software and ELM can assist with fortifying security, meeting auditor requirements and in general doing a better job of monitoring security event logs. As a service to our customers (existing and prospective ) we are offering this focused on-line presentation of the features and functionality found in ELM Enterprise Manager Version 5.0 that pertain to security monitoring activity - Please join us:
Demonstration Details
What: Security Monitoring, Reporting, and Notification Using ELM Enterprise Manager 5.0
When: Tuesday, December 11, 2007, 8:00 am, PST
Where: WebEx On-line Presentation
Duration: 45 minHow do I attend?
Register by using this link: https://tntsoftware.webex.com/tntsoftware/j.php?ED=95603102&RG=1&UID=0
-Or-
Request a formal meeting invitation by emailing: sales@tntsoftware.com
The subject line should read: ELM 5.0 Security Webinar Invite 12/11
December 13, 2007
Enterprise Manager 5.0 Live Overview and DemonstrationWould you like to know more about the monitoring and management ELM can provide your organization? Would you and/or your team benefit from a LIVE demonstration of ELM Enterprise Manager? Then you're in luck! TNT Software will be giving a live demonstration of ELM Enterprise Manager coming right up!
Demonstration Details
What: ELM Enterprise Manager 5.0 Demonstration Overview
When: Thursday, December 13, 2007, 8:00 am, PST
Where: WebEx On-line Presentation
Duration: 1 hourAreas we will cover
Monitoring
- Deploying Agents - Virtual & Service Agents for agentless and agent based monitoring
- Setting up Monitor Items - Collectors, Alarms and Monitors
- Creating Agent Categories - apply common monitoring across groups of servers
Notifications
- Filters - the "criteria" for all notifications
- Notification Methods - Email, Scripting, Pager, Desktop Pop-up, SNMP, Syslog and more
- Rules - the "connector" between Filters and Notification Methods
Results
- Alerts: open and closed status (Agent color coding: Red, Yellow)
- Event Views: default and customization options - include filters, exclude filters and custom date and time range settings
- Reports: ELM Editor (custom reporting engine) ELM Publisher (preconfigured reporting engine)
How do I attend?
Register by using this link: https://tntsoftware.webex.com/tntsoftware/j.php?ED=95602892&RG=1&UID=0
-Or-
Request a formal meeting invitation by emailing: sales@tntsoftware.com
The subject line should read: ELM 5.0 Demonstration Invite 12/13
The "ELM 411" - Using Exclusion Filters to Remove Noisy Events
- Permanently remove noisy event data from your ELM Deployment through the creation of Exclusion Filters that when applied, universally eliminate event data from both event views and from being written to the ELM Database. -Frequently we receive requests from customers who are trying to optimize Event Views to see "meaningful" event data while eliminating the "noise" that is often found in Windows event logs. A useful but somewhat "hidden" way to easily exclude events from being written to the ELM database as well as quieting the "noise" in your event views is described in the steps below:
- In the ELM Console expand the Results Container
- Navigate and expand Event Views
- Navigate to an event view where you will find a large quantity of "noisy" event log entries. An example may be Informational event logs dealing with successful print jobs. Or Security Event Logs dealing with Object Access Success that are capable of generating hundreds if not thousands of records each month.
- To find out what events are most "chatty" in your environment, follow these steps:
- Make sure the view is in Summary Mode. To confirm select the Event View name (example: All--Events) and right click, from the context menu choose Summary Event View (fourth menu option down from the top) if you see "Detail Event View" listed then your view is already in Summary View Mode.
- In the results pane sort your chosen Event View by clicking the "Count" column header (second column from left). This will sort your events from high to low or low to high giving you the most or least frequent event log entries by total count. Sort by the Most frequent (highest count).
- By right clicking on the event logs with the most frequent counts and the least value to the organization (aka: noisy event logs) you can choose "All tasks" and then choose "New Event Filter" and follow the Wizard to create an Event filter based on the properties of your chosen event that you would like to EXCLUDE from all views and from the ELM database. It's also a good idea to use the word EXCLUDE at or near the beginning of the Filter Name or Description so when you see it later its intended purpose will be obvious at a glance.
NOTE: This WILL eliminate the data from being recorded in the ELM database so please be confident without a doubt that this data is not important to the organization and will never be needed in the future.- Once you have created the new Event Filter navigate to "All Event Filters" the second folder from the top within Event Views.
- Find your new Event Filter from the global list of all filters.
- Double click on your new event filter to bring up the properties. (If you wish to double check events that will be excluded, you can select the "Event Filter Criteria" tab and review the values. Events that match the criteria shown will be excluded.)
- Choose the "Event View" tab.
- Choose the "Exclude" tab.
- Holding down the Shift Key highlight all of the views listed under Exclude - NOTE: make sure you highlight ALL Event Views then press the Space bar to select all views. If you do not select ALL views listed under the Exclude tab you will not exclude the event from being written to the ELM database.
- Click "Ok" to save your changes.
You have now excluded your chosen "noisy" event from all of your event views and the event log entries will not be written to the ELM database. You will now be saving time and energy by no longer reviewing these event log entries as part of your review process and you will also optimize your storage resources by keeping more meaningful information and not filling your database with events that have no value to the organization.
NOTE: All ELM 411 articles are written based on Version 5.0 and instructions will not be accurate for previous ELM Versions. If you would like assistance upgrading to Version 5.0 so you can use these tips - please contact support@tntsoftware.com.
Did you know?
A "jiffy" is an actual unit of time for 1/100th of a second. Thus the saying "I'll be there in a jiffy."The first domain name ever registered was Symbolics.com on March 15, 1985.
No matter its size or thickness, no piece of paper can be folded in half more than seven times.
Thomas Watson, the chairman of IBM in 1943, predicted that there would probably only be a world market for five computers.
Edwin Armstrong invented FM radio in 1933. The first men to use FM radio to communicate with Earth from the moon's surface were named Edwin Aldrin and Neil Armstrong.
The microwave oven was invented after a researcher walked by a radar tube and a chocolate bar melted in his pocket.
While still in college, Bill Gates and Paul Allen once built a special purpose machine called "Traff-O-Data." It was a machine that would analyze information gathered by traffic monitors. They never found any buyers.
In 1970, chip maker Intel purchased a pear orchard to build their corporate headquarters on.
According to independent research firms, Google gets nearly 4 billion search queries per month (September 2007) and growing.
The IRS employee tax manual has instructions for colleting taxes after a nuclear war... Which proves the old saying that "there are only two guarantees in life - death and taxes."
Quotable Quotes
"Even if you're on the right track, you'll still get run over if you just sit there."
- Will Rogers"Of all the things you wear, your expression is the most important."
- Author Unknown"Computing is not about computers anymore. It is about living."
- Nicholas Negroponte"Treat your password like a toothbrush. Don't let anybody else ever use it, and get a new one every six months."
- Clifford Stoll"There are three kinds of death in this world. There's heart death, there's brain death, and there's being off the network."
- Guy Almes
Christmas Special
"Some things have to be believed to be seen."
- Ralph Hodgson
