VANGUARD ADVISOR Custom Reporting Capabilities Capturing information in event logs is a great idea, until there’s a problem. When the pressure is on, how do you sort through the logs and find what you really need to do? Fast. Vanguard Advisor™ is an integrated security information and event-management (SIEM) solution for the mainframe that provides powerful analysis, in-depth query, immediate modification, reporting and report distribution capabilities, plus continuous security event monitoring and notification of potential intrusions.
Intrusion detection and notification Customizable reports
Multi-level sorting
The SIEM Module (Vanguard Advisor) makes collecting, analyzing, and reporting on security event logs easier than ever before, while eliminating the need to learn the complex reporting languages required by less sophisticated software. Advisor provides real-time information at multiple levels — summary, detail, and extended-detail information — all linked by a fast, easy-touse, drill-down engine that supports exceptional data mining capabilities in the IBM® RACF® database.
Customize Advisor’s reports using extensive masking and selection criteria without programming. Or build custom reports using QuickGen with full data extract capability.
Advisor offers a wealth of predefined, customizable reports that can work with either live log records or archived log data, and may be generated online or in batch mode. That’s just the start. Advisor easily makes corrective actions in RACF without exiting the software using Vanguard’s exclusive SmartLink™ integration technology to access the powerful capabilities of Vanguard Administrator™.
Advisor’s ability to produce off-the-shelf or custom reports, together with powerful masking, multi-level sorting, and drilldown capabilities, gives security personnel unprecedented power to locate and analyze security events. A rapid incidence response process can be the last line of defense to protect against host-based intrusions. Advisor detects a wide range of intrusions and immediately sends email notices to security personnel and resource owners’ mailboxes, cell phones, or pagers. Advisor’s ability to create off-the-shelf and custom reports gives security personnel unprecedented flexibility to locate and analyze security events.