[logs] Re: regex-less parsing of messages

Previous message: Anton Chuvakin: "[logs] Re: regex-less parsing of messages"
In reply to: Anton Chuvakin: "[logs] Re: regex-less parsing of messages"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

apbarros@private

Just like PERL: The best SOX Compliance tool ever made.

Regards,

Augusto.

On 12/8/05, Anton Chuvakin <anton@private> wrote:
> Todd and all,
>
> I was preparing a long and thoughtful message on this great thread,
> but this caught my attention:
>
> > This makes SPLUNK Pro totally good to go for meeting SOX and compliance in
> >2CFR/211CFR type environments.
>
> Ah, that totally makes sense :-) Get this thing and you met SOX
> requirements... sure. I hope you mean that it can be used for SOX,
> *just like most other logging tools*.
>
> In general, can someone shed some light on a broader context of this:
> what kind of feature(s) might make a logging tool to NOT satisfy the
> requirements for auditing of controls in SOX?
>
> Best,
> --
> Anton Chuvakin, Ph.D., GCIA, GCIH, GCFA
>          http://www.chuvakin.org
>     http://www.securitywarrior.com
> _______________________________________________
> LogAnalysis mailing list
> LogAnalysis@private
> http://lists.shmoo.com/mailman/listinfo/loganalysis
>

--
Augusto Paes de Barros, CISSP-ISSAP(r)
http://www.paesdebarros.com.br/indexpb.html
_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis