How to get notified about archive integrity issues in EventLog Analyzer
Objective
EventLog Analyzer sends alerts when archived log files are deleted or tampered with. These alerts help ensure the integrity and security of archived data, which is critical for audit trails, compliance, and forensic investigations.
Email notifications are automatically triggered when archive integrity issues are detected, allowing timely investigation and corrective action.
Prerequisites
- Email server settings must be configured under Settings > Admin Settings > Notification > Mail Settings.
Steps to follow
Step 1: Navigate to Settings > Admin Settings > Product Settings > Product Notification.
Step 2: Enable the option Archive Integrity.
Step 3: Click Save to apply the changes.
Tips
- Archive integrity alerts are triggered when EventLog Analyzer detects a mismatch between the archive file’s checksum stored in the database and the file in the physical archive location.
- These alerts help maintain accountability and data security across your log management strategy.