The appliances go beyond just making it easier to read, search and understand what your logs are doing. They can also read and compare logs as well as alert you when something is wrong. A good example would be if your login credentials are used in Texas and then five minutes later used in Colorado, the software could compare the two logs and alert someone to the conflict.


What does this have to do with storage? LogLogic has one customer that is creating 3TBs of net new logs per day. While that may be an extreme, it is not unusual for a customer to store 100GBs or more per day of log information. This of course is an ideal use case for disk archive as we discuss in our article Archiving Basics.


For example of how the math works and how big the storage of log information can be look at the LogLogic blog posting from May: http://blog.loglogic.com/2010/05/size_really_does_matter.php


LogLogic is getting ready to add an option to run the appliance as a virtual machine under VMware which should make deployment easier and less expensive. Logs are a way of life; many users keep them for a variety of reasons. LogLogic provides the ability to actually find the information in the logs when you need them, which after all is why you are storing the log in the first place.

Briefing Note

- Finding the Needle in the Haystack