With version 5.5, NetVizura moved the Eventlog Analyzer's data storage from PostgreSQL to Elasticsearch. This change delivered a more performant and virtually limitless scaling log analyzer. With the release of version 5.6, we have introduced two new features that will enhance your data storage and search capabilities.

For those unfamiliar with NetVizura EventLog Analyzer, here is a brief intro: This solution collects and stores a vast amount of Syslogs from your network devices. Log severity level and source device distribution are visualized for all data in the selected time window, which ranges from several milliseconds to several years. This way, you can identify security incidents, policy violations, and operational issues in a significantly shorter time. If you are interested in learning more, check out our website.

The first feature is the introduction of remote Elasticsearch database options, which allows you to store your data in an Elastic Cloud or similar service, rather than a localhost machine. This enables you to scale your Eventlog appliance to virtually infinite levels. With the added flexibility of the hot/warm/cold architecture, you can store a huge amount of data without breaking the bank, opening up new possibilities for your data storage needs.

The second feature is focused on search. By default, when searching in Elasticsearch, we use a match query, which searches through the whole message for your given string. This default method is reliable and effective, ensuring you get all the results you've asked for with confidence.
However, if you are searching for something that you are unsure how it is pronounced or spelled or something that is just on top of your tongue, there is no better thing than a wildcard query. So we implemented the following: If you are searching for something and there are results, these results are from a match query. However, if the match query gets zero results, we repeat the query through a wildcard query to ensure you get the desired results. All this process goes in the background, ensuring you get the results you need without any noticeable delay.

NetVizura 5.6 will launch by the end of this month. If you haven't already, please follow our newsletter and subscribe—we’d love to keep you in the loop!