Posts Tagged ‘feature update’

OnDemand Log Management feature update in September

September 30, 2010

In this edition of the OnDemand Log Management new features review I’m going to familiarize yourself with the exciting changes we made to the core function of the product recently – events search.

There are many ways people search data today. The main factor that influence our search behavior is the nature of the actual data being searched. If data is unstructured (e.g. web pages, text documents) then full text search becomes your savior. For structured data (Windows events, database records, spreadsheets) it makes much more sense to search by specific parts of the composite record.

In OnDemand Log Management we decided to combine the best of the both worlds. You have the power of Google like search language coupled with familiar Excel like column based filtering.

One search tool nicely complements the other – start off by putting any word or phrase you’re looking for in the query box, get the initial results and narrow them down by putting additional criteria in the column filters. For example start your search with “logons”, then pick up the EventID field into the events grid and put in only the eventids of logon events you’re really interested in. Don’t know what eventids to look for?  Find it out in our online event encyclopedia. Shrink the results further down by putting in the logon name of the user the logon events should be attributed to.

The syntax of the query language we came up with highly resembles that of Google or Windows 7 desktop search. We don’t want you to climb a huge learning curve of mastering yet another query language. Instead we want you to leverage your existing search skills you arguably apply every day. Today the language syntax can accommodate both plain words and phrases that can be found anywhere in the event and queries tied to particular fields that can be distinguished in the event. You can construct complex search criteria by stitching the simple parts together with the logical operators like AND and OR. You can also use wildcards to search by a substring that you can only remember (e.g. first N characters of the user name). The full language description along with the sample queries can be found in our online Help.

Of course, this is not where we’re going to stop. We hope that the first version of our query language will help you jump started with constructing basic event queries not requiring you to spend a lot of learning time beforehand. Meanwhile we’ll be sophisticating the language to let you do more with your event data both already collected and yet to come.

Tell us what you can and can not do with the search tools we put in your hands today! Spend two minutes of your time to vote for existing or submit new product improvement ideas by using this feedback widget that you can find on the left hand side of the product UI


OnDemand Log Management feature update in July

July 26, 2010

It’s been over a month since we’ve been exploring a new cloud venue with our SaaS products.  One of the exiting changes that we couldn’t help noticing is how frequently we get to update our products with new features. I’m sure this is one of the sweetest things our customers continue enjoying in the cloud thanks to absolutely zero effort product upgrade. Indeed, all new features appear instantly  next time you launch your favorite browser. No annoying compatibility issues, no lengthy software assurance testing before rolling out to production, no manual reconfiguration – it’s all been taken care of for you!

With this post I decided to start broadcasting updates to features of the SaaS product I’ve been working on – Quest OnDemand Log Management. During the last couple of weeks the event log management service received the following improvements:

  1. Face lift. The service got the whole new design that is consistent across entire line of OnDemand products. I personally find the new design more polished and ergonomic than the previous one. You just go ahead and log into the product to check it out and let us know what you think about it. If you haven’t yet signed up for the service you can do that here
  2. Field picker. Now you’re free to choose a set of event fields being displayed in your search results.
    If you haven’t dealt with the event logs much and all you need to know is “who did what” in your environment then just stick with the default selection of W5 fields (Who, What, Where, When, Where From).
    If you mastered Windows Security log and feel a need to see events as they originally appear in the event log then just pull native event fields into the view: EventId, Source, Category, User, Computer, etc.
    Whatever event fields you choose they all participate in any searches you run.
  3. New reports. You can find a wider selection of pre-defined reports on Security Log events.  Moreover, happy customers of Quest Change Auditor can take full advantage of the event log management in the cloud which now includes support for Change Auditor product logs and reports.
  4. Faster event processing. Some tweaks were made to the event queue processing components living in the cloud.  Optimizations made to event metadata processing algorithm resulted in significant performance gain and warranted better service scalability in the long run.

These are just the most notable changes recently made to the product. The list goes on with numerous fixes and optimizations of the service being constantly made. And all this is provided for free with your existing service subscription.

There is more to come soon.