Top Qs
Timeline
Chat
Perspective
Sagan (software)
Log analysis software From Wikipedia, the free encyclopedia
Remove ads
Sagan[1] is an open source (GNU/GPLv2) multi-threaded, high performance, real-time log analysis & correlation engine developed by Quadrant Information Security that runs on Unix operating systems. It is written in C and uses a multi-threaded architecture to deliver high performance log & event analysis. Sagan's structure and rules work similarly to the Sourcefire Snort IDS/IPS engine. This allows Sagan to be compatible with Snort or Suricata rule management software and gives Sagan the ability to correlate with Snort IDS/IPS data.
 | This article needs additional citations for verification. (October 2014) |
 | This article includes a list of references, related reading, or external links, but its sources remain unclear because it lacks inline citations. (July 2024) |
Remove ads
Sagan supports different output formats for reporting and analysis, log normalization, script execution on event detection, GeoIP detection/alerting and time sensitive alerting.
Remove ads
See also
References
External links
Wikiwand - on
Seamless Wikipedia browsing. On steroids.
Remove ads