Q-Log – Quantalytics

The Q-Log^® is an extremely small form factor, low-power-consumption server providing full log collection and automated visual analysis for all devices and services on a network. It works with all SNMP-available logs. The Q-Log uses the ELK Stack (Elasticsearch, Logstash, and Kibana) to aggregate and analyze logs, as well as provide alerts. Logstash aggregates and normalizes all log data, using over 160 different connectors and transformation tools. Elasticsearch provides near real-time search and analysis. Kibana is the visualization and navigation tool for log analysis.

This ultra compact design allows exceptionally flexible and creative deployment options as well as significant electricity and space savings.

We encourage you to download additional product details.

The Q-Log includes:

Logstash

Logstash

Logstash is the leading open source, enterprise-class, log aggregation and log data normalization tool. Logstash has more than 160 different log connectors and data transformation tools so that logs from all kinds of hardware and services can be aggregated for subsequent unified analysis.
Elasticsearch^®

Elasticsearch^®

Elasticsearch^® is the leading open source, enterprise-class, RESTful search and analysis tool. Elasticsearch makes it possible to run inquiries against the logs normalized and aggregated by Logstash. It uses standard RESTful APIs as well as JSON. There are also clients in other languages such as Java available.
Kirbana^®

Kirbana^®

Kirbana^® is the leading open source, enterprise-class, log data visualization package, opening up log analysis to non-experts. Kibana^® provides graphical analysis, which opens up log analysis to non-experts in the field of log analysis. Kibana^® includes the ability to do geo-analysis of log data.
ModSecurity^®

ModSecurity^®

ModSecurity^® (ModSec) is the leading open source Apache web server attack protection package. ModSec is used to harden the Q-ConPot’s built-in Apache web server and prevent conceivable attacks.
ClamAv^®

ClamAV^®

ClamAV^® leading open source anti-virus package.
Tiny Honeypot (THP)

THP

THP fools attackers by making it appear that the attack is working, while meanwhile logging the attack info. THP wastes an attacker’s time, and creates an opportunity to detect the network intrusion by offering to the attacker what appears to be thousands of services.
Webmin

Webmin

Webmin is the leading open source Web GUI package for server configuration and maintenance. Webmin also allows for the linkage of multiple Q-Logappliances for simplified administration.
HA Proxy

HA Proxy

HA Proxy is the leading open source package for automatic failover and load balancing. Up to 32 Q-Log appliances may be linked for automatic failover or load balancing for coverage of extremely large networks. Administration is done through a web gui.

Q-LOG Hardware Specifications:

Dimensions

4.25” x 2.50” x 1.125” – 6 oz
(108 mm x 64 mm x 26 mm – 170 grams)

Power consumption under full load:

8 watts, 120v-240v
No fan or any moving parts. Must be installed in a well-ventilated space.
Operates 32°F−158°F ( 0°C−70°C)

LED indicators:

Power
Link (physical connection to network)
Activity (network traffic)
1000 mbps (gigabit) NIC connection
Dual Band WiFi. (2.4 GHz & 5 GHz)

The Q-Log is completely administered through a Web GUI. All package usage is via Web interfaces, thereby opening up sophisticated intrusion detection, network forensic analysis, and network monitoring to even novice network administrators. No Command Line Interface (CLI) or Linux skill is required.
The Q-Log has both 1000 mbps (gigabit) NIC and 802.11 b/g/n WiFi. (2.4 GHz and 5 GHz.)
The Q-Log is also available as a Virtual Machine (VM).
Using the provided Webmin module, two-factor authentication can be added using Google Authenticator or Authy, a commercial service with its own app. Google Authenticator runs on Android, IOS, and Blackberry devices, and uses the standard TOTP protocol.
Notifications are provided by e-mail using SendMail, which is configured with a module in Webmin, and syslog entries. The Q-Log can be integrated with Nagios^® in the Q-BOX^® as another notification route. SMS notification is available as an option. The Q-Log can also be integrated with any other Syslog or SIEM (Security Information and Event Management) solution.

Click For More Information

Q-Log^® and all registered trademarks above are property of their respective owner(s).