Logstorage: Advanced Log Management Solution by Infoscience Corporation

By /

Listen to this Post

Featured Image
In our exploration of solutions showcased at Japan IT Week 2025, Logstorage by Infoscience Corporation stands out as a leading log management tool. Specializing in log collection, archiving, parsing, aggregation, and analysis, Logstorage supports multiple log sources, including:
– Agent-based logging
– Syslog
– FTP
– API integrations
– SNMP (a unique feature among competitors)

With over 18 years as Japan’s top log management solution, Logstorage complies with PCI DSS v4.0 and allows customizable retention policies per log source. While it doesn’t replace a SIEM, it enables log-triggered actions and can serve as a preprocessing layer before SIEM ingestion.

🔗 Official Website (English): https://logstorage.com/english/

You Should Know: Logstorage Implementation & Practical Commands

1. Log Collection via Syslog (Linux/Windows)

  • Linux (Rsyslog Configuration): 
    Install rsyslog if not present 
sudo apt-get install rsyslog -y

Configure remote log forwarding to Logstorage 
echo ". @logstorage-server-ip:514" | sudo tee -a /etc/rsyslog.conf

Restart rsyslog 
sudo systemctl restart rsyslog

  • Windows (Event Forwarding): 

    Configure Windows Event Forwarding (WEF) 
wecutil qc /quiet 
winrm quickconfig -transport:http

2. API-Based Log Ingestion (cURL Example)

curl -X POST https://logstorage-api-endpoint/logs \ 
-H "Authorization: Bearer API_KEY" \ 
-H "Content-Type: application/json" \ 
-d '{"timestamp": "2025-04-26T12:00:00Z", "event": "login_attempt", "status": "failed"}'

3. SNMP Log Traps (Linux)

 Install SNMP tools 
sudo apt-get install snmpd snmp -y

Configure SNMP trap forwarding 
snmptrapd -Lf /var/log/snmptrapd.log -On -c /etc/snmp/snmptrapd.conf

4. Log Retention Policy (Example)

Logstorage allows retention policies like:

  • 90 days for authentication logs
  • 1 year for compliance logs
  • Real-time parsing via regex: 
    ^(\d{4}-\d{2}-\d{2}) (\d{2}:\d{2}:\d{2}) [(\w+)] (.+)$

What Undercode Say

Logstorage bridges the gap between raw log collection and SIEM analysis. Key takeaways:
– Pre-SIEM Filtering: Use it to normalize logs before costly SIEM processing.
– Multi-Protocol Support: SNMP, FTP, and API integrations expand visibility.
– Compliance Ready: Meets PCI DSS v4.0 for audit trails.

Relevant Commands for Further Testing:

 Monitor log ingestion (Linux) 
tail -f /var/log/syslog | grep "Logstorage"

Verify log forwarding (Windows) 
Get-WinEvent -LogName "ForwardedEvents" | fl

Expected Output:

A centralized log repository with parsed, searchable data ready for analysis or MSSP handoff.

🔗 Reference: Logstorage Official Site

References:

Reported By: Activity 7321505790802944000 – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅

Join Our Cyber World:

💬 Whatsapp | 💬 Telegram

Related Posts: