User Management


Log access is permitted by allowing certain groups either universal access (admins) or a whitelist of attributes. The attributes can be log hosts (the hosts that initially generate the logs), ranges of hosts (by IP), log classes, or log nodes (the nodes that store the logs). Groups can be either AD groups or local system groups, as per the configuration. Those in the admins group have the “Admin” drop-down menu next to the “ELSA” drop down menu in the web interface which has a “Manage Permissions” item which opens a new window for administrating group privileges.