With a large number of logs being sent to Symantec Managed Security Services, there would be a lot of value add if there were strong capabilities to search the data, similar to Splunk. Currently, finding logs in the MSS portal is slow, clunky, and not intuitive. A search query language (even SQL) would make searching data much easier.
↧