The document provides an overview of LogRhythm's LRX appliance line for log management and security information and event management (SIEM). The LRX appliances provide scalable, flexible deployment options from a single appliance for small businesses to multi-tier enterprise configurations. The appliances include models for different size deployments and capacities. LogRhythm also offers expansion options like storage arrays and site log forwarders.

1. PRODUCT OVERVIEW
LRX Series Appliances
LogRhythm offers turnkey Log Management/SIEM solutions for businesses of all sizes. The high-performance LRX
appliance line provides IT organizations with flexible deployment options and true enterprise scalability. The LRX
line incorporates a highly flexible and scalable architecture that provides for a range of deployment options, from a
single all-in-one appliance to multi-tier, enterprise-wide solutions.
Benefits include:
¢ Building block architecture and geographic flexibility
¢ Centralized management with global control from a single console
¢ Flexible agentless or agent-based collection
¢ Expandable storage array options
¢ Fully-Integrated File Integrity Monitoring and Endpoint Monitoring and Control
LogRhythm Appliance Models
All LRX appliances are built with an enterprise-class server architecture, including redundant power supplies and NICs,
and are configured with a combination of RAID 1 and RAID 10 for maximum fault tolerance and high performance.
LogRhythm LRX1
The LRX1 series appliances are 1U rack mount systems that provide an economical solution
for small to medium enterprises and higher volume remote deployments.
LogRhythm LRX2
The LRX2 series appliances are 2U rack mount systems that balance performance and
economy for medium sized deployments.
LogRhythm LRX3
The LRX3 series appliances are 3U rack mount systems ideal for large, high-volume
deployments with requirements for extensive performance and expanded capacity.
All-in-One Configuration Enterprise Configurations
LogRhythm’s distributed,
incrementally-scalable architecture XM Appliance EM Appliance LM Appliance
• Single Integrated Appliance • Dedicated Event Manager • Dedicated Log Manager
enables customers to start with • Simple Deployment • Centralized Management • High-Volume Collection
a single appliance and scale by • Full Feature Set • Supports Multiple Log Managers • Building Block Expansion
adding more appliances as needed. • Building Block Expansion
Three flexible options include
HEADQUARTERS HEADQUARTERS
the all-in-one XM appliance for
standalone deployments, and the
EM (Event Manager) and LM
(Log Manager) appliances for
distributed enterprise deployments,
where a single EM can control
one or more LM appliances for
maximum scalability.
Supports
Incremental Growth
LogRhythm Console LogRhythm Console
© 2010 LogRhythm Inc. | www.logrhythm.com Appliances_DS_1006

2. PRODUCT BRIEF
LRX Series Appliances
SERVERS Syslog
MAINFRAME LogRhythm collects logs from virtually
ROUTERS Windows Event Log
any source (ie. servers, network devices,
SWITCHES
Neflow
commercial & custom applications,
FIREWALLS
IDS
mainframes, etc.) and translates millions
VPN
ODBC
of cryptic logs into useful and actionable
APPLICATIONS
Checkpoint LEA
information.
WORKSTATIONS
BADGE READERS Flat File
CUSTOM APPS
ANY LOG SOURCE! Cisco SDEE
Enterprise Data Management
Log Deduplication™
rease
LogRhythm’s unique Log Deduplication™ technology
Performance Incr
is available for maximizing collection performance and
enterprise scalability. Users can employ fine-grained
m
controls and configure their deployment to automatically
recognize and consolidate duplicate event data from high
volume log sources into a single, aggregate record. All
raw log data is captured and archived for accuracy and 10% 30% 50% 70% 90%
compliance, while the deduplication process eliminates % of Log Deduplication
redundant online data and optimizes forensic search
capabilities and storage utilization.
LogRhythm LRX Appliance Specifications
LRX1 LRX2 LRX3
Appliance Form Factor
LP S/LP D * LP S/LP D * LP S/LP D *
Maximum Rates
1,000/86,400,000 2,500/216,000,000 10,000/864,000,000
Compression Up to 20:1 Up to 20:1 Up to 20:1
CPU 1 Quad Core 2 Quad Core 2 Quad Core
Memory 12GB 24GB 32GB
Chassis 1U 2U 3U
Storage 680GB 1.9TB 3.6TB
Expandable Storage Capacity 1.25TB 8.6TB 13.75TB
Power 100 240V 100 240V 100 240V
Ethernet (2 cards/4 ports) Broadcom 5809C Broadcom 5809C Broadcom 5809C
Dimensions H4.26cm x W48.24cm x D77.2cm H8.64cm x W44.31cm x D68.07cm H12.86cm x W48.24cm x D77.2cm
Weight 17.7kg 26.1kg 41.3kg
* Logs Per Second/Logs Per Day in Event Management/Collection Optimized Orientation
LogRhythm Site Log
Forwarders and Storage Arrays LRSA2 LRSA4 SLF
Compression Up to 20:1 Up to 20:1 CPU 1 Quad Core
Optional LogRhythm Site Log Chassis 2RU 2RU Chassis 1RU
Forwarders and Storage Arrays are Storage 3.2TB 6.6TB Memory 4GB
optimized to provide maximum Power 100-240V 100-240V Power 100-240V
H8.6cm x W44.5cm x H8.6cm x W44.5cm x H4.26cm x W48.24cm x
performance and enterprise-level Dimensions
D46.4cm D46.4cm
Dimensions
D77.2cm
expansion. The LRSA line comes in Weight 23.6kg 23.6kg Weight 17.7kg
2TB and 4TB options.
© 2010 LogRhythm Inc. | www.logrhythm.com Appliances_DS_1006 2