Chat with us, powered by LiveChat

Sagan Log Analysis Engine

Get a high performance, real-time log analysis & correlation engine

Our Enterprise IT Security Certifications
What is the Sagan log analysis engine?

Sagan is an open source (GNU/GPLv2) high performance, real-time log analysis & correlation engine that run under *nix operating systems (Linux/FreeBSD/OpenBSD/etc). It is written in C and uses a multi-threaded architecture to deliver high performance log & event analysis. Sagan’s structure and rules work similarly to the Sourcefire/Cisco Snort or Suricata IDS/IPS engine.

It maintains compatibility with rule management software (oinkmaster/pulledpork/etc) and allows Sagan to correlate log events with your Snort/Suricata IDS/IPS system. 

Elite IT Security Staffing
security information and event management (SIEM) system
Automate your log management

Sagan supports many different output formats, log normalization (via http://www.liblognorm.com), script execution on event detection, GeoIP detection/alerting, multi-line log support, time sensitive alerting and much more.

While the majority of systems support protocols like ‘syslog’,  you can use software like NXLog to send Sagan Microsoft Windows logs.

The development of Sagan is sponsored by Quadrant Information Security Team.  

For more details information,  visit the Sagan “Read The Docs” page at https://sagan.readthedocs.org

Learn More
Sagan Log Analysis Engine Features:

How Clients Have Benefited from Working with Quadrant Information Security

Healthcare Provider

Healthcare client needed to reassess their security strategy around compliance, monitoring, and working remotely.

National Retail Chain

The customer needed to replace a SIEM product and outsource their network security monitoring.

Accounting Firm

A complete security solution that reduced the burden on the staff so they can focus on more essential activities to the firm.

security information and event management (SIEM) system
Sagan News
  • [2021/02/08] – Sagan 2.0.1 released! See the Sagan 2.0.1 release information. 
  • [2021/01/11] – New Sagan & Sagan rule sets released! See the Sagan 2.0.0 for more information. 
  • [2019/07/03] – New Sagan & Sagan rule sets released! See the Sagan 1.2.2 post for mode details. 
  • [2018/11/08] – New Sagan rule set released! See the rule release post for more details.  
  • [2018/11/07] – Sagan 1.2.1 released! See the Sagan 1.2.1 post for more details.
  • [2018/06/14] – Sagan 1.2.0 released! See the Sagan 1.2.0 post for more details.
  • [2018/05/29] – Sagan 1.1.9 released! See the Sagan 1.1.9 post for more details.

We have updated our Privacy Policy to include GDPR and the use of cookies. Click "Accept" to continue.