Logsign Unified SecOps Platform signs the logs it collects and keeps the signed files. You can download these files and validate them to see if any changes have been made to the logs after they were signed.
Click Settings -> Data Management -> Signed from Logsign Unified SecOps Platform Web Interface. The Signed Logs page opens.
You will be able to view the signed logs on Logsign Unified SecOps Platform listed by date. Select the year, month and day, and click Download to access the log file that you want to download. The button also shows the size of the file.
To check the integrity of a file, first select the File Sign Method and the Summary Sign Method at the top of the page. The options are SHA-1, SHA-256, MD5 and Mikrokep. The defaults are SHA-256 for the file sign method and MD5 for the summary sign method. Select the same methods that are configured on the Settings -> Data Management -> Sign Settings page.
Then click Validate next to the file. The validation scans the archive line by line, so it can take a while for big files. Confirm the message to start it. The validation output is shown in a panel below the file list and is updated while the validation runs. Only one validation can run at a time.