Копаємо Splank. Дуже хороша стаття - http://habrahabr.ru/post/160197/

 

Tools

Open Source:	Price	Demo
Alien Vault- Unified Security Management	open source - free standard - $3,600 SMB - $17,800 enterprise -	https://www.alienvault.com/live-demo-site/demo-environment
Splunk	Starter - free Enterprise -$5,000	http://www.splunk.com/view/SP-CAAAGMN
IBM QRadar	$25,000	No demo available
Solarwind Log & Event Manager	$4,495	http://demo.solarwinds.com/flashdemo/lem/
LogRhythm	$25,000	http://logrhythm.com/resources/request-online-demonstration.aspx