Enterprise Analysis System (EAS) Software Refresh

Purpose Product, Service or Outcome Needed: The purpose of this procurement is to purchase a solution that will improve the utilization and analysis of log data by automatically indexing all the data, including complex multi-line application logs, enabling searches on all the data without the need for custom connectors, and without limitations inherent in database schemas. It will quickly search and report on this data and interpret the data during searches to provide a more complete context. It will provide seamless integration and tracking of log data from numerous data sources for trending analysis, trending visualization, current and historical data mining and predictive analytics. This solution will also support the creation of actionable intelligence. The product must support at least ten users, have visual interfaces, capable of data mining enormous amounts of data in order to understand relationships, patterns, and trends. The result is a more flexible and complete approach to using and analyzing log data, enabling diagnosis of issues and troubleshooting of security incidents and investigations faster, and providing repeatable and affordable compliance. Scope of the Product, Service, or Outcome: This product will help Focused Operations (FO) perform indexing of all the data, including complex multi-line application logs, enabling searches on all the data without the need for custom connectors, and without limitations inherent in database schemas. It will quickly search and report on this data and interpret the data during searches to provide a more complete context. This product will help the FO team to automate the acquisition of IT log data from multiple sources and perform log, trending analysis, correlation and predictive analysis on current data and historical data through data mining and creating actionable intelligence. Utilizing visual interfaces, this tool will seamlessly data mine large amounts of log data in real-time in order to understand relationships, patterns, and trends. The tool must expeditiously (in minutes, not hours) collect, index and harness 15 to 20GB of uncompressed data per day generated from a complex IT infrastructure of multiple log sources and formats (e.g. SMTP, Blackberry, Web Proxy, Chat). The tool must also be able to easily export log data in a readable format (i.e. MS Office product formats, PDF, MSOutlook etc.). Capability Requirements Software: TSA has a need for software that is designed to assist in performing the analysis of log data by automatically indexing all the data, quickly searching and reporting on this data, and interpret the data during searches to provide a more complete context. It will provide seamless integration and tracking of log data from numerous data sources for trending analysis, trending visualization, current and historical data mining and predictive analytics. - 1) Index logs in any format (structured, unstructured, and disparate) from any data source (including system data) in real time. - 2) Ability to create apps that help visualize data geographically or that provide pre-canned compliance views; apps for different technologies such as Windows, Linux, Unix, virtualization, networking and more. - 3) Ability to save and schedule searches or monitor and alert on specific events, patterns and thresholds. - 4) Collect, use, search and analyze 15 to 20 GB of uncompressed log data per day in real time from any source to one central location daily and setup custom reports and dashboards that summarize log activity. - 5) Automatically index all data, including complex multi-line application logs, enabling the search on all data without the need for custom connectors and database schema limitations. - 6) Ability to manipulate, customize and report log data in common Microsoft Office product formats (i.e. MSWord, PDF, MSExcel, MSOutlook, system application files etc.) - 7) Support and install on Windows operating systems, Mac OS, Linux, and FreeBSD - 8) Multiple user access - support at least 12 users. All interested vendors may submit the capability statement to the TSA Office of Acquisition (OA). Submissions shall not exceed ten (10) pages in length. A proposed price is not required or requested under this Sources Sought Notice. Vendors must identify their business size status in the capability statement. If small business, please identify the type of small business. Capability statements are required to be received electronically via email to Anthony.Dennis@dhs.gov Subject: EAS Refresh Sources Sought Notice, no later than Friday, June 29, 2012, 2:00 p.m. EST. Responses received after this deadline will not be reviewed. TSA's primary point of contact is the Contract Specialist, Mr. Anthony.Dennis, who can be reached via e-mail at Anthony.Dennis@dhs.gov. TSA's secondary point of contact is Mrs. Kristin Fuller, who can be reached via e-mail at Kristin.Fuller@dhs.gov. Any questions regarding this notice shall be directed to both Mr. Dennis and Mrs. Fuller in writing, via email by Tuesday, June 26, 2012, 4:00pm EST. While any and all questions must be directed to the Government points of contact identified in this announcement, answers to those questions, as well as any and all clarifications, extensions, or changes will be posted to www.fbo.gov and will only be available at www.fbo.gov prior to the closing date and time of the this notice. Vendors responding to this Sources Sought Notice are responsible for all expenses associated with responding to this Sources Sought Notice. (Note: TSA will not pay any costs associated with this effort). The TSA is not seeking or accepting unsolicited proposals. Since this is for information and planning purposes, no evaluation letters or results will be issued to respondents.