The Ipswitch event log management suite contains four tools. The Event Archiver automatically collects events and stores them securely. The Event Analyst module enables log analyst personnel to identify trends in logged events, while generating compliance reports for auditors. The WhatsUp Event Alarm focuses on immediate alerts for events that require the attention of IT staff. It monitors the system and notifies assigned personnel when pre-identified conditions are met. Finally, the WhatsUp Event Rover deals with on-the-fly forensics and log data mining.

Event Rover 3.0 came from Ipswitch's acquisition of Dorian Software in January. The product enables users to recover corrupt EVTX files without modifying the files and ruining or tampering with potentially valuable forensic information, Ipswitch said.

EVTX is a format used by newer Windows systems such as Vista and Windows 7. However, older versions use the EVT format. The event logger also includes LogRefiner, which enables the suite to deal with both.