Faster investigations
Explore activity through configurable queries, dashboards, and visualizations. Follow the patterns behind a change.
ODIN-I™Security & operational intelligence
See what matters.
Keep what you need.
Investigate web activity, automate reporting, and retain historical logs—in an environment you control.
ODIN-I 2.0 · 11-minute walkthrough on YouTube
On-premises
Private cloudYour data. Your control.
From raw events
to useful answers.
- 01Collect & understand
Bring supported web and proxy data into dashboards and saved queries.
- 02Report & share
Give security, operations, and leadership views they can use.
- 03Retain & revisit
Keep historical logs for investigation and audit review after restore.
Watch the walkthroughSee the product at work
See ODIN-I
in action.
Explore the reporting interface and alert configuration in the ODIN-I 2.0 walkthrough. Then bring your priority reports, source systems, and retention questions to a discussion with BGT.
Open the walkthrough pageThe video shows ODIN-I 2.0. Confirm current release and edition coverage for your requirements.
Reporting that serves a decision
Investigate the activity.
Share the understanding.
Use dashboards, saved queries, and scheduled reports to give security teams, IT operations, and business leaders a useful view of supported web and proxy data.
Automated reporting
Schedule recurring reports and export PDF and PNG views for security, operational, and management reviews.
Rule-based alerts
Use configured rules to surface activity that warrants attention and support recurring operational checks.
Ingestion health
Review service status, source activity, delivery health, and backlog together to understand the flow of incoming data.
Audit visibility
Review Reporting activity and authentication history in read-only views, with sanitized CSV export for authorized users.
Controlled access
Apply role-based permissions to reporting and administration. Give each audience the access its work requires.
CURRENT DATA SOURCES
Start with the sources you use.
- Edge SWG / ProxySG access logs
- ProxySG syslog
- Cloud SWG feeds
Report coverage depends on the source, log format, and configured content. Confirm feature and source availability for the release and edition selected.
Moving beyond Symantec Reporter? Bring your report inventory, log formats, retention requirements, and the questions your users ask. BGT can review reporting fit and plan the transition around your priorities.
Long-term archiving
Keep the past within reach.
Size online storage for the present.
Plan everyday reporting and long-term retention separately. Preserve older records for the periods an investigator or auditor may need to revisit.
- 01 / REPORT
Work with recent data.
Keep an online reporting window aligned with everyday operational and business needs.
- 02 / ARCHIVE
Retain older records.
Preserve historical logs in long-term archive storage using scheduled snapshots.
- 03 / RESTORE
Revisit the right period.
Restore up to a 14-day period into a separate audit environment, subject to available disk space. Search, report, and export after restore.
Archived logs become searchable after restore. Audit archive restore is independent of the production ODIN-I license. Customers provide compatible Oracle Linux host(s) and sufficient disk capacity for the restored data.
Deployment & growth
Your environment.
Room for the next workload.
Deploy on-premises or in a private cloud. Size the cluster for your sources, reporting demand, and retention policy, then expand within your subscribed capacity.
Capacity & resilience
Multi-node deployment distributes data and processing. Add nodes to support growth and build in data redundancy.
For multi-node deployments, we recommend an odd number of nodes, with at least three. Performance and availability also depend on sizing and supporting infrastructure.
Offline deployment
A supported offline package bundles installation dependencies for closed-network deployment on Oracle Linux 9.8 x86_64.
Offline installation requires the matching package and supported operating system. Confirm the appropriate release and deployment profile with BGT.
How multi-node growth adds redundancy
A starting point.
A single-node cluster runs with zero data replicas.
A redundant data copy.
Adding the second node automatically expands replicas from zero to one.
Quorum for decisions.
The third node establishes the recommended three-node quorum configuration. Cluster roles are assigned automatically.
Annual subscription
Size the resources.
Know what is included.
Subscriptions are based on the CPUs, memory, and total storage available to the cluster. Pricing is not based on users, hosts, or ingestion volume.
Basic installation
Basic installation services are included to help put your deployment in place.
Support
U.S. business-day support is included. 24×7 support is available.
Applicable licensing
The applicable Elastic subscription is included. BGT will confirm the licensing included with your selected edition.
Choose the edition around your requirements.
| Edition | Foundation | Discuss with BGT |
|---|---|---|
| ODIN-I BASIC | Open-source Elasticsearch | Fit for your dashboards, search, reporting, and retention requirements. |
| ODIN-I PREMIUM | Commercially licensed Elasticsearch | Any additional licensed capabilities your deployment requires. |
Confirm the specific features, licensing, and cluster size for your release before choosing an edition.
Planned feature · MCP supportA future connection
A future connection
to your AI.
MCP support is not currently available. Capabilities and availability will be confirmed for a future release.
Planned Model Context Protocol support would let your existing AI environment work with authorized ODIN-I chart data, compare trends, and prepare briefings.
- Supported time ranges and filters, with measures, units, and reporting context.
- A PNG or other format chart alongside the reporting data.
- Read-only access, permissions, and audit logging for customer-managed AI environments and approved cloud AI services.
More sources are also planned. Expanded ingester and reporting packages are being evaluated. Availability and packaging will be confirmed for each release.
Questions buyers ask
Plan the fit
before you buy.
Where do we start when replacing Symantec Reporter?
Bring your current report inventory, log formats, retention requirements, and the questions your users ask. BGT can review reporting fit and define a transition around your priorities.
Which sources can we use today?
Current sources include Edge SWG / ProxySG access logs, ProxySG syslog, and Cloud SWG feeds. Report coverage depends on the source, log format, and configured reporting content. Additional source packages are planned; BGT can confirm coverage for your release.
What does offline deployment require?
The supported offline installation profile requires the matching ODIN-I offline package and Oracle Linux 9.8 x86_64. Installation dependencies are bundled for that profile. BGT can confirm package availability and fit for your environment.
What do we need for an audit archive restore?
Audit archive restore is independent of the production ODIN-I license. Provide compatible Oracle Linux host(s) and sufficient disk space for a restored period of up to 14 days. Archived logs become searchable and reportable after restore.
How should we choose the edition and size the cluster?
Discuss source systems, daily data volume, online retention, archives, priority reports, any licensed feature requirements, and growth goals with BGT. The annual subscription is based on cluster CPUs, memory, and total storage. Confirm the edition and feature coverage for your release.
Your next step
Start with the walkthrough.
Bring your questions.
Plan a demo around your priority reports, sources, data volume, retention requirements, and growth goals.
Demo request delivery: TBD. The inquiry form is a preview and does not send a request.
Let’s move your mission forward.
The right technology.
The right people. Your next step.
Economically Disadvantaged Women-Owned Small Business