The LogLogic LMI GUI provides the ability to verify the checksum of data files containing your event data. This helps to confirm whether the integrity of your data files has been compromised at some point after the event data was collected.

To verify the MD5/SHA256 checksum on data files use the Search->View Data File->Data Files tab.

1. From the Web UI, go to Administration->Data File.
2. Click the checkbox to the left of each data file to verify.
3. Click “Verify” to start the verification process.  “In Progress” will appear in the Digest Verified column.  When verification completes, a flag appears in the MD5 Verified or SHA Verified column, depending on which checksum algorithm is being used:

• A green flag indicates successful verification. The timestamp next to the green flag identifies the date and time the verification succeeded.

• A red flag indicates failed verification. Mouse over the failure message for more information on the reason. A failure can mean:
  • The file was modified. Mouse over the failure to view the new Checksum.
  • The file is no longer accessible. The file might be inaccessible for various reasons such as the location of the file has changed or the network connection is down (for SAN, NAS or Centera-based files).

Note: To further ensure the integrity of data on an ST appliance, consider using a WORM (Write Once Read Many) storage server such as Network Appliance’s SnapLock. For more information on using SnapLock with LogLogic ST appliances, see the LogLogic LMI Administration Guide.