SIEM - Log Management

The SIEM module is based on the elastic stack and is intended to provide various means to manage–collect, process, and sign–log files produces by NetEye and by the various services running on it.

• Concepts
  • Architecture of NetEye SIEM Module
  • Agents
• Configuration
  • Authorization
  • El Proxy Configuration
  • Agents configuration
  • Event Processing
  • Backup & Restore
• Advanced Topics
  • Elasticsearch security helper tool
  • Elasticsearch System indices on Single Nodes
  • Kibana Keystore Usage
  • El Proxy Security
  • El Proxy Verification
• Deprecated modules
  • Logmanager