SIEM - Log Management

The SIEM module is based on the elastic stack and is intended to provide various means to manage–collect, process, and sign–log files produces by NetEye and by the various services running on it.

• Concepts
  • Architecture of NetEye SIEM Module
  • Agents
• Configuration
  • Authorization
  • El Proxy Configuration
  • Elasticsearch Configuration
  • Agents configuration
  • Event Processing
  • Backup & Restore
• Advanced Topics
  • Elasticsearch security helper tool
  • Kibana Keystore Usage
  • El Proxy Security
  • El Proxy REST Endpoints
• Deprecated modules
  • Logmanager