October 2020
Intermediate to advanced
376 pages
13h 58m
English
A security information and event management (SIEM) system is a software solution that attempts to solve several of the issues discussed in the previous section. It is designed to centralize storage and normalize log files from a wide variety of applications and devices. Most include real-time analysis and notification features that alert systems administrators immediately if the SIEM recognizes an attack in progress.
SIEMs also simplify the task of manually analyzing log files because they give a consistent interface and the ability to cross-reference logs from a variety of devices, such as a firewall, router, web server, and an intrusion detection system.
Integrating the SIEM with applications ...
Read now
Unlock full access