News for hackers. Stuff that matters.

A comment on Elastic SIEM – Security Information and Event Management.

Re:Elastic SIEM – Security Information and Event Management by jamestimmins on Tuesday June 25, 2019 @05:39PM (#20279263)
I always find that Elastic assumes decent familiarity with their products even when "introducing" them. Everything looks beautiful but I can't quite tell what different tools do.
[ Parent | on HN ]
Re:Elastic SIEM – Security Information and Event Management by freehunter on Tuesday June 25, 2019 @05:42PM (#20279294)
A SIEM is one of those things where you'll know if you need it. Most of the companies I know using a SIEM do it because audit and compliance requires them to have one.
[ Parent | on HN ]
Re:Elastic SIEM – Security Information and Event Management by strictnein on Tuesday June 25, 2019 @11:23PM (#20281614)
Are they using something else to monitor/dig through their network/etc logs, or are they just flying blind?
[ Parent | on HN ]
Re:Elastic SIEM – Security Information and Event Management by freehunter on Tuesday June 25, 2019 @11:55PM (#20281766)
A lot of my clients use a SIEM for security and something like Splunk or LogStash or ELK for application debugging.
[ Parent | on HN ]