So, let’s looks at developing custom plugins. So basically why do we write custom plugins? Effectively to parse logs that don’t conform to a particular standard in order to generate events.Now, before you start writing any plugins, ensure you have considered the following to reduce noise on your siem.. Manage the log level settings at […]

The perfect blog for a Friday – SIEM optimization. So by the time you’re reading this, you have already figured out that you need a SIEM and have already identified which one you will use for your environment. If you’re having trouble identifying a good siem, here’s a good reference point. http://blogs.softchoice.com/advisor/ssn/6-things-you-should-know-about-choosing-a-siem-solution/ http://thehackernews.com/2013/07/SolarWinds-SIEM-Solution-Event-Management.html http://www.reliaquest.com/top-four-tips-on-siem-solution-optimization/ Meanwhile, […]