Wazuh Integrations with NGAF, Endpoint Secure or IAM

dw Lv1Posted 2022-Dec-19 11:52

Has anyone implemented a syslog server, for example using wazuh? So the logs from NGAF, ES and IAM will be stored and able to analyze there.

Any suggestions for the best syslog server to use? Which have integrated with Sangfor Products.

Thank You

Draiden has solved this question and earned 20 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Im also planning to build, I'm aiming for security onion. Throwing all the logs from ES, CC, NGAF, IAM.
Just to get a good picture when it comes to DNS attacks.
Is this answer helpful?
EvgeniyOlkov Posted 2022-Dec-19 16:04
  
Hi! I think you can use any product which supports the Syslog standard. I've tried ELK. Works great.
Khawar Lv1Posted 2022-Dec-20 13:29
  
Good Question.
Draiden Lv2Posted 2022-Dec-20 15:39
  
Im also planning to build, I'm aiming for security onion. Throwing all the logs from ES, CC, NGAF, IAM.
Just to get a good picture when it comes to DNS attacks.
rivsy Lv5Posted 2022-Dec-21 19:43
  
I recommend to use SolarWinds syslog server
Newbie308427 Posted 2022-Dec-26 12:35
  
i think that any syslog supported product will do
Jhazz Lv3Posted 2022-Dec-26 19:18
  
You can try free syslog server available but it has a limited capability. If you need more function and features you can go to the paid or subcription based syslog
Osama Muhammad Lv3Posted 2022-Dec-26 19:36
  
Try ELK for log Server but, I dont think you need it as Sangfor have a black box in there firewall.

I hope you know what is how aeroplane Black box works, if plane crashed.
Faisal P Posted 2022-Dec-26 21:26
  
Wazuh agents work on a wide range of operating systems, but if this is not possible, you can forward syslog events to your environment.
Pat Lv4Posted 2022-Dec-28 13:06
  
You should try FREE Kiwi Syslog Server from solarwinds

I Can Help:

Change

Trending Topics

Board Leaders