Table of Contents

• Introduction
  • Introduction (Description)
• SIEM Licensing
  • SIEM Licensing (Description)
• Initial Configuration
  • Description
  • HSC Deployment
  • Virtual Appliance Deployment
  • Connecting to LogAn
• Offline Server Operations
  • Offline Server Operations (Description)
• SIEM Configuration
  • General Settings Section
  • Device management
  • Administrators
  • Certificate Management
  • Auth servers
  • Authentication Profiles
  • User Roles and Role Permissions
  • User Catalogs
  • Expanding the system partition
• Network Configuration
  • Zone Configuration
  • Network Interface Configuration
  • Gateway Configuration
  • Routes
• Users and Devices
  • User-ID agent
  • Redistribution Profiles
• Command Line Interface (CLI)
  • Command Line Interface --- CLI (Description)
• Sensors
  • General information
  • UserGate Sensors
  • SNMP Sensors
  • SNMP MIB Management
  • WMI Sensors
  • Endpoint devices
  • Connectors
• Log collector
  • Description
  • Syslog
• Libraries
  • IP Addresses
  • Emails
  • Phones
  • Commands
  • Notification Profiles
  • Triggered Alert Categories
  • External Enrichment Services
  • Syslog Applications
  • Agent UserID Syslog Filters
• Dashboard
  • Dashboard (Description)
• Diagnostics and Monitoring
  • Routes
  • Ping
  • Traceroute
  • DNS Query
  • Notifications
    • Alerts
    • SNMP
    • SNMP Parameters
    • SNMP Security Profiles
    • Alert Rules
    • SNMP
    • SNMP Parameters
    • SNMP Security Profiles
• Logs and Reports
  • Logs
    • Description
    • Endpoint Log
    • Syslog
    • UserID Log
    • Windows Active Directory log
    • Event Log
    • Web Access Log
    • DNS Log
    • Traffic Log
    • SSH inspection log
    • Search History
    • Mail Security Log
    • Logs Export
    • Data Search and Filtering
    • IDPS Log
    • SCADA Log
    • Custom log normalization
  • Reports
    • Templates
    • Custom Report Templates
    • General information
    • Report Rules
    • Generated reports
  • Incident Reports
    • Incident report templates
    • General information
    • Incident report rules
    • Generated incident reports
• Analytics
  • General information
  • Example of Analytics Rule Configuration
  • Analytics Search
  • Response Actions
  • Triggered Alerts
  • Triggered Alert Details
  • Endpoint processes
• Incidents
  • General information
  • Incident Settings
  • Incident Dashboard
  • Incidents Log
  • Creating Security Incidents
  • Incident Details
• Technical Support
  • Technical Support (Description)
• ADMIN
  • ADMIN (description)
• Favorites
  • Избранные (описание)
• Appendices
  • Appendix 1. Network environment requirements
  • Appendix 2. Log format description
    • Logs Export in CEF Format
    • Export logs in JSON format

&nbsp

‹ UserGate SIEM 7.1.0 Administrator Guide up Introduction ›