Forum Discussion
Rozh
Nimbostratus
NimbostratusSeparate Event Logs
Dear all,Hello I have a lot of logs F5 products in SIEM, Know I want to specify the logs of the Network Login Failed & Change Configuration,.... In general, I want to separate the Audit logs from ...
RozhNimbostratus
NimbostratusThanks boneyard for the tips.
In fact, we have an internal SIEM , and I want to separate all the logs sent. For example, a system of locals or Audit.
Because i want to detect Number of Login faill - Change config and etc.
In your opinion , I should define a template or Filter from the syslog and detect details that want ?