Cross Log Correlation

Posted almost 5 years ago by Andrew Hoffman

Post a topic
A
Andrew Hoffman

I'm looking to start correlating logs across different systems and event types. The ability to track an event across multiple devices device types (network gear to windows to Linux to software) is becoming more important not only for troubleshooting but also from the NIST 800-171/CMMC verification levels. This means we are going to need improvements to identifying the column and data that's saved to the database so we can easily add correlation between different types of logs and information. This is probably a huge undertaking but it's the future of SIEM.



1 Votes


2 Comments

D

David Boudreau posted over 4 years ago

Agree with cross log correlation as we must meet CMMC level 3 certification. This would be a huge feature if we could get this added within the next 6-12 months.

0 Votes

T

Timothy Jernejcic posted over 3 years ago

I would add myself to those requesting this.

0 Votes

Login or Sign up to post a comment