Logsign Unified SecOps Platform

Getting Started

• EPS Calculator & Disk Planning
• Logsign Internet Access Requirements
• Logsign USO Threat Intelligence Guide
• Index Management User Guide
• Cluster Installation and Prerequisites
• Data Transfer Tools User Guide
• See all 23 articles

Deployment

• Disaster Recovery Design, Processes, and Capabilities
• Adding an SSL Certificate
• Custom Plugin - Parse with CEF & LEEF
• Custom Plugin - Parse with nested JSON
• Custom Plugin - Parse with W3C
• Custom Plugin - Parse with JSON
• See all 20 articles

Integration

• Logsign SIEM API Documentation
• Webhook / REST API - Fortigate BAN IP
• Crowdstrike Falcon Integration
• Azure Graph Security Integration
• Advanced Linux - Suse Linux Logging Model - Manual Installation Method
• AWS SecurityHub - Event Poller
• See all 104 articles

Enrichment Technologies

• Nested Column Architecture
• Event Mapping Technology
• Location Based Enrichment Technology
• Geoip Lookup Service Capability
• Ldap / AD Connection Enrichment and Modifier Technology

Search Fundamentals / Data Aggregation

• Understanding Aggregated Data
• Basic Search with Lucene
• Ability to Use Lucene Techniques Query for Search
• Ability to Use Lucene Techniques Query in Incident Management
• Investigating Anomalies by Understanding Behavior
• Add or Remove Result Fields
• See all 10 articles

Security Analytics

• Predefined Dashboards Overview
• Creating a New Category for Dashboard
• Choosing right widgets for log set(s)
• Data Insights and Visualizations with High Possibility Incident Logs
• Health Monitoring and Maintenance Dashboard
• File Access Control Overview
• See all 18 articles

Alert Management

• Bucket Modifier — Value Template Guide
• WhiteList Configuration Guide
• How to configure API Bucket
• Understanding Alert Rules
• Creating a New Alert Rule
• Analysis of Alerts
• See all 11 articles

Threat Intelligence Service

• Understanding of Threat Intelligence Service
• Enablement of Logsign Threat Intelligence
• Monitoring of Threat Activities

User Entity Behavior Analytics

• User Entity Behavior Analytics (UEBA) Overview
• Detecting and Investigating Insider Threats with UEBA
• Defining And Management - Identity & Assets For UEBA

Investigate

• SLA Management in Logsign
• Adding Comment and Decision in Incident Management
• Task Management
• Incident Management Overview
• Incident Investigate
• Incident Lifecycle Management
• See all 16 articles

Responses

• WinRM Response Integration
• ManageEngine - ServiceDesk Plus Response Integration
• Barracuda CloudGen Firewall Responses Integration
• FortiGate Firewall Responses Integration
• Cisco FMC Response Integration User Guide
• Responses by Organisations
• See all 66 articles

Data Management

• Logsign Leaf System Requirements
• EPS Stats & Reading Graphics
• Offline Report Cluster Architecture - Management
• Data Management Resilience and High Availability for Logsign
• Creation Input Filter by Regex
• Index Management in Logsign
• See all 19 articles

Account and Views ( Delegation )

• Overview of User Management
• Users
• Roles

System

• Logsign SIEM Security Policy Guide
• Network Interfaces
• Date & Time Settings
• Most Used Ubuntu Commands
• System Update
• Logsign StandAlone Server Power State process.
• See all 7 articles

Maintenance

• Logsign - External SNMP Settings
• Installing VMware Tools on Ubuntu
• Source Stats
• Support Platform
• Screen Commands in Linux
• Vlan Tagging for Network Configuration
• See all 8 articles

Troubleshooting & Enhancements

• Elasticsearch and Log Data Disk Migration
• Configuring a New Disk with Second LVM on Linux
• Teleport Server Installation & Configuration
• Leaf Module Detailed Technical Information and Network Troubleshooting
• Response Integration Troubleshooting
• Mail Notification Troubleshooting
• See all 18 articles