Skip to content

Glossary: Logs and Data Sources for Investigations

SIEM (security information and event management)

Also written: SIEM

A system that collects logs and alerts from many tools, parses them, and uses correlation rules to raise alerts that link related events. It also powers dashboards and reports.

Where the book teaches it

Related terms

CorrelationDashboardCentral log collectionLog parsing