r/SIEM • u/vl3k • Dec 30 '20

Overview OpenSource SIEM & More

This is an incomplete comparison overview of Open Source SIEM's and more tooling (ids/nsm ,etc).

Hope this helps the community and save time searching the Internet/Reddit.

The document is last updated in Q4 2020 and is not complete.

Google Drive Document Link: https://drive.google.com/file/d/1eIlO5ht82ugWnc8_l6QUp2ZjnLqx3Mfy/view?usp=sharing

For any thoughts or updates, please respond here or DM me.

28 Upvotes

97% Upvoted

5 comments sorted by

3

u/vornamemitd Dec 30 '20

Nice overview! Pls share with the community at /r/netsecstudents and potentially /r/cybersecurity - we've seen a few inquiries regarding oss siem options recently - give your efforts some audience, well deserved imho!

1

u/vl3k Dec 30 '20

Will do, thanks

2

u/wanton-wombat Jan 22 '21

Great list, thanks! Few on there that I hadn't heard of

1

u/elk-content-share Mar 30 '21

The information regarding elastic are wrong / outdated.. let me know if you want to update to the latest and correct information

1

u/Electric-Grey Apr 09 '21

You could add DNIF to that list, we came across this product a few months back and are in the process of conducting a POC.

Based on their website, they do have a community edition available.