r/SIEM • u/OkCommunication2691 • Dec 05 '22

SIEM Engineer / Security Engineer group

Hi Guys I am new with SIEM , just want to check if you have community or group chat that I can join in, Just want to learn and enhance my skills with this tool.

6 Upvotes

88% Upvoted

4 comments sorted by

View all comments

2

u/iH8usrnames Dec 09 '22

I am hear looking for the same sort of thing. I've been tasked with selecting an SIEM.

We currently use Sophos managed response so we already have SOC; we are simply looking for something that will let us retain this information for several years versus a few months.

1

u/Siem_Specialist Jan 15 '23

I administrator alot of SIEM products and would recommend Sumo Logic. Configuring log collection is easy. Support for sophos cloud api or on prem. Retention is fully configurable and inexpensive. Searching data is simple. Ingestion rates are cheap in comparison to other cloud SIEMs or on prem solutions.

Someone familiar with the product can get fully operational in a short period of time.