[netsa-tools-discuss] How to integrate siem (syslog server) with silk

[asad]

Hey,

I want to know is there any mechanism which will allow silk tool set
results i.e rwfilter,rwstats to be shipped to siem for advanced analysis.

I know much can be done using "PySiLK" however in place of already existing
siem I don't feel the need to use it.

/var/log/rwflowpack are not very intrusive does "silk" comes with some
"alert module". I can use syslog service to send logs to remote system.

regards
Asad
-------------- next part --------------
HTML attachment scrubbed and removed