Is there a screenshot and a feature matrix of some sort? I couldn’t find on the docs site and I don’t understand what this tool is capable of, even though I’m familiar with SIEM as a general concept.
ilovetux 1 days ago [-]
Author here: Thanks for the upvotes!
I built this so I could have an analytics, observability and security stack in my back pocket.
Individuals, nonprofit and educational users are licensed for production use.
Commercial institutions must obtain a commercial license before production use.
Have any questions, feel free to ask.
junhoeku 23 hours ago [-]
Nice work. Any plans to support OpenSearch or ClickHouse as backends in the future?
vetrom 1 days ago [-]
What makes this compelling over actual OSS stacks plus say Bro or some other IDS?
ilovetux 1 days ago [-]
First, I would like to preface that this is alpha and should not replace anything in prod at the moment.
What I like about how SIEMatic is built:
* Django (personal familiarity)
* Agent, Indexer, crawlers and web all share a codebase with separate settings
* Search language is built around django orm, built-in jinja2 and ast.literal_eval makes it very versatile, I will be writing some tutorials soon
* search commands designed to handle dataframes, Django Querysets and records (lists of dicts) with predictable conversion between them (you can filter early in you search pipeline)
* from local on sqlite (rundev command) to distributed on postgres with scaling/tuning tips
* comes out of the box ready to monitor your host and provide dashboards and savedsearches
* crawlers handle data retention, alerting, summary event generation and more
There's a bunch more, but again, this is alpha software.
moustache_hn 23 hours ago [-]
[dead]
mbirth 1 days ago [-]
Someone is a fan of SIEMENS SIMATIC PLCs, it seems.
lschueller 7 hours ago [-]
Wouldn't be super surprised if their ip lawyers already sent a legal title about trademark violations... Some big companies are very fast in tracking such similarities and enforce 800 to 2000 in restitution per violation.
tmpsvc2695f5 2 days ago [-]
[dead]
Rendered at 05:44:56 GMT+0000 (Coordinated Universal Time) with Vercel.
I built this so I could have an analytics, observability and security stack in my back pocket.
Individuals, nonprofit and educational users are licensed for production use.
Commercial institutions must obtain a commercial license before production use.
Have any questions, feel free to ask.
What I like about how SIEMatic is built:
* Django (personal familiarity)
* Agent, Indexer, crawlers and web all share a codebase with separate settings
* Search language is built around django orm, built-in jinja2 and ast.literal_eval makes it very versatile, I will be writing some tutorials soon
* search commands designed to handle dataframes, Django Querysets and records (lists of dicts) with predictable conversion between them (you can filter early in you search pipeline)
* from local on sqlite (rundev command) to distributed on postgres with scaling/tuning tips
* comes out of the box ready to monitor your host and provide dashboards and savedsearches
* crawlers handle data retention, alerting, summary event generation and more
There's a bunch more, but again, this is alpha software.