5. While SIEM is operational, the health of the SIEM system should be regularly monitored. This can be done by using special health monitoring features in the SIEM.
Note that there could be a better way, it is best to find out the best way of checking system health, quickly and properly, by analyzing pros and cons of each.
It is seen that the tech people use their skills and knowledge to lay down ways to monitor system health in a very raw way, the best way should be to use automated tools which continuously monitor system health, could be found even from within SIEM tool itself, and if it isn't there, a third party open source tool can be used for the same, with no additional cost.
No comments:
Post a Comment