Skip to main content

Cloud SIEM Administration

Learn about onboarding tasks and best practices for Cloud SIEM administrators. In this section, we'll introduce the following concepts:

Magnifying glass icon

Filter and Search

Learn how to filter and search Cloud SIEM list pages.

Network icon

Network Blocks

Learn about Network Blocks, their purpose, and instructions for setting them up and using them.

Tree diagram icon

Create a Custom Tag Schema

Learn how to create a custom tag schema in Cloud SIEM.

Shield with a globe icon

Create a Custom Threat Intelligence Source

Learn how to create and manage Custom Threat Sources.

Cloud with a shield icon

Create Cloud SIEM Actions

Learn how to issue a notification to another service when certain events occur in Cloud SIEM.

Database symbol in a magnifying glass icon

Create Cloud SIEM Context Actions

Learn to query an external system for details about an entity, IOC, or data encountered in a record.

Code icon

Cloud SIEM APIs

Learn how to access Cloud SIEM APIs and API documentation.

Database icon

Data Retention

Learn about retention periods for different types of Cloud SIEM data.

Document icon

Audit Logging

Learn how to search the Audit Event Index for Cloud SIEM log events.

People with gears icon

Cloud SIEM User Accounts and Roles

Learn how to create and manage user accounts and roles for Cloud SIEM.

Small boxes merging into a circle icon

Custom Inventory Source

Learn how to extract Inventory Data from logs in Sumo Logic and send it to Cloud SIEM.

Check mark in an magnifhing glass icon

Save Inventory Data to a Lookup Table

Learn how to use a saved Sumo Logic search to populate a Lookup Table with Cloud SIEM inventory data.

Bar chart with a gear icon

Manage Custom Insight Resolutions

Learn how to create and manage custom insight resolutions.

Bar chart in a circle icon

Managing Custom Insight Statuses

Learn how to create and manage custom insight statuses.

Squares icon

Sensor Zones

Learn how to use Sensor Zones to distinguish between Cloud SIEM entities that have the same IP address.

Peoople on a gear icon

Inventory Sources and Data

Learn about Inventory Sources and the Inventory Data they collect.

People on a gear icon

MITRE Coverage

Learn how well you are prepared to detect adversary attacks based on the tactics and techniques in the MITRE ATT&CK Enterprise Matrix.

Status
Legal
Privacy Statement
Terms of Use

Copyright © 2024 by Sumo Logic, Inc.