An Approach for Security Information and Event Management with Hadoop and ElasticSearch

Computer Engineering, Network Security

Now days, technology gives more profits in the municipal sector and private sector as well as the threats and influence of the coercions also high. This is a very problematic to promise a safety in a PC and IT systems because of the swiftly expansion of IT skills and except the Information Technology structure analysis of log is very significant. Infrastructure weaknesses is revealing openly due to lake of safety. This article contains an approach for design SIEM for handle large amount of log data Hadoop prospective is a best, with the help of the HDFS file structure and ElasticSearch mechanism processing of the logs is faster and provide better search facility. So the user in a network operation room can visualize the attack or suspicious activity in real time.- Now days, technology gives more profits in the municipal sector and private sector as well as the threats and influence of the coercions also high. This is a very problematic to promise a safety in a PC and IT systems because of the swiftly expansion of IT skills and except the Information Technology structure analysis of log is very significant. Infrastructure weaknesses is revealing openly due to lake of safety. This article contains an approach for design SIEM for handle large amount of log data Hadoop prospective is a best, with the help of the HDFS file structure and ElasticSearch mechanism processing of the logs is faster and provide better search facility. So the user in a network operation room can visualize the attack or suspicious activity in real time.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.