ilovetuxop3 hours ago
Author here: Thanks for the upvotes!
I built this so I could have an analytics, observability and security stack in my back pocket.
Individuals, nonprofit and educational users are licensed for production use.
Commercial institutions must obtain a commercial license before production use.
Have any questions, feel free to ask.
vetrom3 hours ago
What makes this compelling over actual OSS stacks plus say Bro or some other IDS?
ilovetuxop3 hours ago
First, I would like to preface that this is alpha and should not replace anything in prod at the moment.
What I like about how SIEMatic is built:
* Django (personal familiarity)
* Agent, Indexer, crawlers and web all share a codebase with separate settings
* Search language is built around django orm, built-in jinja2 and ast.literal_eval makes it very versatile, I will be writing some tutorials soon
* search commands designed to handle dataframes, Django Querysets and records (lists of dicts) with predictable conversion between them (you can filter early in you search pipeline)
* from local on sqlite (rundev command) to distributed on postgres with scaling/tuning tips
* comes out of the box ready to monitor your host and provide dashboards and savedsearches
* crawlers handle data retention, alerting, summary event generation and more
There's a bunch more, but again, this is alpha software.
mbirthan hour ago
Someone is a fan of SIEMENS SIMATIC PLCs, it seems.
tmpsvc2695f55 hours ago
[dead]