PackageDescription | Security Information and Events Management System [ Manager ]
Prelude Manager is the main program of the Prelude SIEM suite. It is a
multithreaded server which handles connections from the Prelude sensors. It
is able to register local or remote sensors, let the operator configure them
remotely, receive alerts, and store alerts in a database or any format
supported by reporting plugins, thus providing centralized logging and
analysis. The IDMEF standard is used for alert representation. Support for
filtering plugins allows you to hook in different places in the Manager to
define custom criteria for alert relaying and logging.
.
This package provides the Prelude Manager, which is a high availability
server that accepts secured connections from distributed sensors or
other managers and saves received events to a media specified by the
user (database, log files, mail, etc). |