Best Practices for Integrating SolarWinds with a Third-Party SIEM

Hello THWACK Community,

I am looking to integrate our SolarWinds environment with a third-party SIEM system to enhance our network monitoring and security capabilities.

I would appreciate any guidance or best practices on how to achieve this integration effectively.

Find more posts tagged with

thwack_de

siem

emea

Accepted answers

All comments

HerrDoktor

Ahoi,

what do you want to see in your SIEM? Solarwinds has some auditing functionality that you can potentially forward as Syslogs to your SIEM. What format is your SIEM expecting? And also Which solarwinds Product are we talking about? SolarWinds Platform? ServU? KIWI? ARM? ServiceDesk? ... the list is long

softie

Hi Ahoi,

Thank you for your response. The SIEM requires visibility into the traffic on the network devices and needs to receive alerts as well. Regarding the format, I am unsure. Could you suggest the best format? The platform in use is SolarWinds, which includes the NCM, NPM, SAM, and NTA modules.

FormerMember

Hi Softie,

Which siem product are you using? It would certainly be worth contacting the vendor specific support team for the siem you are using to help you do this as we would be ill advised to try and give you specific advice without knowing all the facts first.

If you have any monitoring questions regarding SolarWinds monitoring the siem then we could certainly answer those for you but not really the other way around without a lot more info.