About the OpenSearch SIEM Integration
OpenSearch SIEM delivers security information and event management capabilities built on the open-source OpenSearch platform, enabling security teams to implement threat detection, log analytics, and security investigation workflows on a flexible, scalable, and vendor-neutral foundation. Part of Synqly’s SIEM Unified API, the OpenSearch SIEM integration enables security teams to route normalized security event data from Synqly-connected tools into OpenSearch’s analytics and detection engine. Integrate with OpenSearch SIEM to centralize security telemetry from across your stack into an open-source security analytics platform, powering threat detection and investigation without vendor lock-in.
Integration Use Cases
Post Events
Writes a batch of `Event` objects to the SIEM configured with the token used for authentication.
Query Events
Queries events from the SIEM configured with the token used for authentication.
Query Log Providers
Queries available log providers in the source SIEM
