• Introduction To Comodo NxSIEM
  • Logging-in To The Administrative Console
• The Main Interface
• The Dashboard
• Customer Asset Management
  • Adding Customers
  • Adding Assets For Monitoring
    • Hard Assets
    • Soft Assets
  • Downloading And Installing The NxSIEM Agent On Endpoints
  • Configuring Nxlog And Rsyslog Servers To Send Logs To NxSIEM Server
  • Editing Customers
• Log Collection Agents And Policies
  • Collection Agents
    • Downloading NxSIEM Windows And Linux Agents
    • Managing Agents
    • Agentless Log Collection
  • Log Collection Policies
    • Audit Events Policy
    • Flat File Policy
    • Remote Log Collection Policy
    • Syslog Policy
    • Configuring Log Collection Policies
• Query Management
  • Configuring Event Queries
  • Configuring Custom Dashboards
• Managing Rules
• Incidents And Cases
  • Managing Incidents
  • Managing Cases
• Live Lists
  • Managing Live Lists
  • Managing Live List Content
• Managing Reports
• Administration
  • Viewing Log Collection Summaries
  • Managing Users
  • Viewing License And Subscription Details And Configuring NxSIEM Platform URL
• Appendix 1 – Field Groups And Event Items Description
• Appendix 2 - Configuring Endpoints To Forward Logs To NxSIEM Server
• About Comodo Security Solutions

Introduction to Comodo NxSIEM

Comodo NxSIEM is a security intelligence and event management product (SIEM) built exclusively for MSPs to help them grow their business. NxSIEM features advanced event log monitoring, built-in reporting, multiple pre-set queries, a powerful custom-query interface, automatic assignment of incidents to personnel, customizable dashboards and real-time alerts. NxSIEMs multi-tenancy architecture enables MSPs to manage their customers from a single deployment and benefit from “big data” scalability as their log sizes increase.

Features

• Real-time event monitoring and processing

• Long-term log retention, archiving and backup

• Multiple 'Ready-to-go' queries to address typical use-cases

• Powerful query creation interface for custom queries

• Configurable custom dashboards

• Custom report generation and report scheduling

• Incident and case management

• Choice of agent or agent-less log collection

• Per-customer policy creation and management

• Immediate alerts and incident delegation

• 'Live Lists' of event parameters for use in queries and correlation rules

• Rapid search over huge volumes of data

This guide is intended to take you through the configuration and use of Comodo Managed Security Service Provider Platform and is broken down into the following main sections.

• Introduction

• Logging-in to the Administrative Console

• The Main Interface

• The Dashboard

• Customer Asset Management

• Adding Customers

• Downloading and Installing the NxSIEM Agent on Endpoints

• Configuring Nxlog and Rsyslog to Send Logs to NxSIEM Server

• Editing Customers

• Log Collection

• Collection Agents
  

• Log Collection Policies

• Query Management

• Configuring Event Queries

• Configuring Customer Dashboards

• Managing Rules

• Incidents and Cases
  

• Managing Incidents

• Managing Cases

• Live Lists

• Managing Live Lists

• Managing Live List Content

• Managing Reports

• Administration

• Viewing Log Collection Summaries

• Managing Users

• Viewing License and Subscription Details and Configuring NxSIEM Platform URL

• Appendix 1 - Field Groups and Event Items Description

• Appendix 2 - Configuring Endpoints to Forward Logs to NxSIEM server