Xcitium NxSIEM

• Introduction To Comodo NxSIEM
  • Logging-in To The Administrative Console
• The Main Interface
• The Dashboard
• Customer Asset Management
  • Adding Customers
  • Adding Assets For Monitoring
    • Hard Assets
    • Soft Assets
  • Downloading And Installing The NxSIEM Agent On Endpoints
  • Configuring Nxlog And Rsyslog Servers To Send Logs To NxSIEM Server
  • Editing Customers
• Log Collection Agents And Policies
  • Collection Agents
    • Downloading NxSIEM Windows And Linux Agents
    • Managing Agents
    • Agentless Log Collection
  • Log Collection Policies
    • Audit Events Policy
    • Flat File Policy
    • Remote Log Collection Policy
    • Syslog Policy
    • Configuring Log Collection Policies
• Query Management
  • Configuring Event Queries
  • Configuring Custom Dashboards
• Managing Rules
• Incidents And Cases
  • Managing Incidents
  • Managing Cases
• Live Lists
  • Managing Live Lists
  • Managing Live List Content
• Managing Reports
• Administration
  • Viewing Log Collection Summaries
  • Managing Users
  • Viewing License And Subscription Details And Configuring NxSIEM Platform URL
• Appendix 1 – Field Groups And Event Items Description
• Appendix 2 - Configuring Endpoints To Forward Logs To NxSIEM Server
• About Comodo Security Solutions

Adding Assets for Monitoring

In order to collect logs and monitor events on customer networks, administrators need to add the customer’s network assets to NxSIEM. Administrators should enroll the endpoints and software assets (such as services) that they wish to monitor.

To add assets for a customer

• Open the 'Asset Management' interface by clicking the 'Menu' button, then 'Assets' > 'Asset Management'.

• Select the customer whose assets are to be added, from the left hand side pane.

The Customer Details pane will open in the right.

• Click 'Manage' at the bottom left of the right pane

The interface for adding customer's assets will open. It contains two tabs:

• Hard Assets - Allows you to add networks and zones to be monitored by entering their start and end IP addresses. Refer to the following section Hard Assets for more details.
  

• Soft Assets - Allows you to add soft assets like services hosted from the network by specifying their URL, website and so on. Refer to the following section Soft Assets for more details.