Infrastructure Achievements
Centralized Logging (Splunk)
Search, Monitor, and analyze machine-generated big data via a web interface and can generate graphs, reports, alerts, dashboards, and visualizations.
Challenges:
- Provide more comprehensive access to log data without risking server integrity.
- Reduce the time required for troubleshooting and remediation.
- Wanted real-time, end-to-end visibility and reporting across on-premises and Cloud environments.
- Needed centralized log management solution.
Business Impact:
- Implemented SIEM solution to create a more secure online environment and further safeguard UAEU cyber reputation
- Transformed data into valuable insights to enhance the security posture
- Established baseline to monitor and improve the health of information security.
Data Sources:
- Servers
- Application
- Network devices
- Firewall
The Splunk Service include:
- Direct access to search logs
- 12 months of log retention
- Periodic log volume reports and alerts
Designed for:
Any server containing Moderate or High-Risk Data, as defined by the information security policy, must have the system logs sent to the Splunk.
Manage by:
Managed by UAEU DoIT security team
