Hacker News Reader

Anyone know of a real SOC or SIEM that looks like this? Something that can be installed on-prem? Thanks.

Security Onion leverages ELK/Elastic stack + to aggregate and visualize output from security tools https://securityonion.net/

Thank you.

Splunk 8 has a dark theme.

I remembered Splunk being a simple log parser. I didn’t remember it as a dashboard like this. It’s been many years since I looked at it though. Time to give it another look.

I build SOCs where Splunk can be the SIEM and it is being very nice to work with.

It integrates an editor where you can convert query results to such visualizations. You could also integrate your custom viz made with JS libs (D3).

Entreprise Security is a Splunk paid app that provides a nice environment for SOC analysts.

Yes,you should give it a try, maybe through a docker image that will get you going quickly.

Reply on news.ycombinator.com