What is a SIEM?

A SIEM (Security Information and Event Management) is a security solution that collects, analyzes, and correlates log data from various systems across an IT environment to identify potential security threats, generate alerts, and enable automated responses to potential security incidents, essentially providing enhanced visibility and threat detection capabilities for security teams. This is where we'll store data for audit records and other compliance related logs.

What is Elastic?

Elastic is the chosen SIEM for Texas A&M University. Elastic can ingest data from a comprehensive list of integrations, advanced machine learning capabilities for threat detection, intuitive data visualization tools, unified platform for security analytics and observability, and a seamless integration with existing systems. Elastic is also the platform behind our Endpoint Security tool, Elastic Defend.

Contact Us

For any questions related to Elastic, email elastic@tamu.edu.