SIEM with Elastic - Security Insights and DevOps Freedom in Cloud Services

Learn how German Edge Cloud implements unified Security Information and Event Management (SIEM) in a 20-minute conference talk from CloudFest 2023. Explore the challenges of gathering security insights from a diverse IT infrastructure that includes IaaS on OpenStack, VMWare, Kubernetes, and managed services like Elasticsearch. Discover practical tips for implementing centralized security detection rules and alarm management while maintaining DevOps team autonomy in logging policies. Gain valuable insights into integrating SIEM solutions with Elasticsearch as a service across heterogeneous cloud environments that include custom firewalls and switches.