Security Compliance

Definition of key SEM elements

SEM has a unique way of naming is components. This article lists some common element names and definitions.

First published date

10/30/2018 6:24 PM

Last published date

5/30/2019 5:42 PM

Overview

This article provides a thorough understanding of Security Event Manager (formerly Log & Event Manager) alerts and filters which allows you to more effectively use SEM in your environment. Here are the definitions of some key SEM elements.

Product section

Security Event Manager

Resolution

Agent
A software component installed on SEM-managed devices that allow third-party agents.

Alert
Containers SEM uses to display events/messages from SEM monitored devices.

Connector (formerly Tools)
A software component that converts raw events into normalized events. Connectors can reside on device agents or on the SEM appliance.

Filters
A component in the SEM console that groups alerts by specific values, such as IP address, device type, or alert name.

Event
An unaltered message from a SEM-managed device.

Rules
A component on the SEM appliance that allows for automated actions based on specific alert correlations.

Find more information here.