Security Compliance
Limit the types of logs users can view in SEM
This article describes how to limit the types of logs that users can view in SEM. For example, user A can only view the Cisco logs, while user B can only view the Juniper logs.
First published date
Last published date
Overview
This article describes how to limit the types of logs that users can view on Security Event Manager (formerly Log & Event Manager).
For example, user A can only view the Cisco logs, while user B can only view the Juniper logs.
Product section
Resolution
SEM does not have the feature to delegate log views to specific users but there is an option to create different types of users:
- Admin
- Auditor
- Monitor
- Contact
- Reports
See Create SEM Console users with domain credentials for details about these other types of SEM.
None of the above user types can be used to limit the view of specific log types. The user can either access the Web Console from all the nodes, filter the page, create rules (depending on the user type) or have no access to the Web Console from all the nodes.
You can submit a feature request to have this added to a future release.