FOSS SIEM Recommendations

[DalekSec]

Morning All,

 

I'm looking into a solution to get all our UniFi UDMs (5) to feed back to a syslog server, i've looked into a few foss ones but they all seem to have a gotcha or 2. Does anyone here have one and if so which? Ideally running on Linux.

 

Looked into Microsoft Sentinel but ££££

 

Cheers

[pete]

I like Wazuh (https://wazuh.com/), but it might be a bit overkill for syslog on 5 devices.