🪵 Send logs to XSIAM SoC

bagg3rs commented 2 months ago

As a SoC I want security logs from all things So that we have a central source of security logs in order to process for threats correlations

Security Operations Center needs our logs and they will process with Palo Alto Cortex to check for bad things.

Rich, Julia

Do what MP/CP did see thread

See thread here

[ ] Terraform deployed to enable logs (see thread above MP and CP have done this)
[ ] Logs sent
[ ] Logs verified by SoC team
[ ] Add runbook

darren1988 commented 3 weeks ago

To be refined and planned into next sprint

YvanMOJdigital commented 2 weeks ago

Waiting for team to send current error logs before planning this.

darren1988 commented 1 day ago

logs for review:

ministryofjustice / analytical-platform