Configuring Fluent Bit Audit Logs for a SIEM

A Security Information and Event Management (SIEM) system is a solution that aggregates and analyzes activity from different resources across your IT infrastructure. This document will guide you through setting up Fluent Bit in ARTESCA to output audit logs to a SIEM.

Only the audit logs collected by auditd on the ARTESCA nodes are forwarded to the configured SIEM.

SIEM-specific configurations

• Configuring Splunk
• Configuring Graylog
• Configuring Elasticsearch
• Configuring Syslog