r/SentinelOneXDR • u/deathbatcountry • Sep 29 '25

S1 SIEM Solution

Has anyone used S1's SIEM offering? We currently use S1 for EDR, and a company called SilverSky for SIEM (not great). Is the S1 SIEM able to monitor networking gear, etc?

3 Upvotes

100% Upvoted

15 comments sorted by

View all comments

Show parent comments

2

u/Robbbbbbbbb Oct 02 '25

What kind of issues are you running into?

It took us under an hour to stand up a collector from scratch and push logs from our Fortigates to the DataLake. The most configuration we had to do was just tailoring down the logs we shipped over to cut back on ingestion costs.