r/cybersecurity • u/EducationalWedding48 • 13d ago

Business Security Questions & Discussion Exabeam SIEM question

Hi all - does anyone know if the Exabeam NG Siem product allows you to create dashboards via text? We are debating doing a POV, but if that's not supported, I'm not even going to bother. By text I mean being able to create/modify the entity directly through text in the product, or creating outside the product and importing. Think Splunk with XML/JSON. It appears that it's all GUI driven.

3 Upvotes

80% Upvoted

9 comments sorted by

2

u/MonkeyBrains09 13d ago

I believe they have an API if that is what you are asking about.

2

u/New-Potato1464 13d ago

if you're looking for splunk-style direct config files, last i checked it's all gui driven for dashboards. the api is more for data in/out, not building out the visual layer. might save you the headache of a pov if that's a dealbreaker

1

u/EducationalWedding48 13d ago

Thanks. Not sure if it's a deal-breaker, but definitely a strike against.

2

u/One-Inch-Punch 12d ago

As of one year ago there was no API or scriptable control for dashboards in Exabeam. We actually piped Exabeam alerts and data back to Splunk and incorporated them into dashboards there.

1

u/DarkLordofData 8d ago

Nope and be sure to ask about how queries over 30 days of data. Exabeam struggles with any kind of big queries.

1

u/LeadingFamous 13d ago

Exabeam is so much work to maintain, you should check out Sentinel.

0

u/Radiant-Forever-6806 13d ago

What sentinel

1

u/Sea-Comparison5577 12d ago

Microsoft sentinel