Technical Documentation
Seqrite SIEM Integration Guide
An integration guide for Seqrite with the SIEM platforms common in Thailand — Microsoft Sentinel, IBM QRadar, Splunk Enterprise, Elastic SIEM. Covers log shipping format, custom CIM mapping, sample dashboards, alert routing patterns, and a tuning checklist.
What you'll get
The key points
- Log shipping format reference (CEF, JSON, syslog)
- CIM mapping per SIEM platform
- Sample dashboard templates (Sentinel, Splunk)
- Alert routing patterns and tuning checklist