Documentation forSecurity Event Manager

About the SEM Manager component

Originally, SEM was sold as a physical appliance that you deployed on your network. Today, the SEM Manager is the virtual image of a Linux-based appliance. The SEM Manager VM (virtual machine) can be easily deployed on a host computer running a VMware® or Microsoft® hypervisor, or in the cloud (see Deploy SEM to Amazon Web Services and Deploy SEM to Microsoft Azure.)

The SEM documentation uses the term virtual machine (or VM) to refer to the SEM virtual appliance that runs on the hypervisor.

The SEM Manager collects and processes log and event information. It includes the following systems and services:

  • Hardened Linux® OS
  • Syslog Server and SNMP Trap Receiver
  • High compression, search-optimized database
  • Web server
  • Correlation engine