Documentation forSecurity Event Manager

About SEM Manager

SEM was initially marketed and sold as a physical appliance that is deployed on a network. Today, the SEM Manager is the virtual image of a Linux-based appliance. You can install the SEM Manager Virtual Machine (VM) on a host computer running a VMware vSphere or Microsoft Hyper-V hypervisor. You can also install SEM Manager in the cloud.

The SEM documentation uses the term virtual machine (or VM) to refer to the SEM virtual appliance that runs on a hypervisor, such as Microsoft Hyper-V and VMware vSphere.

The SEM Manager collects and processes log and event information. This information includes data received the following systems and services:

  • Hardened Linux operating system
  • Syslog Server and SNMP Trap Receiver
  • High compression, search-optimized database
  • Web server
  • Correlation engine