Documentation forSecurity Event Manager

About SEM Manager

Originally, SEM was sold as a physical appliance that you deploy on your network. Today, the SEM Manager is the virtual image of a Linux-based appliance. You can install the SEM Manager Virtual Machine (VM) on a host computer running a VMware or Microsoft hypervisor.

You can also install SEM Manager in the cloud. See Deploy SEM to Amazon Web Services and Deploy SEM to Microsoft Azure for details.

The SEM documentation uses the term virtual machine (or VM) to refer to the SEM virtual appliance that runs on the hypervisor.

The SEM Manager collects and processes log and event information. It includes the following systems and services:

  • Hardened Linux operating system
  • Syslog Server and SNMP Trap Receiver
  • High compression, search-optimized database
  • Web server
  • Correlation engine