Evaluate The Security Operations Company Symantec On Security Information And Event Management | Fast

Unlike legacy SIEMs built primarily for log aggregation, Symantec Security Analytics was built for and network forensics. This changes the evaluation criteria:

Is it a true SIEM? And more importantly, can it compete? Here is an operational evaluation of Symantec for SIEM. Unlike legacy SIEMs built primarily for log aggregation,

Do you run Symantec in your SOC? Have you migrated away? Share your experience in the comments. not a log-first tool.

If your primary use case is PCI-DSS compliance (90 days of log retention on 500 systems) or parsing cloud SaaS logs (Office 365, Salesforce, Okta), look elsewhere. Symantec’s log ingestion is expensive and cumbersome compared to native cloud SIEMs. It is a tool, not a log-first tool. Unlike legacy SIEMs built primarily for log aggregation,