Okuzeka
Software Engineering vocabulary · APIs, Networking and Security

SIEM

Meaning in software engineering, with examples

abbreviationCommon term

In software engineering, SIEM means: Security information and event management: a platform that collects logs from many systems, correlates them and raises alerts about possible attacks.

In Turkish: SIEM, güvenlik bilgi ve olay yönetimi

How it is used

Usually pronounced like 'sim'. The SIEM is the central tool of a SOC: analysts write detection rules, build dashboards and search logs in it. Well-known products include Splunk, Microsoft Sentinel and Elastic Security.

Example sentences

  1. Make sure the new firewall sends its logs to the SIEM.

  2. I wrote a SIEM rule that fires when an admin logs in from a new country.

Common collocations

  • SIEM rule
  • SIEM alert
  • feed logs into the SIEM
  • SIEM dashboard
  • logA record of events, messages and errors that a program writes while it runs, used later to understand what happened. Also a verb: to log an error.
  • alertAn automatic notification sent to engineers when a monitored value crosses a limit or something looks wrong, for example when the error rate is too high.
  • threat huntingActively searching through systems and logs for signs of attackers who have not yet been detected by automated alerts, often starting from a hypothesis.
  • false positiveAn alert or test result that wrongly reports a threat or vulnerability when nothing harmful is actually there.

This word in other fields

The same English word can have a different meaning in another field:

More terms: APIs, Networking and Security

Practise with graded reading

Reading at the right level is the fastest way to make new words stick. Pick free English books by level: