VSA can quickly and easily isolate security incidents and send them in the appropriate format to your SIEM.
Mainframe teams must adhere to strict auditing rules but do not have the time or resources to filter and format the data before sending them to SIEM.
Let VitalSigns SIEM Agent take care of it.
Although mainframes provide a wealth of information about what is happening (event log, audit log, syslog, etc...), you need a way to quickly and easily separate and identify security-critical events from standard business events—and send them to your SIEM in the correct format.
VitalSigns SIEM Agent for z/OS transfers these alerts in the appropriate format, as well as those from RACF, ACF2, TOP SECRET, DB2, CICS, and FTP, to Security Information and Event Management (SIEM) tools such as ArcSight, IBM QRadar, Splunk, and others.
VSA puts your z/OS platforms at the heart of your company's security infrastructure, hassle-free and in real-time.