Compare · SIEM
DENIS and a SIEM: different jobs
A SIEM collects and correlates logs. DENIS watches the network itself and sees the devices that produce no logs at all. They fit together more often than they compete.
What a SIEM is good at
Collecting logs from servers, applications, cloud services and security tools, keeping them for a long time, searching them and correlating events across sources.
What DENIS adds
A current picture of every device on the network, including cameras, printers and controllers that write no logs, and a scored, explainable alert when one of them behaves differently.
Together
DENIS sends its alerts, findings and audit events to your SIEM as CEF, LEEF or JSON over syslog, or as ECS documents to Elasticsearch or OpenSearch.
For the technical team
Export formats and setup are in the Export and SIEM guide.
Good to know
DENIS is not a SIEM. It does not collect logs from other systems or give you long-term log search across your estate.