Is Evaluating SIEM Products Part of My DevOps Role?

You're probably more equipped for this than you think! SIEM is mostly about gathering logs from servers and potentially network logs too. Before diving in, consider a few questions: What are we protecting? What’s our budget? What are our requirements? Once you have those down, do a bit of research on SIEM options like Datadog or Splunk, which could fit your needs.

Absolutely, this fits your role as a DevOps person! SIEM systems involve collecting data, generating metrics, creating dashboards, and alerting—essentially things that are right in line with DevOps tasks. Plus, taking on challenges like this can really help you grow. Don't worry too much about failing; it’s all about learning from the experience.

You might want to check out Wazuh since it's open source and pretty straightforward to use. It's a great place to start if you're new to SIEM.

If you’re going with something established, Splunk is a good choice—just keep in mind that there are simpler, more affordable options if that’s a concern.

Take small steps here. The SIEM market can be tricky with lots of flashy marketing and steep prices, so proceed with caution. Wazuh is a solid starting point.