Universal Hydra

SIEMonster utilizes a custom log aggregator named Hydra. This is a VM that consists of multiple containerized services that will be performing on the onsite log ingestion.

The services in place on the log aggregator are the follolwing:

• Wazuh

• Suricata

• logstash

The pages below this section will show how to deploy and configure the Hydra to facilitate log flows. Please be sure to follow the instructions exactly and not to skip any of the steps.