pfSense and SEIM
-
Hello all hope this is the right place for the question.... I'd like to attache the PfSense logs (PfBlocker, Snort, etc) to a SEIM server and just do not know the best opensource (free) one to experiment with. If it works well, I have around 20 PfSense appliances I'd monitor (moving to commercial product if needed). But, I really need to see how it will work and the value of the data via remote logging.
Can someone recommend a good SEIM platform? Wasuh? OSSEC? Splunk Free? or another?
Being able to install on Win11 as well as linux would be helpful as well
Thanks for any suggestions
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.