SIEM Alert for Logging Failures | Voters

SIEM Alert for Logging Failures

Frank Coviello

I am concerned about the lack of alerts in SIEM for logging failures, which could be an issue for us with CMMC compliance. It would be helpful to have a feature that generates alerts if the logging mechanism fails, ensuring we can address any gaps promptly.

Created by Canny AI

June 3, 2025

Cody Arnold

I assume the thought here is get an alert if the collector is not seen for more than X period of time, or if it's not uploaded any logs for a time that is greater than a specified value, I would probably also see value in being able to toggle something per syslog source in the portal and have it alert if it's not seeing any logs from that within a period of time, and then also have a place it can send those to which is a customizable destination for those specific alerts.