Поддерживаемые источники событий

Данная таблица содержит список информационных систем, из которых в SIEM поступают события. Для указанных источников разработаны правила нормализации.

Вендор Продукт Версия Тип подключения ID правила нормализации

AhnLab

Absolute Data and Device Security (DDS)

-

Universal CEF

RV-N-243

AhnLab

AhnLab Malware Defense System (MDS)

-

Universal CEF

RV-N-243

Apache

Apache Cassandra

4.1

Syslog

RV-N-343

Apache

Apache HTTP Server

2

Syslog (access)

Syslog (error)

RV-N-231

RV-N-232

Apple

macOS

10, 11

R-Vision Endpoint

RV-N-361

Atlassian

Confluence

8, 9

Syslog

RV-N-237

Atlassian

Jira

-

Syslog

RV-N-238

RV-N-239

Avigilon

Avigilon Access Control Manager (ACM)

-

Universal CEF

RV-N-243

AVSOFT

AVSOFT ATHENA

1.4

Syslog

RV-N-262

AVSOFT

AVSOFT Kairos

-

Syslog

RV-N-262

Ayehu

Ayehu eyeShare

-

Universal CEF

RV-N-243

Barracuda

Barracuda Networks NG Firewall

-

Universal CEF

RV-N-243

BeyondTrust

BeyondInsight

-

Universal CEF

RV-N-243

BeyondTrust

Privilege Management Console

-

Universal CEF

RV-N-243

BI.ZONE

BI.ZONE EDR

-

Kafka

RV-N-213

RV-N-214

RV-N-215

RV-N-216

BIND

BIND DNS

9.9

Syslog

RV-N-188

Bloombase

Bloombase StoreSafe

-

Universal CEF

RV-N-243

BMC

BMC CorreLog

-

Universal CEF

RV-N-243

Bricata

Bricata ProAccel

-

Universal CEF

RV-N-243

Brinqa Risk

Brinqa Risk Analytics

-

Universal CEF

RV-N-243

Broadcom

Symantec Advanced Threat Protection (ATP)

-

Universal CEF

RV-N-243

Broadcom

Symantec Endpoint Protection Mobile

-

Universal CEF

RV-N-243

Broadcom

Symantec Threat Hunting Center

-

Universal CEF

RV-N-243

Check Point

Check Point Endpoint Security

-

Syslog

RV-N-248

Check Point

Check Point Harmony Endpoint

-

Syslog

RV-N-248

Check Point

Check Point NGFW

R80, R81, R82

Syslog

RV-N-301

Cisco

Cisco ASA

-

Syslog

RV-N-197

Cisco

Cisco IOS

12—​15

Socket

RV-N-244

Cisco

Cisco IOS XE

17.5—​17.14

Socket

RV-N-330

Cisco

Cisco IOS XR

7.9.2

Socket

RV-N-333

Cisco

NetFlow

5

Syslog

RV-N-357

Cisco

NetFlow

7

Syslog

RV-N-374

Cisco

NetFlow

9

Syslog

RV-N-272

Cisco

Cisco Nexus

10.1

Socket

RV-N-339

Cisco

Cisco Secure Email Gateway (SEG)

-

Universal CEF

RV-N-243

Cisco

Cisco Secure Firewall Management Center

-

Universal CEF

RV-N-243

Citrix

Citrix XenApp

-

Database

RV-N-349

Citrix

NetScaler

-

Syslog

RV-N-344

Citrix

Virtual Apps and Desktops

-

Database

R-Vision Endpoint

RV-N-323

RV-N-324

Claroty

Claroty Continuous Threat Detection

-

Universal CEF

RV-N-243

ClickHouse

ClickHouse

-

Database

RV-N-193

CloudPassage

CloudPassage Halo

-

Universal CEF

RV-N-243

Corvil

Corvil Network Analytics

-

Universal CEF

RV-N-243

Cribl

Cribl Stream

-

Universal CEF

RV-N-243

CrowdStrike

Falcon Host

-

Universal CEF

RV-N-243

CyberArk

Privileged Threat Analytics (PTA)

-

Universal CEF

RV-N-243

Cyberpeak

Спектр

4.3

Syslog

RV-N-377

Datex Software

E-Staff

5.1

SMB

RV-N-369

DeepInstinct

DeepInstinct

-

Universal CEF

RV-N-243

Delinea

Delinea Secret Server

-

Universal CEF

RV-N-243

Digital Guardian

Digital Guardian Endpoint Threat Detection

-

Universal CEF

RV-N-243

Directum

Directum RX

4

Syslog

RV-N-363

Docker

Docker Harbor

-

Syslog

RV-N-358

Dr.Web

Dr.Web Enterprise Security Suite

-

Socket

RV-N-297

Dragos

Dragos Platform

-

Universal CEF

RV-N-243

EclecticIQ

EclecticIQ Intelligence Center

-

Universal CEF

RV-N-243

Edge Technologies

Edge Technologies AppBoard and enPortal

-

Universal CEF

RV-N-243

Efros

Efros DefOps NAC

-

Syslog

RV-N-261

Elastic

Auditbeat

9

Logstash

RV-N-378

Elastic

Packetbeat

9.0

Logstash

RV-N-389

Elastic

Winlogbeat

-

Logstash

RV-N-364

ELMA

ELMA365

2026.4

Database

RV-N-394

Eltex

Eltex ESR

-

Socket

RV-N-345

Eltex

Eltex MES

1.28

Syslog

RV-N-348

Eltex

Eltex vESR

1.4

Syslog

RV-N-345

ESET

ESET PROTECT

-

Universal CEF

RV-N-243

F5

BIG-IP Advanced Firewall Manager (AFM)

-

Universal CEF

RV-N-243

FFRI

FFR yarai

-

Universal CEF

RV-N-243

FireEye

FireEye CM Series

-

Universal CEF

RV-N-243

FireEye

FireEye Malware Protection System

-

Universal CEF

RV-N-243

Forcepoint

Forcepoint NGFW

-

Universal CEF

RV-N-243

Forcepoint

Forcepoint SMC

-

Universal CEF

RV-N-243

Fortinet

FortiAnalyzer

-

Syslog

RV-N-285

Fortinet

FortiGate

6.4, 7.2, 7.4

Syslog

RV-N-322

Fortinet

FortiSOAR

-

Universal CEF

RV-N-243

FreeIPA

FreeIPA

3, 4

Syslog

RV-N-206

RV-N-207

RV-N-208

RV-N-209

Gigamon

Gigamon GigaVUE

-

Universal CEF

RV-N-243

GitLab

GitLab

18, 19

HTTP Server

RV-N-308

HAProxy Technologies

HAProxy

2.8.14

Syslog

RV-N-370

Hewlett Packard Enterprise

Aruba ClearPass

-

Universal CEF

RV-N-243

Hewlett Packard Enterprise

ArubaOS-CX

10.05

Syslog

RV-N-313

HP

HP ProCurve

-

Syslog

RV-N-321

Huawei

VRP

-

Socket

RV-N-352

IBM

IBM InfoSphere Guardium

-

Universal CEF

RV-N-243

IETF

IPFIX

-

Netflow

RV-N-302

Illumio

Policy Compute Engine (PCE)

-

Universal CEF

RV-N-243

Imperva

Imperva Incapsula

-

Universal CEF

RV-N-243

Imperva

Imperva SecureSphere

-

Universal CEF

RV-N-243

InfoWatch

InfoWatch Traffic Monitor

3

Database

RV-N-198

Intralinks

Intralinks VIA

-

Universal CEF

RV-N-243

IT Expertise

Sakura

2.37

Socket

RV-N-393

Jenkins

Jenkins

2.541.1

Syslog

RV-N-305

JetBrains

TeamCity

-

Syslog

RV-N-254

RV-N-255

RV-N-256

Juniper Networks

Juniper SRX

22 и выше

Syslog

RV-N-359

Kaspersky

Kaspersky Anti Targeted Attack Platform

-

Syslog

RV-N-181

Kaspersky

Kaspersky CyberTrace

-

Syslog

RV-N-182

Kaspersky

Kaspersky Endpoint Detection and Response (KEDR)

12 и выше

Syslog

RV-N-381

Kaspersky

Kaspersky Secure Mail Gateway

-

Syslog

RV-N-184

Kaspersky

Kaspersky Security Center

14

DB MS SQL

DB MySQL (MariaDB)

DB PostgreSQL

Syslog CEF

RV-N-183

Kaspersky

Kaspersky Web Traffic Security

6.1

Syslog

RV-N-185

Kubernetes

Kubernetes

-

HTTP Server

RV-N-204

Lieberman Software

Enterprise Random Password Manager (ERPM)

-

Universal CEF

RV-N-243

Lighttpd

Lighttpd

2.4

Syslog

RV-N-231

RV-N-232

Linux

Linux

-

R-Vision Endpoint

RV-N-299

Linux

Linux Auditd

2.6 и выше

R-Vision Endpoint

Syslog

RV-N-186

RV-N-187

Linux

Linux Auth

-

Syslog

RV-N-220

MariaDB

MariaDB

5—​12

Syslog

RV-N-236

Mattermost, Inc.

Mattermost

11

Database

RV-N-375

Microsoft

Active Directory Certificate Services (AD CS)

2008—​2022

R-Vision Endpoint

RV-N-277

Microsoft

Active Directory Domain Services (AD DS)

2008—​2022

R-Vision Endpoint

RV-N-277

Microsoft

Active Directory Federation Services (AD FS)

2008—​2022

R-Vision Endpoint

RV-N-247

Microsoft

AppLocker

-

R-Vision Endpoint

RV-N-366

Microsoft

Background Intelligent Transfer Service (BITS)

-

R-Vision Endpoint

RV-N-382

Microsoft

DHCP Server

2008—​2022

R-Vision Endpoint

RV-N-245

Microsoft

Exchange Server

2010—​2019

R-Vision Endpoint

RV-N-263

RV-N-264

RV-N-347

Microsoft

Hyper-V

-

R-Vision Endpoint

RV-N-228

Microsoft

IIS

2008—​2022

R-Vision Endpoint

RV-N-230

Microsoft

Microsoft Configuration Manager

2025

Database

RV-N-325

Microsoft

Microsoft DNS Server

-

R-Vision Endpoint

RV-N-249

RV-N-251

Microsoft

Microsoft SharePoint

2016—​2019

Database

RV-N-392

Microsoft

Microsoft SQL Server

2016 и выше

Database

SQL Audit

RV-N-368

Microsoft

Microsoft-Windows-AppXDeployment-Server

-

R-Vision Endpoint

RV-N-387

Microsoft

Microsoft Windows Task Scheduler

-

R-Vision Endpoint

RV-N-303

Microsoft

Microsoft Windows Terminal Services

-

R-Vision Endpoint

RV-N-310

Microsoft

System Center Operations Manager (SCOM)

2012—​2025

Database

RV-N-328

Microsoft

Windows Management Instrumentation (WMI)

-

WMI

GPO

RV-N-353

Microsoft

Windows PowerShell

2008—​2022

R-Vision Endpoint

RV-N-218

Microsoft

Windows Remote Management (WinRM)

-

R-Vision Endpoint

RV-N-354

Microsoft

Windows Security

2008—​2022

R-Vision Endpoint

RV-N-222

Microsoft

Windows Sysmon

2008—​2022

R-Vision Endpoint

RV-N-211

Microsoft

Windows System

2008—​2022

R-Vision Endpoint

RV-N-228

MikroTik

MikroTik RouterOS

7

Socket

RV-N-257

MongoDB

MongoDB

8

Syslog

RV-N-293

MULTIFACTOR

MULTIDIRECTORY

3.1.0

Syslog

RV-N-365

MULTIFACTOR

MULTIFACTOR Radius Adapter

-

Syslog

RV-N-340

Netgate

pfSense

2.7

Syslog

RV-N-336

NetIQ

NetIQ Identity Manager

-

Universal CEF

RV-N-243

NetScout

NetScout Systems nGenius Performance Manager

-

Universal CEF

RV-N-243

Netskope

Cloud Access Security Broker (CASB)

-

Universal CEF

RV-N-243

Netwrix

Netwrix Auditor

-

Universal CEF

RV-N-243

Nextcloud

Nextcloud

26—​29

Syslog

RV-N-300

Nexthink

Nexthink Engine

-

Universal CEF

RV-N-243

Nginx

Nginx

-

Syslog

RV-N-234

NIKSUN

NIKSUN NetDetector

-

Universal CEF

RV-N-243

One Identity

One Identity Privileged Access Management (PAM)

-

Universal CEF

RV-N-243

OpenBao

OpenBao

-

Syslog

RV-N-384

OpenVPN

OpenVPN

2.4, 2.6

Syslog

RV-N-225

RV-N-226

OpenVPN

OpenVPN Access Server

3.0.1

Syslog

RV-N-227

Oracle

MySQL

8

Syslog

RV-N-194

RV-N-195

Oracle

Oracle Database

21с

Syslog

Database

RV-N-210

RV-N-319

Orion soft

zVirt

4

Database (PostgreSQL)

RV-N-367

PagerDuty

PagerDuty

-

Universal CEF

RV-N-243

Palo Alto

Cortex Data Lake

-

Universal CEF

RV-N-243

Palo Alto

PAN-OS

-

Universal CEF

RV-N-243

Passbolt SA

Passbolt

5.13.0-1

Syslog

RV-N-379

Penta Security

WAPPLES

-

Universal CEF

RV-N-243

Positive Technologies

PT Application Firewall

3

Syslog (audit)

Syslog (atack)

RV-N-199

RV-N-200

Positive Technologies

PT Application Firewall

4

Syslog

RV-N-190

RV-N-338

Positive Technologies

PT Container Security

1.2 и выше

Syslog

RV-N-371

Positive Technologies

PT Industrial Security Incident Manager

5

Syslog

RV-N-286

Positive Technologies

PT Network Attack Discovery

-

Syslog

RV-N-203

Positive Technologies

PT NGFW

1.10

Syslog

RV-N-383

Positive Technologies

PT Sandbox

-

Syslog

RV-N-288

PostgreSQL

PostgreSQL

14, 17

Syslog

RV-N-189

Progress

Kemp LoadMaster

-

Universal CEF

RV-N-243

Proofpoint

Proofpoint Insider Threat Management

-

Universal CEF

RV-N-243

Proxmox

Proxmox Virtual Environment

8 и выше

Syslog

RV-N-362

Recorded Future

Intelligence Cloud Platform

-

Universal CEF

RV-N-243

Red Hat

Ansible Automation Platform (Automation Controller)

-

Syslog

RV-N-320

Red Hat

Ansible AWX

-

Syslog

RV-N-320

Red Hat

oVirt

-

Database

RV-N-367

Redis

Redis Enterprise Software

-

Syslog

RV-N-196

ReversingLabs

ReversingLabs N1000 Appliance

-

Universal CEF

RV-N-243

R-Vision

R-Vision SOAR

-

Syslog

RV-N-292

R-Vision

R-Vision TDP

-

Socket

RV-N-287

R-Vision

R-Vision TIP

-

Socket

RV-N-298

R-Vision

Универсальный коннектор CEF

-

Universal CEF

RV-N-243

SailPoint Technologies

SailPoint IdentityIQ

-

Universal CEF

RV-N-243

Sboard

Sboard

-

Database

RV-N-388

SentinelOne

SentinelOne

-

Universal CEF

RV-N-243

Sonatype

Sonatype Nexus Repository

3.89.0

Syslog

RV-N-304

Squid Software Foundation

Squid

4.5—​7.4

Syslog

RV-N-309

Suricata

Suricata

-

Syslog

RV-N-314

Thales eSecurity

Vormetric Data Security Manager

-

Universal CEF

RV-N-243

ThreatConnect

Threat Intelligence Platform

-

Universal CEF

RV-N-243

ThreatQuotient

ThreatQuotient

-

Universal CEF

RV-N-243

TrapX Security

DeceptionGrid

-

Universal CEF

RV-N-243

Trend Micro

Trend Micro Control Manager

-

Universal CEF

RV-N-243

Trend Micro

Trend Micro Deep Security

-

Universal CEF

RV-N-243

Trend Micro

Trend Micro NGFW

-

Universal CEF

RV-N-243

Trustwave

Trustwave DbProtect

-

Universal CEF

RV-N-243

UserGate

UserGate NGFW

7.1.1.12162R

Socket

RV-N-334

Varonis Systems

DatAdvantage

-

Universal CEF

RV-N-243

Veeam Software

Veeam Backup & Replication

13

R-Vision Endpoint

RV-N-246

Veriato

Veriato 360

-

Universal CEF

RV-N-243

VMware

VMware Carbon Black EDR

-

Universal CEF

RV-N-243

VMware

VMware ESXi

6—​8

Syslog

RV-N-179

VMware

VMware Horizon

8.10

Syslog

RV-N-295

VMware

VMware vCenter Server

6—​8

Syslog

RV-N-180

Votiro

Votiro Disarmer for Windows

-

Universal CEF

RV-N-243

Webroot

Webroot BrightCloud

-

Universal CEF

RV-N-243

Yandex

Yandex Cloud

-

Syslog

RV-N-332

Zabbix

Zabbix

-

Database

RV-N-260

Zeek

Zeek

-

Syslog

RV-N-346

Zettaset

BDEncrypt

-

Universal CEF

RV-N-243

Zscaler

Zscaler Nanolog Streaming Service (NSS)

-

Universal CEF

RV-N-243

1С:Предприятие

8.3

SMB

RV-N-258

RV-N-259

1С-Битрикс

Битрикс24

-

Database (MySQL)

RV-N-307

Айдеко

Ideco NGFW

-

Syslog

RV-N-296

АйТи Бастион

СКДПУ НТ

-

Universal CEF

RV-N-191

RV-N-243

Атом Безопасность

Staffcop

5.5

Syslog

RV-N-372

Гарда Технологии

Гарда DBF

-

Syslog

RV-N-315

Гарда Технологии

Гарда DLP

6.0

Syslog

RV-N-326

Гарда Технологии

Гарда NDR

4

Database

Syslog

RV-N-335

RV-N-337

Гарда Технологии

Гарда WAF

2.4

Database (PostgreSQL)

RV-N-223

ДистКонтрол

DistKontrolUSB

5

Syslog

RV-N-355

ИнфоТеКС

ViPNet Coordinator 4

4

Syslog CEF

RV-N-329

ИнфоТеКС

ViPNet IDS NS

3.10

Syslog CEF

RV-N-281

ИнфоТеКС

ViPNet TIAS

3.10

Syslog CEF

RV-N-283

Киберпротект

Кибер Бэкап

-

Syslog

RV-N-356

Код Безопасности

Secret Net LSP

-

Syslog

RV-N-373

Код Безопасности

Secret Net Studio

8

Database (audit)

Database (sec events)

RV-N-201

RV-N-202

Код Безопасности

vGate

5.1

Socket

RV-N-385

Код Безопасности

Континент

3.9.3

Syslog

RV-N-266

Код Безопасности

Континент

4

Syslog

Database

RV-N-273

RV-N-274

RV-N-276

Конфидент

Dallas Lock 8.0

8

Database

Syslog

RV-N-290

RV-N-291

Конфидент

ЕЦУ Dallas Lock

-

Database

Syslog

RV-N-289

RV-N-291

Конфидент

СЗИ ВИ Dallas Lock

6

Syslog

RV-N-360

Кселло

Xello Deception

5

Syslog

RV-N-316

НТЦ ИТ РОСА

РОСА Виртуализация

4.0

Database

RV-N-367

Открытая мобильная платформа

Аврора Центр

5.6.0

Syslog

RV-N-386

Пассворк

Пассворк

-

Syslog

RV-N-224

РЕД СОФТ

РЕД АДМ

2

Syslog

RV-N-327

РЕД СОФТ

РЕД База Данных

5.1.4

Syslog

RV-N-318

СберТех

Platform V Pangolin DB

7

Syslog

RV-N-350

СёрчИнформ

СёрчИнформ КИБ

-

Socket

RV-N-312

Солар

Solar Dozor

7, 8

Syslog

RV-N-219

Солар

Solar inRights

3.2.0 и выше

Syslog

RV-N-317

Солар

Solar webProxy

-

Syslog

RV-N-331

С-Терра СиЭсПи

С-Терра Шлюз

4.3

Syslog

RV-N-311

Была ли полезна эта страница?

Обратная связь