# SIEM

Enginsight SIEM (Security Information and Event Management) is a powerful software solution that collects comprehensive security information from multiple sources, analyzes it, and presents it in real-time or historically. From log data collection to accurate detection of suspicious activity, SIEM enables you to take a proactive approach to security monitoring and management.

## Contents

* [**Datalake**](/docs/manual/english/operation/platform/siem/data-lake.md)\
  Keep an eye on the totality of all logs at all times. Datalake offers you the possibility to centrally collect, normalize and standardize large amounts of security data from various sources. [Create event streams](/docs/manual/english/operation/platform/siem/data-lake.md#create-stream) using numerous [filter ](/docs/manual/english/operation/platform/siem/data-lake.md#filter)variations and thus create the basis for optimal individualization of your SIEM.
* [**Cockpit**](/docs/manual/english/operation/platform/siem/cockpits.md)\
  Create your own cockpits and gain comprehensive insight into the real security situation of your company. Real-time information about security incidents and threats helps you to keep the full picture at all times.
* [**Obfuscators**](/docs/manual/english/operation/platform/siem/obfuscators.md)\
  Protect even the most sensitive data within your SIEM thanks to obfuscation. Use obfuscators to make sensitive data accessible only to selected members of the organization and thus optimize your compliance.
* [**Workflows**](/docs/manual/english/operation/platform/siem/workflows.md)\
  Lay the foundation for even better detection of potential attacks. Correlate different protocols and shed light on the protocol jungle.
* [**Incidents**](/docs/manual/english/operation/platform/siem/incidents.md)\
  Keep track of critical event sequences. Identify the most relevant information about triggered workflows at a glance.
* [**Extractors**](/docs/manual/english/operation/platform/siem/extractors.md)\
  Stay up to date with our extractors. Improve your SIEM's detection and independently define new fields within your logs.
* [**Collectors**](/docs/manual/english/operation/platform/siem/collectors.md)\
  Learn what our collector types are all about and how to optimally configure them.<br>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.enginsight.com/docs/manual/english/operation/platform/siem.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
