Home

🛡️ Welcome to Sentinel-Logs Wiki

Enterprise-Grade Security Information and Event Management (SIEM) System

---

🚀 Getting Started

📖 Installation Guide Complete setup instructions for all scenarios

⚡ Quick Start Get running in 5 minutes

⚙️ Configuration Environment variables and settings

---

📚 Documentation

🎯 Core Features

Topic	Description
🤖 Agent Deployment	Install agents on your servers
🎯 Detection Rules	Threat detection configuration
🚨 Alert Management	Working with alerts

👨‍💼 Administration

Topic	Description
👥 User Management	RBAC and permissions
💾 Backup & Restore	Data protection
📊 Monitoring	Prometheus and Grafana
🔧 Troubleshooting	Common issues and solutions

🚀 Advanced Topics

Topic	Description
🏢 Production Deployment	Security hardening
🔒 Air-Gapped Installation	Isolated networks
⚡ Performance Tuning	Optimization guide
🎨 Custom Rules	Create detection rules

---

🎓 Learning Path

graph LR
    A[📖 Read Quick Start] --> B[⚙️ Install SIEM]
    B --> C[🤖 Deploy Agents]
    C --> D[🎯 Configure Rules]
    D --> E[🚨 Manage Alerts]
    E --> F[� Monitor System]
    
    style A fill:#e1f5ff
    style B fill:#fff3e0
    style C fill:#f3e5f5
    style D fill:#e8f5e9
    style E fill:#fce4ec
    style F fill:#e0f2f1

Loading

---

💡 Quick Links

🔗 Resources 📦 GitHub Repository 📦 NPM Agent Package 📖 Installation Guide 🔌 API Reference

🆘 Get Help 🐛 Report Issues 💬 Discussions 🔧 Troubleshooting 📧 Contact Support

---

🎯 Use Cases

🏢 Enterprise Security Monitoring

Monitor security events across your entire infrastructure:

• Real-time threat detection
• Compliance reporting (GDPR, HIPAA, PCI-DSS)
• Centralized log management
• Security incident response

🔒 Air-Gapped Environments

Perfect for isolated networks:

• No internet connectivity required
• Offline agent caching
• Internal network deployment
• High-security environments

☁️ Cloud & Hybrid Infrastructure

Monitor cloud and on-premise systems:

• Multi-cloud support (AWS, Azure, GCP)
• Hybrid infrastructure monitoring
• Container and Kubernetes logs
• Microservices monitoring

---

📊 System Architecture

┌─────────────────────────────────────────────────────────────┐
│  Client Infrastructure (Servers, Workstations, Firewalls)  │
└────────────────────┬────────────────────────────────────────┘
                     │
                     ▼
         ┌───────────────────────┐
         │  Sentinel Agents      │  ← Lightweight collectors
         │  (Node.js)            │     with offline caching
         └───────────┬───────────┘
                     │ HTTPS + API Key
                     ▼
         ┌───────────────────────┐
         │  Nginx Reverse Proxy  │  ← SSL/TLS termination
         └───────────┬───────────┘
                     │
                     ▼
         ┌───────────────────────┐
         │  Backend API          │  ← Express.js REST API
         │  ├─ Parser Engine     │     Log parsing
         │  ├─ Rule Engine       │     Threat detection
         │  └─ Alert Manager     │     Alert generation
         └───────────┬───────────┘
                     │
         ┌───────────┴───────────┐
         ▼                       ▼
┌────────────────┐      ┌────────────────┐
│  PostgreSQL    │      │  Grafana Loki  │
│  (Metadata)    │      │  (Log Storage) │
└────────┬───────┘      └────────┬───────┘
         │                       │
         └───────────┬───────────┘
                     ▼
         ┌───────────────────────┐
         │  Visualization        │
         │  ├─ React Dashboard   │  ← Modern web UI
         │  └─ Grafana           │     Metrics & dashboards
         └───────────────────────┘

---

🤝 Contributing

We welcome contributions! See our Contributing Guide for details.

Pull Requests

Bug Reports

Documentation

---

Built with ❤️ for the Security Community

⭐ Star us on GitHub | 📦 Try the Agent | 💬 Join Discussions