Hey Graylog community!
I gave a talk a while back about how to think through what you should (and shouldn’t) add to your SIEM as you start off your logging journey.
I am happy to share that the talk has now been turned into a blog post and video to help you in your journey of balancing having the right information stored in your SIEM without having to much noise getting in the way and taking up valuable space.
You can find a post about the topic at https://graylog.org/post/feeding-your-first-siem-with-graylog/ and the video of the presentation at https://youtu.be/6pEK0rlsCMk