SIEM+ user guide
This guide covers the end-user experience in SIEM+ 1.0.9, the current application version. SIEM+ brings alert processing, case management, security scoring, behavior analytics, compliance evidence, and reports into one workspace.
Start here
- Get started — sign in, choose an account, and understand access.
- Dashboard — read the current security and operations picture.
- Cases — investigate, collaborate, escalate, and close work.
- User Behavior — review account-scoped activity baselines and behavior indicators.
- Security Posture — review daily scores, trends, and improvement actions.
- Reports and compliance — view, export, and send reports, then prepare evidence for review.
- Agent Jobs — monitor scheduled automation and inspect execution history.
- Access history — review access to account data when you have account-management permissions.
Before you begin
Your administrator must provision your account and at least one account membership. What you can see depends on your account access and management permissions. User Behavior, Agent Jobs, Account Settings, and Manage Accounts appear when your role permits them. Access history is available from Account Settings for account administrators and owners.
When you have access to more than one account, use Browse accounts in the header to open the account selector. Its hierarchy shows parent and child accounts; choosing an account opens its dashboard. The header also provides in-app notifications, theme controls, and your user menu. The notification list is scoped to the selected account and current sign-in session.
The app displays its version in the interface and release notes. This guide is written for 1.0.9. If your deployment shows another version, use its matching documentation set when available.