As we expand our number of LEM appliances I am finding I need a method for centralized management and I am curious what the best way to do this would be? We are a solution provider that implements these appliances for our clients so this will continue to be a growing problem as long as we use LEM as our SIEM solution.
I understand that it's possible to use one console to manage multiple managers; however, I have not found a good place where this is documented. I would like to know what the capabilities are, what the limitations are, what the security implications are (is the data encrypted, etc) and what the network requirements are for the communications are. Does the document for that exist and where might I find it (I should note that I did actually look for this documentation but was unable to find it)?
I know I had discussed some of this a while back with colby but I was unable to find that thread.
Thanks in advance for any help on this!