Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to get some real-world feedback on OSSIM.

Are you using OSSIM in production?

If so, what has your overall experiance been?

How many nodes are in your enviroment?

Finally, what kind of bandwidth are you monitoring?



share|improve this question
up vote 2 down vote accepted

While I don't use OSSIM in an enterprise, here's some feedback I read recently on whether or not OSSIM is "enterprise ready"

This was in a response to OSSIM's post:

And yet another post related to the thread from Anton Chuvakin:

From what I have read in all of that, it would seem (SIEM?) the product has some potential but some analysts don't think it's there yet. On the other hand, Dominic at alienvault/OSSIM mentioned some examples of large enterprises successfully using OSSIM in their environment.

Hope that helps or provides you with some more information to chew on. Good luck!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.