As an MSSP you can create a dedicated SIEM account for each logging account. This lets your customers access their data without the risk of accidentally seeing other customers’ data.
To do this:
-
Sign in to Logz.io as an administrator user.
-
Go to Settings > Manage accounts.
-
In the Plan Summary section, select Add sub account.
-
Give the new account a required name.
-
Select the required retention period for the account.
-
Select the required volume for the account. The default value is 1 GB.
-
Select the checkbox to enable the main account users to access this account.
-
Select the checkbox to make the account searchable from the main account.
-
If required, select the checkboxes to save the account utilization metrics and log size.
-
If required, add account names from which you want the new account to use dashboards, visualizations and saved searches.
-
-
Select Create.
-
Scroll down to Cloud SIEM plan.
-
Select Add security account.
-
Give the new account a required name
-
In the Enable Cloud SIEM on these accounts menu, select the account you created in the previous steps.
-
If required, add account names from which you want the new account to use dashboards, visualizations and saved searches.
-
-
Select Create.
-
Go to Cloud SIEM.
-
Click the account selection menu in the top right corner of the Summary screen.
-
Select the new account. It takes a few minutes to get the account set up.