SIEM - nself-org/plugins GitHub Wiki
Forward nSelf audit logs and security events to external SIEM platforms: Datadog, Splunk HEC, Elastic, Loki, and custom webhooks. Free — MIT licensed.
nself plugin install siemNo license key required.
Forward nSelf audit logs and security events to external SIEM platforms: Datadog, Splunk HEC, Elastic, Loki, and custom webhooks. OCSF/ECS schema normalization. ɳSelf+ required for external destinations.
Category: infrastructure. Current version: 1.1.2.
| Env Var | Default | Description |
|---|---|---|
DATABASE_URL |
(required) |
PostgreSQL connection string |
NSELF_SIEM |
- |
- |
NSELF_SIEM_HF |
- |
- |
NSELF_SIEM_DEFAULT_SCHEMA |
- |
- |
NSELF_SIEM_BATCH_SIZE |
- |
- |
NSELF_SIEM_FLUSH_INTERVAL |
- |
- |
NSELF_SIEM_LOKI_URL |
- |
- |
SIEM_PORT |
8002 |
- |
LOG_LEVEL |
- |
- |
| Port | Purpose |
|---|---|
| 8002 | SIEM service port |
2 table(s) added to your Postgres database:
np_siem_destinationsnp_siem_ship_log
GET /health
GET /siem/destinations
POST /siem/destinations
DELETE /siem/destinations/{id}
PATCH /siem/destinations/{id}
GET /siem/destinations/{id}/ship-log
POST /siem/destinations/{id}/test
POST /siem/flush
GET /siem/status
curl http://localhost:8002/healthManifest: plugins/siem/plugin.json
- Plugin-Marketplace — full plugin index
- Plugin-Development — write your own plugin
← Home →