I need some good recommendations on a SIEM/log management solution

Posted by LonelyDilo@reddit | sysadmin | View on Reddit | 9 comments

I have set up a Syslog server on my Raspberry Pi 5 that's running Ubuntu 24.04. It receives logs in RFC 3164 format from 160 remote firewalls and stores them locally. Is there an open-source SIEM application I can run on my Pi that will take my locally stored logs, perform data/security analysis, find trends and anomalies, and present it all in a nice graphical interface? I need the SIEM solution to be easy to set up and maintain because I have to turn it over to my boss, who is less technically inclined than me.

Please let me know if I'm asking for too much. I don't know if there are applications that are this convenient. I thought I might need to make a more complex setup, such as running multiple servers in containers with docker or proxmox.