Operations | Monitoring | ITSM | DevOps | Cloud

December 2019 Update: User roles, App enhancements and Azure Sentinel integration

Our December update includes a new role model for users in a SIGNL4 team, great new app features and integration with Azure Sentinel. Two default user roles are now available in each SIGNL4 team: Administrator and User. This allows for restricting standard user rights versus administrative access. For existing teams, all users are migrated to administrators, i.e. you should check this role assignment and downgrade some team members to users yourself if necessary.

Storing and enriching alerts for information security with Elasticsearch

Within Elastic, the information security team is tasked with security detection and analytics, among many other activities of a typical information security team. To find abnormal and malicious behavior within our environment we leverage Elastic SIEM for investigations and threat hunting. When we find a pattern of behavior we want to be alerted on during an investigation or hunt we take the request JSON behind our investigation and put in to Watcher for alerting.

Tips for Modern NOCs - Alleviating Incident Routing Bottlenecks

Critical and sev1 incidents are always a priority, but what about those dozens and often hundreds of lower priority ones that often sit in a queue waiting for a first response engineer to get to them? Do you find that no matter how much effort your team puts into minimizing the number of queued incidents, their number always seems to grow? If this sounds familiar – this blog is for you.

Revisited: How to Run a 24×7 MSP

As 2019 comes to an end, OnPage would like to re-inform MSP teams about the value and importance of offering a 24×7 support service. Twenty-four seven support ensures that client issues are quickly resolved by an after-hours support team. Though 24×7 support is a must-have offering, MSPs must first re-work their internal workflows and policies, ensuring that after-hours servicing is a pain-free venture.

Learn Your Organization's Potential ROI With PagerDuty by Using IDC's Snapshot Tool

Recently, I wrote about an IDC business value study PagerDuty commissioned and shared some of the results from the research. In summary, after in-depth interviews with eight enterprise customers, IDC applied its proven business value methodology to the aggregated results of those interviews and found that enterprise customers were averaging a three-year return-on-investment (ROI) of 731% and a payback period (break-even point) on their investment in just 4.3 months.

50% cost-savings by automating alarm dispatching at Aquafin

Aquafin is a Belgian company with over 1,000 employees that was established by the Flemish Region in 1990 for the purpose of expanding, operating and pre-financing the wastewater treatment infrastructure in Flanders. Aquafin collects household wastewater from the municipal sewers and transports it to wastewater treatment plants, where it is treated in accordance with European and Flemish standards.

Why incident response automation is top-of-list for CISOs in 2020

When considering the state of critical incidents in 2019 – it’s no surprise that looking ahead to 2020, CISOs have one of the organization’s most challenging and stressful jobs. During the first half of the year alone 4.1 billion records were compromised, and the average cost of a data breach is now estimated at $3.92 million.