Data Services and Integration Layer
The data services and integration layer is a set of four HCP modules that provides different features for different SOC personas.
HCP provides four modules for the integration layer.
- Security data vault
-
Stores the data in HDFS.
- Search portal
-
The Metron dashboard.
- Provisioning, management, and monitoring tool
-
An HCP-provided management module that expedites provisioning and managing sensors. Other provisioning, management, and monitoring functions are supported through Apache Ambari.
- Alert tool
- An HCP-provided monitoring module that collects alert information and enables you to evaluate the severity of the violation and manage it accordingly.