- What's New
- Function Overview
- Service Overview
- Billing
- Getting Started
-
User Guide
- Buying SecMaster
- Authorizing SecMaster
- Viewing Security Overview
- Workspaces
- Viewing Purchased Resources
- Security Situation
- Resource Manager
- Risk Prevention
- Threat Operations
- Security Orchestration
-
Playbook Overview
- Ransomware Incident Response Solution
- Attack Link Analysis Alert Notification
- HSS Isolation and Killing of Malware
- Automatic Renaming of Alert Names
- Auto High-Risk Vulnerability Notification
- Automatic Notification of High-Risk Alerts
- Auto Blocking for High-risk Alerts
- Real-time Notification of Critical Organization and Management Operations
-
Settings
- Data Integration
-
Log Data Collection
- Data Collection Overview
- Adding a Node
- Configuring a Component
- Adding a Connection
- Creating and Editing a Parser
- Adding and Editing a Collection Channel
- Managing Connections
- Managing Parsers
- Managing Collection Channels
- Viewing Collection Nodes
- Managing Nodes and Components
- Partitioning a Disk
- Logstash Configuration Description
- Connector Rules
- Parser Rules
- Upgrading the Component Controller
- Customizing Directories
- Permissions Management
- Key Operations Recorded by CTS
-
Best Practices
-
Log Access and Transfer Operation Guide
- Solution Overview
- Resource Planning
- Process Flow
-
Procedure
- (Optional) Step 1: Buy an ECS
- (Optional) Step 2: Buy a Data Disk
- (Optional) Step 3: Attach a Data Disk
- Step 4: Create a Non-administrator IAM User
- Step 5: Configure Network Connection
- Step 6: Install the Component Controller (isap-agent)
- Step 7: Install the Log Collection Component (Logstash)
- (Optional) Step 8: Creating a Log Storage Pipeline
- Step 9: Configure a Connector
- (Optional) Step 10: Configure a Log Parser
- Step 11: Configure a Log Collection Channel
- Step 12: Verify Log Access and Transfer
- Credential Leakage Response Solution
-
Log Access and Transfer Operation Guide
-
API Reference
- Before You Start
- API Overview
- Calling APIs
-
API
- Alert Management
- Incident Management
- Indicator Management
- Playbook Management
- Alert Rule Management
- Playbook Version Management
- Playbook Rule Management
- Playbook Instance Management
- Playbook Approval Management
- Playbook Action Management
- Incident Relationship Management
- Data Class Management
- Workflow Management
- Data Space Management
- Pipelines
- Workspace Management
- Metering and Billing
- Metric Query
- Baseline Inspection
- Appendix
- FAQs
SecMaster and Other Services
This topic describes SecMaster and its linked services.
Security Services
SecMaster obtains necessary security incident records from other security services such as Host Security Service (HSS), Web Application Firewall (WAF), and Anti-DDoS. SecMaster then uses big data mining and machine learning to intelligently analyze and identify attacks and intrusions, helping you understand the attack and intrusion processes. SecMaster also provides protective measures for you. For more details, see What Are the Dependencies and Differences Between SecMaster and Other Security Services?
Elastic Cloud Server (ECS)
SecMaster detects threats to your ECSs with linked service HSS, comprehensively displays ECS security risks, and provides protection suggestions.
Cloud Trace Service (CTS)
CTS generates traces to enable you to get a history of operations performed on SecMaster, allowing you to query, audit, and backtrack resource operation requests initiated from the management console as well as the responses to those requests.
CTS is used to record the operations you have performed on SecMaster for later querying, auditing, or backtracking.
Cloud Eye
Cloud Eye is a comprehensive platform to monitor a variety of cloud resources such as ECS and bandwidth usage. You can learn SecMaster indicators in a timely manner and respond to alerts in a timely manner to ensure smooth service running. For details, see the Cloud Eye User Guide.
TMS
Tag Management Service (TMS) is a visualization service that allows you to quickly and centrally manage tags, helping you manage workspace instances by tag.
Operation |
Resource Type |
Incident Name |
---|---|---|
Querying the resource instance list |
Workspace |
listResourceInstance |
Querying the number of resource instances |
Workspace |
countResourceInstance |
Batch querying resource tags |
Tag |
batchTagResources |
Batch deleting resource tags |
Tag |
batchUntagResources |
Querying project tags |
Tag |
listProjectTag |
Updating a tag value |
Tag |
updateTagValue |
Querying resource tags |
Tag |
listResourceTag |
Enterprise Management
You can manage multiple projects in an enterprise, separately settle their costs, and assign different personnel for them. A project can be started or stopped independently without affecting others. With Enterprise Management, you can easily manage your projects after creating an enterprise project for each of them.
SecMaster supports enterprise management. You can manage resources on SecMaster by enterprise project and set user permissions for each enterprise project.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.