Question 1

Is SecuSIEM available?

Accepted Answer

Yes, SecuSIEM is available today in Beta, hosted 100% in Quebec.

Question 2

Which log formats are supported at ingestion?

Accepted Answer

Syslog RFC 3164/5424, plus K8s audit and custom JSON via collector.

Question 3

Does SecuSIEM replace Splunk or Microsoft Sentinel?

Accepted Answer

For most Quebec MSP and SMB use cases: yes. For volumes of several TB per day, contact us for sizing.

Question 4

Do my logs leave Canada?

Accepted Answer

No. Ingestion, storage, indexing, search and analysis of your logs run at OVH Beauharnois (Québec). The notifications you enable (email, Slack…) go through those channels' providers.

Question 5

How does SecuSIEM integrate with infrastructure monitoring?

Accepted Answer

Native pipeline: infrastructure monitoring anomalies (abnormal CPU spike, unexpected open port, suspicious process) are published as security events in SecuSIEM. Native logs + metrics correlation.

Question 6

Is there a multi-tenant MSP console?

Accepted Answer

Yes. Logical per-tenant isolation, client management, white-label branding, distributor billing with structural discount.

Question 7

What is the default retention?

Accepted Answer

Logs are retained and searchable in real time for 90 days by default; longer retention (up to 365 days) can be configured per client. Long-term archiving is on the roadmap.

Question 8

How do I contact the SecuSIEM team?

Accepted Answer

Via /contact or /en/comment-se-procurer.

Frequently asked questions about SecuSIEM