GBDI 4.2

GBDI Overview

GBDI is a system for storing, managing and providing access to security data and events. It is a cloud-based Big Data system running on clouds or on-prem utilizing object stores for long term retention. The system has built-in analytics, search, and machine learning capabilities. Data can be ingested using a variety of methods including syslog, Logstash, CSV files and more.

This section provides an overview of the GBDI system, including a high-level view of the system architecture, and a description of the data model.