Summary

In this chapter, we covered how we monitor the Hadoop ecosystem. We started by covering general security parameters such as a few metrics that can be helpful in identifying system bottlenecks. We also looked at the basic rules for configuring monitoring and alerting systems are. In the security monitoring section, we talked about the SIEM system and how this system works. There are many tools on the market that have SIEM implementation and can be used as plug and play modules. Later in the chapter, we covered intrusion detection systems and intrusion prevention systems.