Integrating McAfee SIEM with Apache Nifi Video 2/3

In this second video, I will show how to create a workflow blueprint. The workflow created, does the following steps:

1. Collect information from twitter and filter them by some keywords, in order to do this certain credentials must be obtained from the twitter api (Consumer secret and access token secret), the sensible information is not shown on the video.
2. Next step is pull key attributes, from the twitter json string, so we don't have to deal with the information we are not interested in, in this example I am extracting user name, language used and message information.
3. Next, we check that it is in fact a twitter message and if so we route the information to the next step.
4. Next , the traffic flow is transformed into a json string
5. Last step is to send the information as the message string of a syslog event to the receiver.

In the SIEM receiver we create a Data Source and log the unknown syslog information as unknown, in the next post I will create a parser so the information will be correctly parsed.