Where this collector family fits
These collectors help an evaluation use security data already held in search, observability, data, streaming, and logging platforms. They are useful when Nova must complement an existing data estate instead of replacing it.
- Existing SIEM and search data
- Operational and security logs
- Streaming security records
Supported collectors in this family
Nova currently implements 6 collectors in this family. Each entry names the source and the customer outcome it supports.
- Datadog Logs
- Brings Datadog Logs activity into Nova for security monitoring, investigation, and audit review.
- Elastic Fleet Agents
- Keeps Elastic Fleet Agents current in Nova for inventory, ownership, exposure, and security-posture review.
- Elasticsearch Query
- Brings Elasticsearch Query activity into Nova for security monitoring, investigation, and audit review.
- Kafka Security Logs
- Brings Kafka Security Logs activity into Nova for security monitoring, investigation, and audit review.
- Snowflake Audit Logs
- Brings Snowflake Audit Logs activity into Nova for security monitoring, investigation, and audit review.
- Splunk Search
- Brings Splunk Search activity into Nova for security monitoring, investigation, and audit review.
How the evidence supports customer work
Nova keeps collected data linked to its source as it is used for asset inventory, cloud security, detection, investigation or Threat Hunting. Collecting data does not by itself prove a threat or authorize a response action.
Source coverage is not assumed to be complete. Nova keeps collection health, freshness, gaps, and partial results visible so teams can judge whether the evidence is suitable for the decision at hand.
Questions to answer during evaluation
- Which named sources are required for the use case, and which are optional context?
- What history, accounts, subscriptions, organizations, projects, or devices are available to the source product?
- What delay, volume, and missing-data conditions are acceptable for the intended decision?
- Which customer team owns source access, data interpretation, and ongoing health review?