The client intends to update a software-supported security information and event management system (SIEM) while sizing and installing a new system. The new system must be implemented with Elasticserach, Logstash and Kibana products and must be fully licensed. The SIEM must be set up and put into operation in the client's data center, and be appropriately sized to ensure high-performance operation. Further requirements are described in the scope of services in the service description.

-This invitation to tender replaces the repealed invitation to tender (OJ EU 2021/S 241-634766). In the present tender, the purchase of the licenses is designed as a subscription model.

-The existing system is to be updated and a new system is to be dimensioned and installed in the process.

-The existing connections to the Logstash servers are to be validated and optimized within the project.

-The Security Information and Event Management System (SIEM) must be set up and put into operation in the client's data center.

-The new system must be implemented with Elasticsearch, Logstash and Kibana products and must be fully licensed.

-The solution must be able to detect, graph and alert anomalies on its own through machine learning mechanisms.

-The recorded log data must be able to be stored for at least 90 days.

-The system is configured for uninterrupted operation

-The system must be appropriately sized to ensure high-performance operation (see section 3.3.1 of the service description)

-Cisco AMP virus protection is installed on all servers (license is available at the client, installation is carried out by the client).

-Additional requirements are described in the scope of services in the service description.