Component
Fleet Manager
Orchestrate sensor management from one pane of glass.
Manage hundreds of sensors in one place
Fleet Manager is a single, centralized platform that allows you to manage, configure, update, and apply baseline configurations to Corelight Sensors. Create configuration templates, define custom sensor groups, manage user roles and access levels, and assess managed sensor health across the enterprise—all from one pane of glass. Spend less time managing and tracking changes, and more time defending against attacks.
- Deploy packages and configurations from one UI
- Manage and configure Zeek®, IDS, YARA rules, and Performance and Asset Visibility modules.
- Control access with granular role-based user settings
- Define custom groups of sensors
- Apply custom configuration templates
Deploy configurations across your fleet in minutes
Customizable policy templates let you define sensor settings once and push them to individual sensors or your entire fleet from a single interface:
- Configure Zeek packages, Suricata IDS rulesets, Smart PCAP policies, and YARA rules
- Set network performance thresholds and asset classification settings
- Define input filters, export targets, and threat intelligence feeds
- Apply quick-start templates (North- South, East-West, Blended) to reduce policy creation time by up to 80%
- Push software upgrades and new Zeek packages with coordinated rollouts
Integrate your security ecosystem in minutes, not months
The Connector Framework eliminates custom scripts, manual feed imports, and standalone infrastructure by managing all third-party connections from a single interface.
- Connect to third-party platforms, including CrowdStrike, Microsoft Defender, SentinelOne, Tenable, and Axonius
- Natively ingest threat intelligence feeds from STIX/TAXII 2.1, GitHub, GitLab, or any HTTP/HTTPS endpoint
- Enrich network evidence with endpoint, vulnerability, and asset context in real time
Full visibility into fleet health — at a glance
Monitor your entire sensor environment from a single dashboard with actionable health indicators.
- Track Zeek log output rates, CPU and memory utilization, and traffic throughput across all sensors
- Drill into individual sensor metrics with one click
- Get immediate alerts for connectivity issues and available software upgrades
- Maintain a complete audit trail of all configuration changes and user actions for compliance
Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose
Corelight: A Must Have For Modern Network Security Monitoring
Streamlined management via the Fleet Manager is great. Hard to imagine going back to a home grown Zeek infrastructure after being able to update a Corelight sensor in 2 clicks and manage your policy for all sensors in one place..
IT Specialist, Government
Gartner® and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose
Network Monitoring And Security Of Geographically Diverse Environments
The Corelight Detection and fleet manager platform have enabled us to both secure and optimise our geographically distributed sites network traffic and identify suspect traffic, routes, configurations and devices within our environments.
Manager, Technical Security, Transportation
With Corelight Fleet Manager, you can assess the health and configuration of your sensors with at-a-glance dashboards.
Create custom policies & configuration templates and apply them to all managed sensors across your organization.
Establish and enforce granular role-based access controls while demonstrating compliance with auditable logs, orchestrate deployments of new features, and upgrade packages across managed Corelight Sensors.
Case study
Publicly-held energy company selects Corelight for better internal visibility & enhanced threat analysis
Download PDF
Case study
Top government agency uses network detection & response to improve visibility across diverse & ever-changing environments
Download PDF
Case study
Fortune 50 retailer consolidates security stack and saves $10M with virtual NDR
Download PDF
Maximize ROI with services and training from Corelight
Corelight Services and Training puts elite defense within reach by ensuring your team can maximize the value of our Open NDR Platform. From precision deployment and SIEM integration to activity-based training from world-class experts, our services provide the technical guidance needed to accelerate SOC maturity.
-
Accelerate implementation and time to value with health checks
-
Precision engineering for detection calibration and customization
-
Expert-led training and education services
