Log Monitoring
This Includes Enrichment, Analysis, and Reporting.
It is expected that this function out of scope for ONAP. A CSP / MNO will make used of a SIEM.
ONAP's role is to provide a means to export security event data. This is where analytics are stored and applied to the data the is ingested from ONAP.
Presentation by Fabian pertaining to Analysis: ONAP Logs Security Managment1.pptx