Skip to main content

SAF

Getting Started

OverviewSAF architecture, components, and capabilities Getting StartedLogin, data upload, first search and alert What's NewChanges and improvements in recent releases FAQAnswers to frequently asked questions GlossarySAF terms and definitions

Data Operations

SearchSearch queries, alerts, and search jobs DashboardsVisualizations, panels, filters, and drilldown REST APIProgrammatic access to platform features MigrationsData and configuration migration

Language BasicsQuery syntax and core concepts Command ReferenceAll SAFL commands with examples

ModulesAll platform modules: purpose, installation, usage Content ManagementUploading and updating module content

SettingsSecurity, roles, certificates, snapshots Getting Data InPipelines, index preparation, data loading System ComponentsManaging cluster components ManagementCluster, replicas, ISM policies Search AnywhereConnections to external storages AutomationAnsible and routine operations TroubleshootingDiagnostics and problem solving

InstallationDeploying SAF components UpgradeUpgrading the platform and components OS ActionsOperating system setup and maintenance

6.2
6.1
6.0
5.3
5.2
5.1
5.0
4.3

SAF

SAF Modules
System Search Patterns
Core Components
Functional modules
Content modules
Partner Modules
Content management

Functional modules

Version: 6.2

Functional modules

Cyber Security
Incident Manager
Inventory
Lighthouse
MITRE ATT&CK
UBA

Identification Rules

Service Monitor Toolkit

Search Anywhere Framework

LinkedIn Contact us

© SAF Systems LLC, 2026. All rights reserved.

Changelog Pricing Privacy Legal information