Security Onion can be installed as a standalone, single VM, or in a distributed grid. Additionally, a single VM evaluation install mode is available for learning Security Onion, as well as an import install mode for analyzing past events. The all new Security Onion Console provides a consistent interface for viewing events, escalating alerts, and drilling down into associated PCAP traffic. Aggregate your platform logs into Security Onion for a comprehensive, security-focused view into activity within your infrastructure. Note that free community-based support for Security Onion is offered via our discussion forum. Premium support is available for purchase separately.