

            <!doctype html>
<html class="no-js"
      lang="en">

    
    <head>
        <meta charset="utf-8"/>
        <meta http-equiv="x-ua-compatible"
              content="ie=edge">
        <meta name="viewport"
              content="width=device-width, initial-scale=1"/>
        <meta name="theme-base-url"
              content="/docs/_/7F0000010170782D37AE5FDD0C5777E7/1668635884103">
        <meta id="atlassian-token"
              name="atlassian-token"
              content="b9e7700176bcdbcd38512e093a8fdf992812f86d"/>
        <meta name="atl_token"
              content="b9e7700176bcdbcd38512e093a8fdf992812f86d"/>
        <meta name="ajs-page-id"
              content="5834061"/>
        <meta name="ajs-parent-page-id"
              content="$page.parent.id">
        <meta name="ajs-space-key"
              content="DOCS">
        <meta name="Help Center Version"
              content="1.0" />
                <meta id="confluence-base-url" name="confluence-base-url" content="https://docs.logrhythm.com">
<meta id="ajs-static-resource-url-prefix" name="ajs-static-resource-url-prefix" content="/s/-dv5hlh/8703/51k4y0/_">
<meta id="confluence-context-path" name="confluence-context-path" content="">
<meta id="ajs-enabled-dark-features" name="ajs-enabled-dark-features" content="site-wide.shared-drafts,site-wide.synchrony,clc.quick.create,confluence.view.edit.transition,cql.search.screen,confluence-inline-comments-resolved,http.session.registrar,frontend.editor.v4,nps.survey.inline.dialog,confluence.efi.onboarding.new.templates,frontend.editor.v4.compatibility,atlassian.cdn.static.assets,pdf-preview,previews.sharing,previews.versions,file-annotations,collaborative-audit-log,confluence.efi.onboarding.rich.space.content,confluence.reindex.improvements,previews.conversion-service,editor.ajax.save,graphql,read.only.mode,previews.trigger-all-file-types,lucene.caching.filter,attachment.extracted.text.extractor,confluence.table.resizable,notification.batch,previews.sharing.pushstate,tc.tacca.dacca,confluence-inline-comments-rich-editor,site-wide.synchrony.opt-in,file-annotations.likes,gatekeeper-ui-v2,v2.content.name.searcher,mobile.supported.version,pulp,confluence-inline-comments,quick-reload-inline-comments-flags,confluence-inline-comments-dangling-comment">
<meta id="ajs-context-path" name="ajs-context-path" content="">
<meta id="ajs-base-url" name="ajs-base-url" content="https://docs.logrhythm.com">
<meta id="ajs-user-locale" name="ajs-user-locale" content="en_US">


                    <meta name="scrollSearch" content="false"/>
        
                
        <script>
window.WRM=window.WRM||{};window.WRM._unparsedData=window.WRM._unparsedData||{};window.WRM._unparsedErrors=window.WRM._unparsedErrors||{};
WRM._unparsedData["com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path"]="\u0022\u0022";
WRM._unparsedData["com.atlassian.confluence.plugins.confluence-feature-discovery-plugin:confluence-feature-discovery-plugin-resources.test-mode"]="false";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-help-paths"]="{\u0022entries\u0022:{\u0022applinks.docs.root\u0022:\u0022https://confluence.atlassian.com/display/APPLINKS-072/\u0022,\u0022applinks.docs.diagnostics.troubleshoot.sslunmatched\u0022:\u0022SSL+and+application+link+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthsignatureinvalid\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthtimestamprefused\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.delete.entity.link\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.adding.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.administration.guide\u0022:\u0022Application+Links+Documentation\u0022,\u0022applinks.docs.oauth.security\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.troubleshoot.application.links\u0022:\u0022Troubleshoot+application+links\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unknownerror\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.trusted.apps\u0022:\u0022Configuring+Trusted+Applications+authentication+for+an+application+link\u0022,\u0022applinks.docs.diagnostics.troubleshoot.authlevelunsupported\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.ssluntrusted\u0022:\u0022SSL+and+application+link+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unknownhost\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.delete.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.adding.project.link\u0022:\u0022Configuring+Project+links+across+Applications\u0022,\u0022applinks.docs.link.applications\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthproblem\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.migration\u0022:\u0022Update+application+links+to+use+OAuth\u0022,\u0022applinks.docs.relocate.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.administering.entity.links\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.upgrade.application.link\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.diagnostics.troubleshoot.connectionrefused\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.oauth\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.insufficient.remote.permission\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.configuring.application.link.auth\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.diagnostics\u0022:\u0022Application+links+diagnostics\u0022,\u0022applinks.docs.configured.authentication.types\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.adding.entity.link\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unexpectedresponse\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.basic\u0022:\u0022Configuring+Basic+HTTP+Authentication+for+an+Application+Link\u0022,\u0022applinks.docs.diagnostics.troubleshoot.authlevelmismatch\u0022:\u0022OAuth+troubleshooting+guide\u0022}}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-types"]="{\u0022crowd\u0022:\u0022Crowd\u0022,\u0022confluence\u0022:\u0022Confluence\u0022,\u0022fecru\u0022:\u0022FishEye / Crucible\u0022,\u0022stash\u0022:\u0022Stash\u0022,\u0022jira\u0022:\u0022Jira\u0022,\u0022refapp\u0022:\u0022Reference Application\u0022,\u0022bamboo\u0022:\u0022Bamboo\u0022,\u0022generic\u0022:\u0022Generic Application\u0022}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.entity-types"]="{\u0022singular\u0022:{\u0022refapp.charlie\u0022:\u0022Charlie\u0022,\u0022fecru.project\u0022:\u0022Crucible Project\u0022,\u0022fecru.repository\u0022:\u0022FishEye Repository\u0022,\u0022stash.project\u0022:\u0022Stash Project\u0022,\u0022generic.entity\u0022:\u0022Generic Project\u0022,\u0022confluence.space\u0022:\u0022Confluence Space\u0022,\u0022bamboo.project\u0022:\u0022Bamboo Project\u0022,\u0022jira.project\u0022:\u0022Jira Project\u0022},\u0022plural\u0022:{\u0022refapp.charlie\u0022:\u0022Charlies\u0022,\u0022fecru.project\u0022:\u0022Crucible Projects\u0022,\u0022fecru.repository\u0022:\u0022FishEye Repositories\u0022,\u0022stash.project\u0022:\u0022Stash Projects\u0022,\u0022generic.entity\u0022:\u0022Generic Projects\u0022,\u0022confluence.space\u0022:\u0022Confluence Spaces\u0022,\u0022bamboo.project\u0022:\u0022Bamboo Projects\u0022,\u0022jira.project\u0022:\u0022Jira Projects\u0022}}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.authentication-types"]="{\u0022com.atlassian.applinks.api.auth.types.BasicAuthenticationProvider\u0022:\u0022Basic Access\u0022,\u0022com.atlassian.applinks.api.auth.types.TrustedAppsAuthenticationProvider\u0022:\u0022Trusted Applications\u0022,\u0022com.atlassian.applinks.api.auth.types.CorsAuthenticationProvider\u0022:\u0022CORS\u0022,\u0022com.atlassian.applinks.api.auth.types.OAuthAuthenticationProvider\u0022:\u0022OAuth\u0022,\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthAuthenticationProvider\u0022:\u0022OAuth\u0022,\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthWithImpersonationAuthenticationProvider\u0022:\u0022OAuth\u0022}";
if(window.WRM._dataArrived)window.WRM._dataArrived();</script>
<script type="text/javascript" src="/s/654347ecda6da3a2888b358b2066dc21-CDN/-dv5hlh/8703/51k4y0/08c5dc0bfd0b71a003e20c6dbd501537/_/download/contextbatch/js/_super/batch.js?locale=en-US" data-wrm-key="_super" data-wrm-batch-type="context" data-initially-rendered></script>
<script type="text/javascript" src="/s/e3f0b4a66bec607e65a72c6ebddb3d54-CDN/-dv5hlh/8703/51k4y0/236bdd6ac7c74a841c289f2a0db31c08/_/download/contextbatch/js/viewcontent,-_super/batch.js?highlightactions=true&amp;locale=en-US" data-wrm-key="viewcontent,-_super" data-wrm-batch-type="context" data-initially-rendered></script>
<script type="text/javascript" src="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/11.4.6/_/download/batch/confluence.extra.jira:amd-support/confluence.extra.jira:amd-support.js" data-wrm-key="confluence.extra.jira:amd-support" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/7.2.11/_/download/batch/com.atlassian.applinks.applinks-plugin:lodash-amd/com.atlassian.applinks.applinks-plugin:lodash-amd.js" data-wrm-key="com.atlassian.applinks.applinks-plugin:lodash-amd" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/7.2.11/_/download/batch/com.atlassian.applinks.applinks-plugin:applinks-lib/com.atlassian.applinks.applinks-plugin:applinks-lib.js" data-wrm-key="com.atlassian.applinks.applinks-plugin:applinks-lib" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/7.2.11/_/download/batch/com.atlassian.applinks.applinks-plugin:applinks-common-exported/com.atlassian.applinks.applinks-plugin:applinks-common-exported.js?locale=en-US" data-wrm-key="com.atlassian.applinks.applinks-plugin:applinks-common-exported" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_aui.core/com.atlassian.auiplugin:split_aui.core.js?locale=en-US" data-wrm-key="com.atlassian.auiplugin:split_aui.core" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/7.2.11/_/download/batch/com.atlassian.applinks.applinks-plugin:applinks-util-js/com.atlassian.applinks.applinks-plugin:applinks-util-js.js?locale=en-US" data-wrm-key="com.atlassian.applinks.applinks-plugin:applinks-util-js" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/7.2.11/_/download/batch/com.atlassian.applinks.applinks-plugin:feature-oauth-dance/com.atlassian.applinks.applinks-plugin:feature-oauth-dance.js?locale=en-US" data-wrm-key="com.atlassian.applinks.applinks-plugin:feature-oauth-dance" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/7.2.11/_/download/batch/com.atlassian.applinks.applinks-plugin:applinks-oauth-ui/com.atlassian.applinks.applinks-plugin:applinks-oauth-ui.js" data-wrm-key="com.atlassian.applinks.applinks-plugin:applinks-oauth-ui" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/11.4.6/_/download/batch/confluence.extra.jira:common/confluence.extra.jira:common.js?locale=en-US" data-wrm-key="confluence.extra.jira:common" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/11.4.6/_/download/batch/confluence.extra.jira:jira-issues-view-mode-async-resource/confluence.extra.jira:jira-issues-view-mode-async-resource.js" data-wrm-key="confluence.extra.jira:jira-issues-view-mode-async-resource" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_aui.page.iconography/com.atlassian.auiplugin:split_aui.page.iconography.js?locale=en-US" data-wrm-key="com.atlassian.auiplugin:split_aui.page.iconography" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/11.4.6/_/download/batch/confluence.extra.jira:jira-issues-view-mode-resources/confluence.extra.jira:jira-issues-view-mode-resources.js?locale=en-US" data-wrm-key="confluence.extra.jira:jira-issues-view-mode-resources" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/11.4.6/_/download/batch/confluence.extra.jira:web-resources/confluence.extra.jira:web-resources.js?locale=en-US" data-wrm-key="confluence.extra.jira:web-resources" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/11.2.3/_/download/batch/com.atlassian.confluence.plugins.confluence-previews:mediaviewer-core/com.atlassian.confluence.plugins.confluence-previews:mediaviewer-core.js" data-wrm-key="com.atlassian.confluence.plugins.confluence-previews:mediaviewer-core" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/7.13.7/_/download/batch/com.atlassian.confluence.plugins.confluence-frontend:split_vendors~moment/com.atlassian.confluence.plugins.confluence-frontend:split_vendors~moment.js?locale=en-US" data-wrm-key="com.atlassian.confluence.plugins.confluence-frontend:split_vendors~moment" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/7.13.7/_/download/batch/com.atlassian.confluence.plugins.confluence-frontend:split_moment/com.atlassian.confluence.plugins.confluence-frontend:split_moment.js?locale=en-US" data-wrm-key="com.atlassian.confluence.plugins.confluence-frontend:split_moment" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/1.0/_/download/batch/confluence.web.resources:date-time-formatting/confluence.web.resources:date-time-formatting.js?locale=en-US" data-wrm-key="confluence.web.resources:date-time-formatting" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/11.2.3/_/download/batch/com.atlassian.confluence.plugins.confluence-previews:confluence-previews-js/com.atlassian.confluence.plugins.confluence-previews:confluence-previews-js.js?locale=en-US" data-wrm-key="com.atlassian.confluence.plugins.confluence-previews:confluence-previews-js" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_aui.splitchunk.vendors--c7d6d1dc80/com.atlassian.auiplugin:split_aui.splitchunk.vendors--c7d6d1dc80.js?locale=en-US" data-wrm-key="com.atlassian.auiplugin:split_aui.splitchunk.vendors--c7d6d1dc80" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_jquery.ui.position/com.atlassian.auiplugin:split_jquery.ui.position.js?locale=en-US" data-wrm-key="com.atlassian.auiplugin:split_jquery.ui.position" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_aui.splitchunk.vendors--825acd7236/com.atlassian.auiplugin:split_aui.splitchunk.vendors--825acd7236.js?locale=en-US" data-wrm-key="com.atlassian.auiplugin:split_aui.splitchunk.vendors--825acd7236" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_jquery.ui.droppable/com.atlassian.auiplugin:split_jquery.ui.droppable.js?locale=en-US" data-wrm-key="com.atlassian.auiplugin:split_jquery.ui.droppable" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_aui.splitchunk.vendors--85718a7eef/com.atlassian.auiplugin:split_aui.splitchunk.vendors--85718a7eef.js?locale=en-US" data-wrm-key="com.atlassian.auiplugin:split_aui.splitchunk.vendors--85718a7eef" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_jquery.ui.resizable/com.atlassian.auiplugin:split_jquery.ui.resizable.js?locale=en-US" data-wrm-key="com.atlassian.auiplugin:split_jquery.ui.resizable" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_aui.splitchunk.vendors--7c76061134/com.atlassian.auiplugin:split_aui.splitchunk.vendors--7c76061134.js?locale=en-US" data-wrm-key="com.atlassian.auiplugin:split_aui.splitchunk.vendors--7c76061134" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_jquery.ui.selectable/com.atlassian.auiplugin:split_jquery.ui.selectable.js?locale=en-US" data-wrm-key="com.atlassian.auiplugin:split_jquery.ui.selectable" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/bd5c7217682192a23874a9cd63bfee02-CDN/-dv5hlh/8703/51k4y0/11.2.3/_/download/batch/com.atlassian.confluence.plugins.confluence-previews:annotation-plugin/com.atlassian.confluence.plugins.confluence-previews:annotation-plugin.js?locale=en-US" data-wrm-key="com.atlassian.confluence.plugins.confluence-previews:annotation-plugin" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/11.2.3/_/download/batch/com.atlassian.confluence.plugins.confluence-previews:minimode-plugin/com.atlassian.confluence.plugins.confluence-previews:minimode-plugin.js" data-wrm-key="com.atlassian.confluence.plugins.confluence-previews:minimode-plugin" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/7.13.7/_/download/batch/com.atlassian.confluence.plugins.drag-and-drop:plupload/com.atlassian.confluence.plugins.drag-and-drop:plupload.js" data-wrm-key="com.atlassian.confluence.plugins.drag-and-drop:plupload" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/bd5c7217682192a23874a9cd63bfee02-CDN/-dv5hlh/8703/51k4y0/11.2.3/_/download/batch/com.atlassian.confluence.plugins.confluence-previews:upload-plugin/com.atlassian.confluence.plugins.confluence-previews:upload-plugin.js?locale=en-US" data-wrm-key="com.atlassian.confluence.plugins.confluence-previews:upload-plugin" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/bd5c7217682192a23874a9cd63bfee02-CDN/-dv5hlh/8703/51k4y0/11.2.3/_/download/batch/com.atlassian.confluence.plugins.confluence-previews:version-navigation-plugin/com.atlassian.confluence.plugins.confluence-previews:version-navigation-plugin.js?locale=en-US" data-wrm-key="com.atlassian.confluence.plugins.confluence-previews:version-navigation-plugin" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/11.2.3/_/download/batch/com.atlassian.confluence.plugins.confluence-previews:permalink-plugin/com.atlassian.confluence.plugins.confluence-previews:permalink-plugin.js?locale=en-US" data-wrm-key="com.atlassian.confluence.plugins.confluence-previews:permalink-plugin" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/bd5c7217682192a23874a9cd63bfee02-CDN/-dv5hlh/8703/51k4y0/11.2.3/_/download/batch/com.atlassian.confluence.plugins.confluence-previews:feature-discovery-plugin/com.atlassian.confluence.plugins.confluence-previews:feature-discovery-plugin.js?locale=en-US" data-wrm-key="com.atlassian.confluence.plugins.confluence-previews:feature-discovery-plugin" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/1c34317973aefbd69960b896967647a9-CDN/-dv5hlh/8703/51k4y0/17.13.5/_/download/batch/com.atlassian.confluence.plugins.share-page:share-dialog-service/com.atlassian.confluence.plugins.share-page:share-dialog-service.js?locale=en-US" data-wrm-key="com.atlassian.confluence.plugins.share-page:share-dialog-service" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/bd5c7217682192a23874a9cd63bfee02-CDN/-dv5hlh/8703/51k4y0/11.2.3/_/download/batch/com.atlassian.confluence.plugins.confluence-previews:share-plugin/com.atlassian.confluence.plugins.confluence-previews:share-plugin.js?locale=en-US" data-wrm-key="com.atlassian.confluence.plugins.confluence-previews:share-plugin" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/2.20.5/_/download/batch/com.k15t.scroll.scroll-viewport:resource-editor-resource-omitter/com.k15t.scroll.scroll-viewport:resource-editor-resource-omitter.js" data-wrm-key="com.k15t.scroll.scroll-viewport:resource-editor-resource-omitter" data-wrm-batch-type="resource" data-initially-rendered></script>
<script type="text/javascript" src="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/2.20.5/_/download/batch/com.k15t.scroll.scroll-viewport:resource-quick-reload-manager-disabler/com.k15t.scroll.scroll-viewport:resource-quick-reload-manager-disabler.js" data-wrm-key="com.k15t.scroll.scroll-viewport:resource-quick-reload-manager-disabler" data-wrm-batch-type="resource" data-initially-rendered></script>
 
                        <link rel="shortcut icon"
              href="/docs/_/7F0000010170782D37AE5FDD0C5777E7/1668635884103/LogRhythm_image_SquareCanvas.jpg">

        <script>
            var hasCookieNotice = false;
            var usesCookieOptInStrategy = true;

            function hasSiteViewerGivenConsentForTracking() {
                try {
                    return document.cookie.indexOf('shc-cookies=enabled') > -1;
                } catch (e) {
                    return false;
                }
            }

            function hasSiteViewerRefusedConsentForTracking() {
                try {
                    return document.cookie.indexOf('shc-cookies=disabled') > -1;
                } catch (e) {
                    return false;
                }
            }

            function areCookiesEnabled() {
                // Customer did not activate cookie notice, so we can track the site viewer.
                if (!hasCookieNotice) {
                    return true;
                }

                // Customer did activate cookie notice, but has chosen the opt in strategy.
                if (usesCookieOptInStrategy) {
                    // If the site viewer gave consent, we can enable tracking.
                    if (hasSiteViewerGivenConsentForTracking()) {
                        return true;
                    }
                } else {
                    // Customer has chosen the opt out flow, so we have to ask for consent.
                    if (!hasSiteViewerRefusedConsentForTracking()) {
                        return true;
                    }
                }

                return false;
            }

            var contextPath = '';

            window.scrollHelpCenter = {
                currentPage: {
                    confluenceLink: "/pages/viewpage.action?pageId=5834061"
                },
                disableGATracking: '',
                excludePageLabels: ["scroll-help-center-exclude-page", "scroll-help-center-sitemap", "scroll-help-center-sitemap-index"],
                hasCookieNotice: false,
                areCookiesEnabled: areCookiesEnabled(),
                isLoggedInUser: false,
                isPortal: true,
                viewportLink: "/docs",
            isInAppHelp: false            }
        </script>
                    

    <script>
    var disableGATracking = '';
</script>


    <script>
        disableGATracking = 'ga-disable-UA-3420049-9';
        window.scrollHelpCenter.disableGATracking = disableGATracking;
    </script>

            <script>
                                    if (document.cookie.indexOf('shc-cookies=enabled') === -1) {
                document.cookie = disableGATracking + '=true;path=/;expires=365';
                window['ga-disable-UA-3420049-9'] = true;
            }
        </script>
            <!-- Global site tag (gtag.js) - Google Analytics -->
        <script async src="https://www.googletagmanager.com/gtag/js?id=UA-3420049-9"></script>
        <script>
            if (document.cookie.indexOf("shc-cookies=enabled") > -1 || !window.scrollHelpCenter.hasCookieNotice) {
                window.dataLayer = window.dataLayer || [];
                function gtag() {
                    dataLayer.push(arguments);
                }
                gtag('js', new Date());
                gtag('config', 'UA-3420049-9', { 'anonymize_ip': true });
            }
        </script>
                            
    <script>
        disableGATracking = 'ga-disable-UA-3420049-9';
        window.scrollHelpCenter.disableGATracking = disableGATracking;
    </script>

            <script>
                                    if (document.cookie.indexOf('shc-cookies=enabled') === -1) {
                document.cookie = disableGATracking + '=true;path=/;expires=365';
                window['ga-disable-UA-3420049-9'] = true;
            }
        </script>
            <!-- Google Analytics -->
        <script>
            if (document.cookie.indexOf("shc-cookies=enabled") > -1 || !window.scrollHelpCenter.hasCookieNotice) {
                (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
                    (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
                        m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
                })(window,document,'script','https://www.google-analytics.com/analytics.js','ga');

                ga('create', 'UA-3420049-9', 'auto');
                ga('send', 'pageview');
            }
        </script>
        <!-- End Google Analytics -->
    
        
        <script>
window.WRM=window.WRM||{};window.WRM._unparsedData=window.WRM._unparsedData||{};window.WRM._unparsedErrors=window.WRM._unparsedErrors||{};
WRM._unparsedData["com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path"]="\u0022\u0022";
WRM._unparsedData["com.atlassian.confluence.plugins.confluence-feature-discovery-plugin:confluence-feature-discovery-plugin-resources.test-mode"]="false";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-help-paths"]="{\u0022entries\u0022:{\u0022applinks.docs.root\u0022:\u0022https://confluence.atlassian.com/display/APPLINKS-072/\u0022,\u0022applinks.docs.diagnostics.troubleshoot.sslunmatched\u0022:\u0022SSL+and+application+link+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthsignatureinvalid\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthtimestamprefused\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.delete.entity.link\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.adding.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.administration.guide\u0022:\u0022Application+Links+Documentation\u0022,\u0022applinks.docs.oauth.security\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.troubleshoot.application.links\u0022:\u0022Troubleshoot+application+links\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unknownerror\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.trusted.apps\u0022:\u0022Configuring+Trusted+Applications+authentication+for+an+application+link\u0022,\u0022applinks.docs.diagnostics.troubleshoot.authlevelunsupported\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.ssluntrusted\u0022:\u0022SSL+and+application+link+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unknownhost\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.delete.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.adding.project.link\u0022:\u0022Configuring+Project+links+across+Applications\u0022,\u0022applinks.docs.link.applications\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthproblem\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.migration\u0022:\u0022Update+application+links+to+use+OAuth\u0022,\u0022applinks.docs.relocate.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.administering.entity.links\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.upgrade.application.link\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.diagnostics.troubleshoot.connectionrefused\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.oauth\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.insufficient.remote.permission\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.configuring.application.link.auth\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.diagnostics\u0022:\u0022Application+links+diagnostics\u0022,\u0022applinks.docs.configured.authentication.types\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.adding.entity.link\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unexpectedresponse\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.basic\u0022:\u0022Configuring+Basic+HTTP+Authentication+for+an+Application+Link\u0022,\u0022applinks.docs.diagnostics.troubleshoot.authlevelmismatch\u0022:\u0022OAuth+troubleshooting+guide\u0022}}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-types"]="{\u0022crowd\u0022:\u0022Crowd\u0022,\u0022confluence\u0022:\u0022Confluence\u0022,\u0022fecru\u0022:\u0022FishEye / Crucible\u0022,\u0022stash\u0022:\u0022Stash\u0022,\u0022jira\u0022:\u0022Jira\u0022,\u0022refapp\u0022:\u0022Reference Application\u0022,\u0022bamboo\u0022:\u0022Bamboo\u0022,\u0022generic\u0022:\u0022Generic Application\u0022}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.entity-types"]="{\u0022singular\u0022:{\u0022refapp.charlie\u0022:\u0022Charlie\u0022,\u0022fecru.project\u0022:\u0022Crucible Project\u0022,\u0022fecru.repository\u0022:\u0022FishEye Repository\u0022,\u0022stash.project\u0022:\u0022Stash Project\u0022,\u0022generic.entity\u0022:\u0022Generic Project\u0022,\u0022confluence.space\u0022:\u0022Confluence Space\u0022,\u0022bamboo.project\u0022:\u0022Bamboo Project\u0022,\u0022jira.project\u0022:\u0022Jira Project\u0022},\u0022plural\u0022:{\u0022refapp.charlie\u0022:\u0022Charlies\u0022,\u0022fecru.project\u0022:\u0022Crucible Projects\u0022,\u0022fecru.repository\u0022:\u0022FishEye Repositories\u0022,\u0022stash.project\u0022:\u0022Stash Projects\u0022,\u0022generic.entity\u0022:\u0022Generic Projects\u0022,\u0022confluence.space\u0022:\u0022Confluence Spaces\u0022,\u0022bamboo.project\u0022:\u0022Bamboo Projects\u0022,\u0022jira.project\u0022:\u0022Jira Projects\u0022}}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.authentication-types"]="{\u0022com.atlassian.applinks.api.auth.types.BasicAuthenticationProvider\u0022:\u0022Basic Access\u0022,\u0022com.atlassian.applinks.api.auth.types.TrustedAppsAuthenticationProvider\u0022:\u0022Trusted Applications\u0022,\u0022com.atlassian.applinks.api.auth.types.CorsAuthenticationProvider\u0022:\u0022CORS\u0022,\u0022com.atlassian.applinks.api.auth.types.OAuthAuthenticationProvider\u0022:\u0022OAuth\u0022,\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthAuthenticationProvider\u0022:\u0022OAuth\u0022,\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthWithImpersonationAuthenticationProvider\u0022:\u0022OAuth\u0022}";
if(window.WRM._dataArrived)window.WRM._dataArrived();</script>
<link type="text/css" rel="stylesheet" href="/s/6bcc7087de45a1059c319bfd07f86484-CDN/-dv5hlh/8703/51k4y0/08c5dc0bfd0b71a003e20c6dbd501537/_/download/contextbatch/css/_super/batch.css" data-wrm-key="_super" data-wrm-batch-type="context" media="all">
<link type="text/css" rel="stylesheet" href="/s/8bc268be12ff586313ce1dff29f9ef53-CDN/-dv5hlh/8703/51k4y0/236bdd6ac7c74a841c289f2a0db31c08/_/download/contextbatch/css/viewcontent,-_super/batch.css?highlightactions=true" data-wrm-key="viewcontent,-_super" data-wrm-batch-type="context" media="all">
<link type="text/css" rel="stylesheet" href="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/11.4.6/_/download/batch/confluence.extra.jira:common/confluence.extra.jira:common.css" data-wrm-key="confluence.extra.jira:common" data-wrm-batch-type="resource" media="all">
<link type="text/css" rel="stylesheet" href="/s/e36ed85cbe8656691da1ea210c17a90f-CDN/-dv5hlh/8703/51k4y0/11.2.3/_/download/batch/com.atlassian.confluence.plugins.confluence-previews:confluence-previews-css/com.atlassian.confluence.plugins.confluence-previews:confluence-previews-css.css" data-wrm-key="com.atlassian.confluence.plugins.confluence-previews:confluence-previews-css" data-wrm-batch-type="resource" media="all">
<link type="text/css" rel="stylesheet" href="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_aui.splitchunk.vendors--85718a7eef/com.atlassian.auiplugin:split_aui.splitchunk.vendors--85718a7eef.css" data-wrm-key="com.atlassian.auiplugin:split_aui.splitchunk.vendors--85718a7eef" data-wrm-batch-type="resource" media="all">
<link type="text/css" rel="stylesheet" href="/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-dv5hlh/8703/51k4y0/9.2.2/_/download/batch/com.atlassian.auiplugin:split_aui.splitchunk.vendors--7c76061134/com.atlassian.auiplugin:split_aui.splitchunk.vendors--7c76061134.css" data-wrm-key="com.atlassian.auiplugin:split_aui.splitchunk.vendors--7c76061134" data-wrm-batch-type="resource" media="all">


        <link rel="stylesheet"
              href="/docs/_/7F0000010170782D37AE5FDD0C5777E7/1668635884103/css/app.css"/>

            <style>

    .picker--scroll > a,
    .picker .menu .is-active:not(ul) > a,
    .top-bar-right > button > span,
    .button--white-on-black span {
        color: #002F59 !important;
    }
    .picker--scroll > a::after {
        border-color: #002F59 !important;
    }

        .hc-portal-background-image,
    .hc-spaceHome-background-image {
        background-size: cover !important;
        background-repeat: no-repeat !important;
                    box-shadow: 0 0 0.5em rgba(59,72,79,.5);
            }
    .hc-spaceHome-background-image {
                background-image: url('/docs/_/7F0000010170782D37AE5FDD0C5777E7/1668635884103/Banner3.jpg');
    }
    .hc-portal-background-image {
        background-image: url('/docs/_/7F0000010170782D37AE5FDD0C5777E7/1668635884103/SecurityIntell.png');
    }
    .hc-header-font-color,
    .hc-header-font-color > a {
        color: #002F59 !important;
    }
    .hc-spaceHome-hero-font-color {
        color: #FFF !important;
                                    text-shadow: 0 0 3px #000C34;
                        }
    .hc-portal-font-color {
        color: #FFF !important;
    }
    .hc-header-background-color {
        background-color: #FFFFFF !important;
    }
    .top-bar {
        background-color: #FFFFFF !important;
    }
    .header__navigation__menu-container--link--last {
        margin-right: 0.5rem;
        padding-right: 0.5rem !important;
        border-right: 1px solid #002F59;
    }

    .search-bar input[type=submit] {
        background-image: url(/docs/_/7F0000010170782D37AE5FDD0C5777E7/1668635884103/images/common/search-magnifier.svg);
    }

    .search-bar--article #search-input {
        border: 1px solid #002F59 !important;
    }

        .hc-footer-background-color {
        background-color: #FFFFFF;
    }
    .hc-footer-font-color,
    .hc-footer-font-color > a {
        color: #002F59 !important;
    }

        .button--white-on-black,
    #cookies {
        border: 1px solid #002F59 !important;
    }
    .button--white-on-black span:hover {
        background-color: #002F59 !important;
        color: #FFFFFF;
    }

        #inline-dialog-hipchat-integration-dialog {
        display: none !important;
    }

        
        @media screen and (max-width: 1023px)  {

                .renderPageTree__item > a,
        .is-submenu-parent-item > a,
        .js-drilldown-back > a{
            color: #002F59 !important;
        }

        .menu .is-active:not(ul) > a,
        .submenu-toggle:hover,
        .submenu-toggle:active,
        .submenu-toggle:focus,
        .renderPageTree__item a:hover,
        .renderPageTree__item a:active,
        .renderPageTree__item a:focus {
            background-color: unset !important;
            /*filter: brightness(150%);*/
        }

        .menu-icon::after {
            background-color: #002F59;
            box-shadow: 0 7px 0 #002F59, 0 14px 0 #002F59;
        }

        .menu .is-active:not(ul) > a {
            color: #002F59 !important;
        }

        .submenu-toggle,
        .top-bar,
        .top-bar ul {
            background-color: #FFFFFF !important;
        }

        .top-bar .is-dropdown-submenu {
            background-color: white !important;
        }

        .submenu-toggle::after {
            border-color: #002F59;
        }

        .header__navigation__menu-container--link--border {
            border-top: 1px solid #002F59;
            padding-top: 1.5rem;
        }

        .header__navigation__menu-container--link--last {
            border: none;
        }

                .drilldown a {
            background: none;
        }

        .drilldown .is-drilldown-submenu-parent > a::after {
            border-color: transparent transparent transparent #002F59 !important;
        }

        .drilldown .js-drilldown-back > a::before {
            border-color: transparent #002F59 transparent transparent !important;
        }

                .picker--scroll__item > ul {
            border: 1px solid #002F59;
            border-radius: 0 0 3px 3px;
        }
        .picker--scroll {
            border: 1px solid #002F59;
            border-radius: 3px;
        }
    }
</style>

        
        <title>LogRhythm Documentation</title>
    <meta name="generator" content="Created with Scroll Viewport - K15t"><meta name="scroll-viewport-version" content="2.20.5">
<style>.sv-bidi-marker:before { unicode-bidi: isolate; background-color: #fff0b3; color: #7f5f01; cursor: pointer; content: attr(data-charcode); }</style>
</head>

    <body pageid="5834061" class="disable-attachment-uploader">
                <header class="header__navigation hc-header-background-color">
            

<nav>
    <div class="title-bar align-justify hide-for-large hc-header-background-color">
        <ul class="menu hc-header-background-color">
            <li class="menu-text align-self-middle header__navigation__menu-container--logo">
                <a href="/docs"
                   rel="noopener"
                   aria-label="LogRhythm Documentation"
                   target="_self">
                    <img src="/docs/_/7F0000010170782D37AE5FDD0C5777E7/1668635884103/LogRhythm_logo.jpg"
                         alt="LogRhythm Documentation"
                         aria-label="LogRhythm Documentation"
                         title="LogRhythm Documentation"/>
                </a>
            </li>
                    </ul>
        <button class="menu-icon margin-right-2 hc-header-font-color"
                type="button"
                data-toggle="site-navigation"
                aria-label="Open navigation menu">
        </button>
    </div>

    <div class="off-canvas in-canvas-for-large position-right hc-header-background-color"
         id="site-navigation"
         data-off-canvas
         data-transition="overlap">
        <div class="top-bar header__navigation__menu-container hc-header-background-color hc-header-font-color"
             style="max-width: 100%">
            <div class="top-bar-left">
                <ul class="menu hc-header-background-color">
                    <li class="menu-text align-self-middle header__navigation__menu-container--logo">
                        <a href="/docs"
                           target="_self">
                            <img src="/docs/_/7F0000010170782D37AE5FDD0C5777E7/1668635884103/LogRhythm_logo.jpg"
                                 aria-label="Back to Portal"
                                 alt="LogRhythm Documentation"
                                 title="LogRhythm Documentation"/>
                        </a>
                    </li>
                                    </ul>
            </div>
            <div class="top-bar-right">
                <button class="close-button margin-top-1 margin-right-1"
                        type="button"
                        data-toggle="site-navigation">
                    <span aria-hidden="true">&times;</span>
                </button>
                <ul class="dropdown menu header__navigation__menu-container__menu hc-header-background-color"
                    data-dropdown-menu
                    data-disable-hover="true"
                    data-click-open="true"
                    data-close-on-click="true">
                    <li class="hide-for-large small-order-5 large-order-1">
                        <span class="header__navigation__menu-container__menu--heading">
                                                                                                
                                                                                    </span>
                        <div id="js-mobile-pageTree">
                                                            
    <ul class="hide-for-large header__navigation__menu-container__menu--spaces">
                        <li class="header__navigation__menu-container--link">
                <a href="/docs/axon"
                   target="_self"
                   class="hc-header-font-color">
                    Axon
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/lrcloud"
                   target="_self"
                   class="hc-header-font-color">
                    LogRhythm Cloud
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/enterprise"
                   target="_self"
                   class="hc-header-font-color">
                    Enterprise SIEM
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/deploy"
                   target="_self"
                   class="hc-header-font-color">
                    Installations and Upgrades
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/ndr"
                   target="_self"
                   class="hc-header-font-color">
                    LogRhythm NDR (formerly MistNet)
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/devices"
                   target="_self"
                   class="hc-header-font-color">
                    Device Configuration Guides
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/kb"
                   target="_self"
                   class="hc-header-font-color">
                    Knowledge Base Modules
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/OCbeats"
                   target="_self"
                   class="hc-header-font-color">
                    Open Collector and Beats
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/sysmon"
                   target="_self"
                   class="hc-header-font-color">
                    System Monitor
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/ueba"
                   target="_self"
                   class="hc-header-font-color">
                    LogRhythm UEBA (formerly CloudAI)
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/lrapi"
                   target="_self"
                   class="hc-header-font-color">
                    APIs
                </a>
            </li>
                                <li class="header__navigation__menu-container--link">
                <a href="/docs/netmon"
                   target="_self"
                   class="hc-header-font-color">
                    NetMon
                </a>
            </li>
                </ul>
                                                    </div>
                    </li>
                    
                            <li class="small-order-6 large-order-2 header__navigation__menu-container--link
                              header__navigation__menu-container--link--border">
        <a href="https://docs.logrhythm.com/docs/kb"
           target="_blank"
           aria-label="Knowledge Base Modules"
           class="hc-header-font-color"
           rel="noopener">
            Knowledge Base Modules
        </a>
    </li>
                            <li class="small-order-6 large-order-2 header__navigation__menu-container--link
                              ">
        <a href="https://community.logrhythm.com"
           target="_blank"
           aria-label="Community"
           class="hc-header-font-color"
           rel="noopener">
            Community
        </a>
    </li>
                            <li class="small-order-6 large-order-2 header__navigation__menu-container--link
                              ">
        <a href="https://logrhythmcommunity.force.com"
           target="_blank"
           aria-label="Support"
           class="hc-header-font-color"
           rel="noopener">
            Support
        </a>
    </li>
                            <li class="small-order-6 large-order-2 header__navigation__menu-container--link
                              ">
        <a href="https://logrhythmcommunity.force.com"
           target="_blank"
           aria-label="University"
           class="hc-header-font-color"
           rel="noopener">
            University
        </a>
    </li>
                                                <li class="small-order-6 large-order-2 header__navigation__menu-container--link
                              ">
        <a href="mailto:TechPubs@LogRhythm.com"
           target="_blank"
           aria-label="Documentation Feedback"
           class="hc-header-font-color"
           rel="noopener">
            Documentation Feedback
        </a>
    </li>
    
                                                                                                                                                                                                        </ul>
            </div>
        </div>
    </div>
</nav>
        </header>
        
        <main>
                         <span id="admin-menu-link"
                  style="display: none; position: absolute; top:-5000px;"></span>
                                <div class="portal">
    <div class="grid-container full hc-header-background-color hc-portal-background-image">
        <div class="grid-container">
            <div class="grid-x align-center portal__header__content">
                <div class="cell text-center portal__header__content__intro">
                    <h1 class="portal__header__content__intro--heading hc-portal-font-color">LogRhythm Documentation</h1>
                                                                <p class="portal__header__content__intro--intro hc-portal-font-color"></p>
                                            
    <form id="search"
          method="GET"
                  class="search-bar search-bar--full-width"
            >
        <input id="search-input"
               quicksearch="true"
               type="text"
               autocomplete="off"
                                             autofocus
                              name="q"
               aria-label="Search"
               value=""/>
        <input type="submit" value="">
        <input type="hidden"
               name="max"
               value="10"/>
                                                            <input type="hidden"
                       name="s"
                       value="AXON"/>
                <input type="hidden"
                       name="AXON-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="LRCloud"/>
                <input type="hidden"
                       name="LRCloud-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="Enterprise"/>
                <input type="hidden"
                       name="Enterprise-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="Deploy"/>
                <input type="hidden"
                       name="Deploy-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="NDR"/>
                <input type="hidden"
                       name="NDR-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="Devices"/>
                <input type="hidden"
                       name="Devices-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="KB"/>
                <input type="hidden"
                       name="KB-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="OCBeats"/>
                <input type="hidden"
                       name="OCBeats-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="SYSMON"/>
                <input type="hidden"
                       name="SYSMON-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="UEBA"/>
                <input type="hidden"
                       name="UEBA-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="LRAPI"/>
                <input type="hidden"
                       name="LRAPI-scrollSearch"
                       value="false"/>
                                            <input type="hidden"
                       name="s"
                       value="NetMon"/>
                <input type="hidden"
                       name="NetMon-scrollSearch"
                       value="false"/>
                                        </form>
        <div class="search-bar__quick-results hide-for-small-only">
        <ul id="search-results">
                </ul>
    </div>
                    </div>
            </div>
        </div>
    </div>


    <div class="grid-container portal__content">
                                 <div class="grid-x grid-margin-x" data-equalizer>
                                    

                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/axon"
               title="Axon"
               aria-label="Axon">
                <img class="tile__image"
                     src="/download/attachments/41324171/AXON?version=4&amp;modificationDate=1667514750458&amp;api=v2"
                     alt="Axon Logo"
                     title="Axon"/>
                <h3 class="tile__headline tile__headline--md">Axon</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/lrcloud"
               title="LogRhythm Cloud"
               aria-label="LogRhythm Cloud">
                <img class="tile__image"
                     src="/download/attachments/41326033/LRCloud?version=7&amp;modificationDate=1667514719160&amp;api=v2"
                     alt="LogRhythm Cloud Logo"
                     title="LogRhythm Cloud"/>
                <h3 class="tile__headline tile__headline--md">LogRhythm Cloud</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/enterprise"
               title="Enterprise SIEM"
               aria-label="Enterprise SIEM">
                <img class="tile__image"
                     src="/download/attachments/5837089/Enterprise?version=3&amp;modificationDate=1667514708094&amp;api=v2"
                     alt="Enterprise SIEM Logo"
                     title="Enterprise SIEM"/>
                <h3 class="tile__headline tile__headline--md">Enterprise SIEM</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/deploy"
               title="Installations and Upgrades"
               aria-label="Installations and Upgrades">
                <img class="tile__image"
                     src="/download/attachments/5834744/Deploy?version=3&amp;modificationDate=1667514787807&amp;api=v2"
                     alt="Installations and Upgrades Logo"
                     title="Installations and Upgrades"/>
                <h3 class="tile__headline tile__headline--md">Installations and Upgrades</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/ndr"
               title="LogRhythm NDR (formerly MistNet)"
               aria-label="LogRhythm NDR (formerly MistNet)">
                <img class="tile__image"
                     src="/download/attachments/17893938/NDR?version=3&amp;modificationDate=1667514822776&amp;api=v2"
                     alt="LogRhythm NDR (formerly MistNet) Logo"
                     title="LogRhythm NDR (formerly MistNet)"/>
                <h3 class="tile__headline tile__headline--md">LogRhythm NDR (formerly MistNet)</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/devices"
               title="Device Configuration Guides"
               aria-label="Device Configuration Guides">
                <img class="tile__image"
                     src="/download/attachments/5835181/Devices?version=3&amp;modificationDate=1667514845067&amp;api=v2"
                     alt="Device Configuration Guides Logo"
                     title="Device Configuration Guides"/>
                <h3 class="tile__headline tile__headline--md">Device Configuration Guides</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/kb"
               title="Knowledge Base Modules"
               aria-label="Knowledge Base Modules">
                <img class="tile__image"
                     src="/download/attachments/5835396/KB?version=3&amp;modificationDate=1667514882158&amp;api=v2"
                     alt="Knowledge Base Modules Logo"
                     title="Knowledge Base Modules"/>
                <h3 class="tile__headline tile__headline--md">Knowledge Base Modules</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/OCbeats"
               title="Open Collector and Beats"
               aria-label="Open Collector and Beats">
                <img class="tile__image"
                     src="/download/attachments/5834066/OCBeats?version=3&amp;modificationDate=1667514910731&amp;api=v2"
                     alt="Open Collector and Beats Logo"
                     title="Open Collector and Beats"/>
                <h3 class="tile__headline tile__headline--md">Open Collector and Beats</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/sysmon"
               title="System Monitor"
               aria-label="System Monitor">
                <img class="tile__image"
                     src="/download/attachments/5834673/SYSMON?version=3&amp;modificationDate=1667514943746&amp;api=v2"
                     alt="System Monitor Logo"
                     title="System Monitor"/>
                <h3 class="tile__headline tile__headline--md">System Monitor</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/ueba"
               title="LogRhythm UEBA (formerly CloudAI)"
               aria-label="LogRhythm UEBA (formerly CloudAI)">
                <img class="tile__image"
                     src="/download/attachments/5835142/UEBA?version=3&amp;modificationDate=1667514983166&amp;api=v2"
                     alt="LogRhythm UEBA (formerly CloudAI) Logo"
                     title="LogRhythm UEBA (formerly CloudAI)"/>
                <h3 class="tile__headline tile__headline--md">LogRhythm UEBA (formerly CloudAI)</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/lrapi"
               title="APIs"
               aria-label="APIs">
                <img class="tile__image"
                     src="/download/attachments/5834692/LRAPI?version=3&amp;modificationDate=1667515014682&amp;api=v2"
                     alt="APIs Logo"
                     title="APIs"/>
                <h3 class="tile__headline tile__headline--md">APIs</h3>
                <p class="tile__description"></p>
            </a>
                                                    
                                        <a class="cell medium-4 tile tile--text-center tile--spaces "
               data-equalizer-watch
               href="/docs/netmon"
               title="NetMon"
               aria-label="NetMon">
                <img class="tile__image"
                     src="/download/attachments/5835764/NetMon?version=3&amp;modificationDate=1667515039799&amp;api=v2"
                     alt="NetMon Logo"
                     title="NetMon"/>
                <h3 class="tile__headline tile__headline--md">NetMon</h3>
                <p class="tile__description"></p>
            </a>
                                                            </div>
            </div>
</div>
                    </main>
                <footer class="grid-container full footer hc-footer-background-color">
            
    
    <div class="grid-x footer--alignment hc-footer-font-color" style="max-width: 100%; padding: 0;">
                    <div class="cell large-shrink hc-footer-font-color">
                <img src="/docs/_/7F0000010170782D37AE5FDD0C5777E7/1668635884103/FooterLogo.jpg"
                     class="footer__logo"
                     alt="LogRhythm Documentation Logo"
                     title="LogRhythm Documentation"/>
            </div>
                <div class="grid-x cell large-auto">
            <div class="cell footer__links">
                            </div>
            <div class="cell">
                <span class="footer__attribution-line--copyright hc-footer-font-color">
                    Copyright &copy; 2022 LogRhythm, Inc. All Rights Reserved &bull; Powered by
                    <a href="https://www.k15t.com/go/scroll-viewport-help-center"
                       target="_blank" rel="noopener" aria-label="Scroll Viewport Product Page">Scroll Viewport</a> and
                    <a href="https://www.atlassian.com/software/confluence"
                       target="_blank" rel="noopener" aria-label="Atlassian Confluence Product Page">Atlassian Confluence</a>
                </span>
            </div>
        </div>
    </div>
        </footer>
        
    
                    <script src="/docs/_/7F0000010170782D37AE5FDD0C5777E7/1668635884103/js/app.js"></script>

        
    <!-- Powered by Scroll Viewport -->
    <script src="//docs.logrhythm.com/plugins/servlet/scroll-viewport/bootstrap.js?viewportId=7F0000010170782D043C391D290475EE&pageId=5834061&spaceKey=DOCS&isDraftViewport=false&isViewportControlEnabled=true" async></script>
</body>
</html>