The LogRhythm SIEM platform allows analysts to efficiently capture logs and use advanced analytics to surface known and unknown threats, all while automating manual tasks with embedded security orchestration, automation, and response (SOAR) capabilities.
|Filtering is used in searches and configuration in many parts of the LogRhythm Client Console, including AI Engine Rules, Alarms, Investigations, Tails, and Reports.|
|Some basic functionality of the Client Console is used in multiple tools and windows. This includes exporting data and generating crash reports.|
|Layouts||Layouts consist of the look and feel for how widgets appear within the Personal Dashboard and Investigate.|
|Lists in the Client Console||Lists provide a mechanism for organizing and saving common search criteria used within filters throughout the Client Console.|
|Message Processing Engine Rule Builder||The MPE Rule Builder allows you to view, create, and edit new MPE base rules and sub-rules. New rules are needed to collect and process logs from any new log source type.|
|Monitor, Search, and Analysis|
Monitoring, searching, and analyzing are done through a number of features in the Client Console. These include: Alarm Viewer, Investigator, Personal Dashboard, Quick Search Toolbar, Tail, and TopX Analysis.
|My LogRhythm||The My LogRhythm menu provides access to several tools that allow you to modify preferences, settings, and records in LogRhythm that are unique to you.|
|Report Center||The Report Center includes predefined templates, reports, and Report Packages, which are sets of reports that pertain to a single topic such as security compliance standards, usage auditing, or LogRhythm diagnostics.|