[{"id":"ci_8aee50e661f2b2befada72b50315bb3b98b6da8746b6744541f4fe4c4bfd31df","title":"LogRhythm Release Notes","path":"/lrsiem/7.18.0/logrhythm-release-notes","children":[{"id":"ci_626cf4355f00b95f28528aa9c5297dcc56f95ff6aaa3df2b1b3eb30322504630","title":"7.18.0.48 Release Notes - 7 November 2024","path":"/lrsiem/7.18.0/7-18-0-48-release-notes-7-november-2024","children":[]},{"id":"ci_6350bcd6b00ecc627e8b57eef301783e5ceedd1da4a8356ab23d772df2354a46","title":"7.18.0.46 Release Notes - 31 October 2024","path":"/lrsiem/7.18.0/7-18-0-46-release-notes-31-october-2024","children":[]},{"id":"ci_2e5c8f1a5abd72e48ee21c55803f10489d16526c5f6dffabad86c345f5e7735c","title":"7.18.0 GA Release Notes - 1 October 2024","path":"/lrsiem/7.18.0/7-18-0-ga-release-notes-1-october-2024","children":[]},{"id":"ci_85fc6eb82791936b33b3e9862bf9da2c413f942103f3662a6ddce052ae32281b","title":"7.17.0.55 Release Notes - 12 August 2024","path":"/lrsiem/7.18.0/7-17-0-55-release-notes-12-august-2024","children":[]},{"id":"ci_c572f4db58b408bf76952148fdb680eea0bf8a1eb952691649e5419bf390b7b4","title":"7.17.0 GA Release Notes - 1 July 2024","path":"/lrsiem/7.18.0/7-17-0-ga-release-notes-1-july-2024","children":[]},{"id":"ci_0f8cc85636ac6aac08419a48672199bdf1284e986919d6d4c19e587244795ba1","title":"7.16.0.45 Release Notes - 24 April 2024","path":"/lrsiem/7.18.0/7-16-0-45-release-notes-24-april-2024","children":[]},{"id":"ci_8148de7c8fc08e6c74c557c49a49134bc5ae2969e3bf93d8da6f263253f43932","title":"7.16.0 GA Release Notes - 1 April 2024","path":"/lrsiem/7.18.0/7-16-0-ga-release-notes-1-april-2024","children":[]},{"id":"ci_39dd429e7a872a5cca18ca9b0155121f8e18330a4f6d3e5fe0ddb83c565a8c31","title":"7.15.0.64 Release Notes - 5 February 2024","path":"/lrsiem/7.18.0/7-15-0-64-release-notes-5-february-2024","children":[]},{"id":"ci_53094630db179527add0f99548c5beab31b0fe5a00fe132554e1ce161ac2ac10","title":"7.15.0 GA Release Notes - 4 January 2024","path":"/lrsiem/7.18.0/7-15-0-ga-release-notes-4-january-2024","children":[]},{"id":"ci_b561293f81b98e72bf60490f850ef22a9ad31d114e3c5ddd62df554090a78a8e","title":"7.14.0.107 Release Notes - 18 October 2023","path":"/lrsiem/7.18.0/7-14-0-107-release-notes-18-october-2023","children":[]},{"id":"ci_991fe57a83c4e45a8e9704e54e8e072cba627c2e2b3cf3d80d650ee763aadc85","title":"7.14.1 Release Notes - 13 November 2023","path":"/lrsiem/7.18.0/7-14-1-release-notes-13-november-2023","children":[]},{"id":"ci_5c408e21be1ea6253c8a1764289c4a2c637594bca605408236b7634b5815afff","title":"7.14.0 GA Release Notes - 2 October 2023","path":"/lrsiem/7.18.0/7-14-0-ga-release-notes-2-october-2023","children":[]},{"id":"ci_b14a39ffd774932238de5445f6e707efd2af022108a8f098364f4e1e2a3059e2","title":"7.13.0.78 Release Notes - 2 August 2023","path":"/lrsiem/7.18.0/7-13-0-78-release-notes-2-august-2023","children":[]},{"id":"ci_1b79d87279c35a1a1bbeda30bfb9d4dfb4617190a4108c8d10d6ffd63e8ce254","title":"7.13.0.76 Release Notes - 17 July 2023","path":"/lrsiem/7.18.0/7-13-0-76-release-notes-17-july-2023","children":[]},{"id":"ci_3ce5fb5ba43f5a12c12decc4ac0c83b41e9cbf0f5a7d5cc746bea2f8e3363c4e","title":"7.13.0 GA Release Notes - 29 June 2023","path":"/lrsiem/7.18.0/7-13-0-ga-release-notes-29-june-2023","children":[]},{"id":"ci_101543ee888b0e82464ef0203ece617eb0888a6c98366371d362e53c446d76c1","title":"7.12.0 GA Release Notes - 3 April 2023","path":"/lrsiem/7.18.0/7-12-0-ga-release-notes-3-april-2023","children":[]},{"id":"ci_026a2aa3591273b6c8184f697218b4a1f71434650861f6f1e7a9c263825a55f4","title":"7.11.0.43 Release Notes - 6 March 2023","path":"/lrsiem/7.18.0/7-11-0-43-release-notes-6-march-2023","children":[]},{"id":"ci_8e95a2efda52d6ac57113dc456006a1cf25329336f2ea43b4397df8c4c7eb9af","title":"7.11.0 GA Release Notes - 5 January 2023","path":"/lrsiem/7.18.0/7-11-0-ga-release-notes-5-january-2023","children":[]}]},{"id":"ci_14889078b57ceb16c45de49405726c1d88d65d7b6d9e0d86691b6eaac07f7380","title":"Get Started with LogRhythm SIEM","path":"/lrsiem/7.18.0/get-started-with-logrhythm-siem","children":[{"id":"ci_0e7413c6f048fcaf4e81990bc5724e902569c8b149833aeeccfaa40c146b3112","title":"Log in to the Client Console","path":"/lrsiem/7.18.0/log-in-to-the-client-console","children":[]},{"id":"ci_ce3d49ce5da4de50db3f7f855426e7d252d9f31ec4b353ece351048d7d1433f6","title":"Complete the New Deployment Wizard","path":"/lrsiem/7.18.0/complete-the-new-deployment-wizard","children":[]},{"id":"ci_7e4d3c14bec513a5d79f877e49c06f5d0ef5e8a09c93eb3443a520a8a3931817","title":"Assign LogRhythm Licenses","path":"/lrsiem/7.18.0/assign-logrhythm-licenses","children":[]},{"id":"ci_bf2bbd9d375febb7744c73615d777862d75756ff4e20b3d2c688bfa6690775ea","title":"Log in to the Web Console","path":"/lrsiem/7.18.0/log-in-to-the-web-console","children":[]},{"id":"ci_a328b9eb6c8968faa8a929990398d0ffb5380f38ebdb4a12a0288fa0bbefb509","title":"Verify the Web Console Connection Status","path":"/lrsiem/7.18.0/verify-the-web-console-connection-status","children":[]},{"id":"ci_b2628c0e41fef0db13e4383e01faefa764efa6c58dfdb171f82ae0665d0673ce","title":"Configure NetMon to Integrate with the Web Console","path":"/lrsiem/7.18.0/configure-netmon-to-integrate-with-the-web-console","children":[]}]},{"id":"ci_47efd6f93f888ebda18f73406fd6e2565895bfbbbb3338daf3f7717b13939a58","title":"Client Console Administrator Guide","path":"/lrsiem/7.18.0/client-console-administrator-guide","children":[{"id":"ci_c6801c6e4d7109a8f810683a3a983891e34a766d113056fb7f70f06f104b754d","title":"Advanced Intelligence Engine","path":"/lrsiem/7.18.0/advanced-intelligence-engine","children":[{"id":"ci_333bddec978cff6f7d80e433054ee06090b4cc833e0dec70546ab21b31b75c38","title":"Add AI Engine Servers","path":"/lrsiem/7.18.0/add-ai-engine-servers","children":[]},{"id":"ci_1cd257a9a6fa748c8b6624c82ee31c3e2bd0162a63d2bbcd638d203b967b1d2f","title":"Apply Recommended Values to an AI Engine Server","path":"/lrsiem/7.18.0/apply-recommended-values-to-an-ai-engine-server","children":[]},{"id":"ci_55ebac46c7c745bcce97391a81bea86de25564dfe3950cf7bf337e022fbc7527","title":"Configure the Advanced Intelligence Engine","path":"/lrsiem/7.18.0/configure-the-advanced-intelligence-engine","children":[]},{"id":"ci_3c2bf4996d6ae43275fc4ce39b52c543bea68be58309fa2af20eb902b6e67989","title":"Create New AI Engine Rules","path":"/lrsiem/7.18.0/create-new-ai-engine-rules","children":[]},{"id":"ci_fd829c9d68f72fb0ca6d49e55d90ddd681c0c0b4076d4e7f20ed4c20a0e0a21d","title":"Define AI Engine Linked Data Block Relationships","path":"/lrsiem/7.18.0/define-ai-engine-linked-data-block-relationships","children":[]},{"id":"ci_1a630e27f9795104a82f2af4b8289a026b9ce95758c42454506dae1e8294cd6c","title":"Define AI Engine Rule Block Relationships","path":"/lrsiem/7.18.0/define-ai-engine-rule-block-relationships","children":[]},{"id":"ci_661f334a4bf2a5a477bbeebad65337f87974f45d2de3791c81347f959ffa1f7d","title":"Drill Down on AI Engine Results","path":"/lrsiem/7.18.0/drill-down-on-ai-engine-results","children":[]},{"id":"ci_1de08b51116d9a9004101301f2aae6bb2ac683773708e12707a7197cb68f3eca","title":"Import or Export AI Engine Rules from the Grid","path":"/lrsiem/7.18.0/import-or-export-ai-engine-rules-from-the-grid","children":[]},{"id":"ci_ebff4bbb763658984272a2b8d4d4b32e43db876757e01721235aed7d34fbae24","title":"Modify AI Engine Rules","path":"/lrsiem/7.18.0/modify-ai-engine-rules","children":[]},{"id":"ci_2e7fae6aaed71b233f0cc95ce07e7ca32244c6654fb9592576a7299b61cb31ef","title":"Restart AI Engine Servers","path":"/lrsiem/7.18.0/restart-ai-engine-servers","children":[]},{"id":"ci_350ad8cd9abfc5eb2baf41fc3fd18f773c76ac1779008aea502075ceecebc449","title":"Revert an AI Engine Server to a Previous Configuration","path":"/lrsiem/7.18.0/revert-an-ai-engine-server-to-a-previous-configuration","children":[]},{"id":"ci_3c4097f9052b7d6977333dc6e8535e388f69da6fdd891a9c9108baebf7b135c5","title":"Update the IP Address of an AI Engine","path":"/lrsiem/7.18.0/update-the-ip-address-of-an-ai-engine","children":[]},{"id":"ci_a9340f02558932881adb439520072eebe6e4bd9d9126997477f37aa1081222dc","title":"Use AI Engine Rule Sets","path":"/lrsiem/7.18.0/use-ai-engine-rule-sets","children":[]},{"id":"ci_9f259be75d48d2246bc4c726258c0049fd6126eab34d04726edf11d50160abfe","title":"Use AI Engine Workloads","path":"/lrsiem/7.18.0/use-ai-engine-workloads","children":[]},{"id":"ci_1d0e57a33ba8313869315b269713fabb0f97d7d038b477146413169b21e06259","title":"Use Saved AI Engine Filters","path":"/lrsiem/7.18.0/use-saved-ai-engine-filters","children":[]},{"id":"ci_d6f12e1092d7f35e939390ff255682a19c4c6b761e0a8858a38c8b28a4ebf80c","title":"Use the AI Engine Local Configuration Manager","path":"/lrsiem/7.18.0/use-the-ai-engine-local-configuration-manager","children":[]},{"id":"ci_0cd77dd4b60f513f1e9497b4ad4ecabcdb16ffe7d5bacf019bf11cb80a174509","title":"View AI Engine Generated Alarms","path":"/lrsiem/7.18.0/view-ai-engine-generated-alarms","children":[]},{"id":"ci_27e7549dadec0ba559939ebaa1bbdd89a3c5ea29ee6f2372f4653a382cc81a83","title":"View AI Engine Rules","path":"/lrsiem/7.18.0/view-ai-engine-rules","children":[]},{"id":"ci_7bdca85d4137725b5bdcd648a86ebbe2ab68744911c5d545409d582949f34ff1","title":"Work with Existing AI Engine Rules","path":"/lrsiem/7.18.0/work-with-existing-ai-engine-rules","children":[]}]},{"id":"ci_5dc4ebfb642551d7e551f5a5ea5165d9b7cbaa3236a078323d5dd758e71bc721","title":"Alarm Rules","path":"/lrsiem/7.18.0/alarm-rules","children":[{"id":"ci_0838720a7589c961bfce031b7ccde5bbfa8275dd35a24ff41cf8b03f0c9a4b1d","title":"Alarm Notification Policies","path":"/lrsiem/7.18.0/alarm-notification-policies","children":[{"id":"ci_a627e9509a283a8db05b0f26a45733c50df0b9a3b9b551f070225e4d39256432","title":"Create Group Notifications for Alarms","path":"/lrsiem/7.18.0/create-group-notifications-for-alarms","children":[]},{"id":"ci_30254a734ebfaf65472f7c11ab8aa50e185700bf7344536eab889bf56ba18079","title":"Create New Email Alarm Notification Policies","path":"/lrsiem/7.18.0/create-new-email-alarm-notification-policies","children":[]},{"id":"ci_4786821a0d97b8b3559de660479e1114fa42f24184fd256932386fe53f5b04b9","title":"Create New SNMP Alarm Notification Policies","path":"/lrsiem/7.18.0/create-new-snmp-alarm-notification-policies","children":[]},{"id":"ci_597e2aa7e3ec0c834211259306461852bad1ae84fecc01616e67a77ba3d3adaa","title":"Create New Text File Alarm Notification Policies","path":"/lrsiem/7.18.0/create-new-text-file-alarm-notification-policies","children":[]},{"id":"ci_19294869a880c2e877768e75fd29ee73dc413f5b995c6525423092720b96b126","title":"Define a Text File Notification Policy","path":"/lrsiem/7.18.0/define-a-text-file-notification-policy","children":[]}]},{"id":"ci_30990963d9bef420828a0f118b0ea4de7e70321e66c9ae0706222012788cd3ef","title":"Create Alarm Rules","path":"/lrsiem/7.18.0/create-alarm-rules","children":[]},{"id":"ci_aa87c3e88e725eea98fe4b46667067f48be69f39e2a2fda344a3621a82e3eb64","title":"Create Alarm Rules for Known Logs","path":"/lrsiem/7.18.0/create-alarm-rules-for-known-logs","children":[]},{"id":"ci_201ace751cc8783763280090672c358a5c7e5150ea92d089f9448d8119393ce2","title":"Enable and Disable Alarm Rules","path":"/lrsiem/7.18.0/enable-and-disable-alarm-rules","children":[]},{"id":"ci_1e79e3744efbfd5c3a84c0612c5e5219fc99fffe9b69f6ea7e0cc4bcd6264da1","title":"Modify Alarm Rule Notifications in Batch","path":"/lrsiem/7.18.0/modify-alarm-rule-notifications-in-batch","children":[]},{"id":"ci_941a1aab7ef8071a4266d4679aa29b21ef4940ad9c9c2eb5d8d8bb7d8ea6ae7a","title":"Modify Alarm Rules","path":"/lrsiem/7.18.0/modify-alarm-rules","children":[]},{"id":"ci_0746a36e3fbc7307922be090fcdb018416975af3cd43370e423ff57023866290","title":"Retire or Activate Alarm Rules","path":"/lrsiem/7.18.0/retire-or-activate-alarm-rules","children":[]}]},{"id":"ci_52df23e10f5b400092b0d85098387b97d6b07ca2aa19a5a29245b32e7b557fe4","title":"Automatic Host Contextualization","path":"/lrsiem/7.18.0/automatic-host-contextualization","children":[{"id":"ci_f40f2189cd43a7293aafc6e2e7fe5d8bf1ff0e5e1dd96b756bec69691482d7d3","title":"Disable Automatic Host Contextualization","path":"/lrsiem/7.18.0/disable-automatic-host-contextualization","children":[]},{"id":"ci_e9560d6f8ce8b9d64dda4f36d3e7af8feea22a90a76c73ad78eb8d30b320fae9","title":"Map Ports","path":"/lrsiem/7.18.0/map-ports","children":[]}]},{"id":"ci_a55d9579a873c9faf6d7926e3cd997db944413c9030feae1eb2861389af29adc","title":"Data Archives and Restoration","path":"/lrsiem/7.18.0/data-archives-and-restoration","children":[{"id":"ci_0cfadeadbabbcc47e968f0da134070b7e05181ac1acdecc7cdac5ad5d84a2c55","title":"Add a Data Processor to Restore Archives","path":"/lrsiem/7.18.0/add-a-data-processor-to-restore-archives","children":[]},{"id":"ci_1c1811290059a8ee565963079a47696310b130d3f75487506de0c7c4580144b6","title":"Backup and Recovery Procedures","path":"/lrsiem/7.18.0/backup-and-recovery-procedures","children":[{"id":"ci_deffcbf4d2de2f35a1bed07dee96309457cca8d116cea4ba172e0fb319c2404d","title":"Back Up LogRhythm Archives","path":"/lrsiem/7.18.0/back-up-logrhythm-archives","children":[]},{"id":"ci_a21ba2b840916513a365488ca91d8ab1e095a5c9328523631ad031b9cea15e72","title":"Configure Automated Platform Manager Database Backups","path":"/lrsiem/7.18.0/configure-automated-platform-manager-database-backups","children":[]},{"id":"ci_4daaac34701099b65d810a0bb24a1704e494267334b245ec61072b3fe17c6c35","title":"Perform a Manual Platform Manager Backup","path":"/lrsiem/7.18.0/perform-a-manual-platform-manager-backup","children":[]},{"id":"ci_7bf057f521a1c14a65a381570f78bd4623f77ab71855e2927ca69a1c6fda2a71","title":"Restore From a Database Backup","path":"/lrsiem/7.18.0/restore-from-a-database-backup","children":[]},{"id":"ci_42706269d7a2f590c0865ccca191bbb951e447abf27cca8d416d2a6f9116a03f","title":"Restore Service State","path":"/lrsiem/7.18.0/restore-service-state","children":[]},{"id":"ci_c88fbe768b716cf8d9a9258ffae427594e9215b56a6ec5f813b8e3af52735bf9","title":"Use a Dark Spare Backup Appliance","path":"/lrsiem/7.18.0/use-a-dark-spare-backup-appliance","children":[]}]},{"id":"ci_1d292a5b766f4f1133a049ec24cb7c972585430a0cd0477a7a0e4530b36a28c4","title":"Change Archive Location","path":"/lrsiem/7.18.0/change-archive-location","children":[]},{"id":"ci_12b84390c1ab4cd337466c445fc1ec264285b52a2f5e6f9c114867cf61955258","title":"Configure Object Access Auditing for LogRhythm Archive Files","path":"/lrsiem/7.18.0/configure-object-access-auditing-for-logrhythm-archive-files","children":[]},{"id":"ci_e99a1d2611e7aeb4bc248ff9e4f25c99f8ff93a89e52f44cbfdb1dc99c81a614","title":"Restore Platform Managers","path":"/lrsiem/7.18.0/restore-platform-managers","children":[]},{"id":"ci_ad07293adc63800845f576b62e00e7e95219a07a6ced8aad62d4a2d18bd86fa6","title":"SecondLook","path":"/lrsiem/7.18.0/secondlook","children":[{"id":"ci_94bfc183e3fe36324324673036e1acc0b4412a996f4f3900ff9d4c1abf62334a","title":"Create a SecondLook Restore","path":"/lrsiem/7.18.0/create-a-secondlook-restore","children":[]},{"id":"ci_83bea0b9ab1079cd957df28e41ff882b73aa7ac2bf131443233bec11d90da6c9","title":"Run a Saved SecondLook Restore","path":"/lrsiem/7.18.0/run-a-saved-secondlook-restore","children":[]}]},{"id":"ci_b5879d39a33fba0e0eb6c2f4cba17e8a9905fa0371ec95d5e36b4257b5349904","title":"Use Intelligent Indexing","path":"/lrsiem/7.18.0/use-intelligent-indexing","children":[]}]},{"id":"ci_2c7d16381ffbdad68208601b9c04c2e5e574aca1cd76168c02c4aa57c3f9bf9e","title":"Data Indexer","path":"/lrsiem/7.18.0/data-indexer","children":[{"id":"ci_f9e5f29861316aea002d2eedaf647d82e80d81d005997f805a83cd7551224fcb","title":"Add a Data Indexer Node","path":"/lrsiem/7.18.0/add-a-data-indexer-node","children":[]},{"id":"ci_91d7d24e0fe6ca094b332d44dfea070ffc119d43617f3189f3ca0ab5bac73af9","title":"Apply System Updates to a Data Indexer","path":"/lrsiem/7.18.0/apply-system-updates-to-a-data-indexer","children":[]},{"id":"ci_e54e01fc28bd47d050827bf58381a7a0f7360a5ad785a25dd22afc7472cf00b7","title":"Configure the Data Indexer","path":"/lrsiem/7.18.0/configure-the-data-indexer","children":[]}]},{"id":"ci_ec977e3eafc4587bfaa5a2d9c57793f3de2e7df6d7def37b3b199ba62aece09e","title":"Data Processor","path":"/lrsiem/7.18.0/data-processor","children":[{"id":"ci_7891a1eac5a56f85fd0d132b91816d5ffec93de84a2f44dee0fb7d775a45f931","title":"Add a Data Processor","path":"/lrsiem/7.18.0/add-a-data-processor","children":[]},{"id":"ci_a056d049e5b452f9585f77373d2da2a63313cd25f89fae86957cd6a8cf6fc020","title":"Apply Recommended Data Processor Values","path":"/lrsiem/7.18.0/apply-recommended-data-processor-values","children":[]},{"id":"ci_f1b5772d43a5c4f52a46b48e69d273be26d5a8eadace50c1191039d981123601","title":"Configure the Mediator for Automatic Startup","path":"/lrsiem/7.18.0/configure-the-mediator-for-automatic-startup","children":[]},{"id":"ci_399baccf7d68f09aa563508edcdef8d86752e9138732175860905e70aa60c8c9","title":"Create a Custom Certificate for Communication Between the Data Processor and AI Engine","path":"/lrsiem/7.18.0/create-a-custom-certificate-for-communication-between-the-data-processor-and-ai-engine","children":[]},{"id":"ci_f0a747546a1ed75d9e45d319c4eaf66a231600451b1dbc6636010cbe52ed8c50","title":"Entity Segregation","path":"/lrsiem/7.18.0/entity-segregation","children":[]},{"id":"ci_c99aeb34d1a943aba678c848df2595c53f7b8f8c9bd93fff3460ef01c4a223c8","title":"Filter LogRhythm Diagnostic Events","path":"/lrsiem/7.18.0/filter-logrhythm-diagnostic-events","children":[]},{"id":"ci_9914746829aae41200f38f6d944369f315b63b108695a32ddacb03625dbb7a2c","title":"Modify Data Processor Advanced Properties","path":"/lrsiem/7.18.0/modify-data-processor-advanced-properties","children":[]},{"id":"ci_1a61be3abe8630b4f55d8a2f124b4df1d2d6b546c44494cde645fd61836c9a06","title":"Modify Data Processor Basic Properties","path":"/lrsiem/7.18.0/modify-data-processor-basic-properties","children":[]},{"id":"ci_f2ca7b5d642a9e8759fc46ef4a213670f78a85f408ce842fe8be7e1940a548d2","title":"Retire a Data Processor","path":"/lrsiem/7.18.0/retire-a-data-processor","children":[]},{"id":"ci_47ffbdff8ab360eced93e2605f9d7e9f60c28b2b1d78c8941d5285f20d0dcb20","title":"Revert to a Previous Data Processor Configuration","path":"/lrsiem/7.18.0/revert-to-a-previous-data-processor-configuration","children":[]},{"id":"ci_9e5bbfaa4ca492fd1a82ccf3d6c6f511e51b3eb07ff4c756f4bdaeb706e57104","title":"Set Data Processor Messages Per Second Value","path":"/lrsiem/7.18.0/set-data-processor-messages-per-second-value","children":[]},{"id":"ci_3d0cd24ea7cf905811efeb2506cad25dff52a7ea622ddc55e4cea8226e7af43f","title":"Start, Stop, and Restart Data Processor Services","path":"/lrsiem/7.18.0/start-stop-and-restart-data-processor-services","children":[]},{"id":"ci_2ee22e0175c8586a6072f7c5dfa142c1933da0c28df14ea2f4270e7bcdb2ba95","title":"Throttle the Mediator","path":"/lrsiem/7.18.0/throttle-the-mediator","children":[]},{"id":"ci_08525a70917555076793a282add9efa7e8ecdd8cf9bd5dec8a86eca6ec1752ae","title":"Update the IP Address of a Data Processor","path":"/lrsiem/7.18.0/update-the-ip-address-of-a-data-processor","children":[]},{"id":"ci_b51a3d4449f1247386cb3eab2286024bfc81a19b218f38d1b7c4839dc18dad75","title":"Use the Data Processor Configuration Manager","path":"/lrsiem/7.18.0/use-the-data-processor-configuration-manager","children":[]}]},{"id":"ci_5c4f12b74e98f842fcadaf5671f2993fbedf9dbf12a14f95d4d69d06599b1562","title":"Deployment Health","path":"/lrsiem/7.18.0/deployment-health","children":[{"id":"ci_3c1b95fc94b04b8669fad6ebf42e7d00c6c550e456a15b72bbc6ef039634d2f0","title":"Centralized Service Metrics","path":"/lrsiem/7.18.0/centralized-service-metrics","children":[{"id":"ci_8dcce749a18a7a6b48db0aa1bde774bc5d86c6e5befefd6fb6b3cd7891f4005c","title":"Install and Work With Centralized Service Metrics","path":"/lrsiem/7.18.0/install-and-work-with-centralized-service-metrics","children":[]},{"id":"ci_6e0293c933877b7fd0f6b8849ac40318898df5e0823a3f73fd6fdbcea428b061","title":"Troubleshoot Centralized Service Metrics","path":"/lrsiem/7.18.0/troubleshoot-centralized-service-metrics","children":[]}]},{"id":"ci_dc770cdad6c4c9db3b0ceb940371b08689e8a6c787d02e0fe097175b1eca3cd2","title":"Deployment Monitor","path":"/lrsiem/7.18.0/deployment-monitor","children":[]},{"id":"ci_6972763d0ef3ee674f79ba9fd8f37b38f60a37dee85da94ae9bc8e754bd9bc2a","title":"Log Processing Reports","path":"/lrsiem/7.18.0/log-processing-reports","children":[{"id":"ci_4971613d24abadd6e26a1b8e6c90bcdb4c832f75cb1b970120423bb61e22974e","title":"LPS Detail Report","path":"/lrsiem/7.18.0/lps-detail-report","children":[]},{"id":"ci_4bf27c77e98c0fced5ff2922117fc227a157098591b7c82c2de61de048376871","title":"LPS Policy Sorting Stats Report","path":"/lrsiem/7.18.0/lps-policy-sorting-stats-report","children":[]}]},{"id":"ci_3065dd929b254dc776ff78a7ecde63a076338f862110b0e3075cef6b7fa75385","title":"Performance Counters","path":"/lrsiem/7.18.0/performance-counters","children":[{"id":"ci_00eaeb8f8fa3caedb3cedf825a9ca205b965b48d4bee240e2d4fbaf8e475b066","title":"Performance Counters—LR AI Engine Communication Manager","path":"/lrsiem/7.18.0/performance-counterslr-ai-engine-communication-manager","children":[]},{"id":"ci_2d7cecbfb885afbef3b8097d50b3d26e5bb371b0a8454cda6456243c66751e68","title":"Performance Counters—LR AI Engine Data Provider","path":"/lrsiem/7.18.0/performance-counterslr-ai-engine-data-provider","children":[]},{"id":"ci_58763677aac5f8eafb4063bcd52463bfd1d829d456fbb7258b5b3cdb99215d1d","title":"Performance Counters—LR AI Engine Server","path":"/lrsiem/7.18.0/performance-counterslr-ai-engine-server","children":[]},{"id":"ci_69c92ce31e4533cd527368199b6ce9e45a1181c90ece7c566612a50fd3884aa8","title":"Performance Counters—LR Alarming and Response Manager","path":"/lrsiem/7.18.0/performance-counterslr-alarming-and-response-manager","children":[]},{"id":"ci_7f1134583c4bddc9f98ec55f51d89fdfa7766ce90ab0f748bb55c7f9d55f1e2c","title":"Performance Counters—LR Mediator, Log Distribution Services","path":"/lrsiem/7.18.0/performance-counterslr-mediator-log-distribution-services","children":[]},{"id":"ci_1c6e2eb07dad3bae900113ac9437eb92ad343bf12fec9bbbf669a98194343941","title":"Performance Counters—LR Mediator, LDS, Sender","path":"/lrsiem/7.18.0/performance-counterslr-mediator-lds-sender","children":[]},{"id":"ci_5db762b30b3ca0d4d8401ef32e7ec93fc344789b90a9767ef6a8fd86b84c15fd","title":"Performance Counters—LR Mediator, LogMart","path":"/lrsiem/7.18.0/performance-counterslr-mediator-logmart","children":[]},{"id":"ci_5e4e21db9cb81adf246a09436e793c6a5e297392f3f0d9d831e7f238fbd31030","title":"Performance Counters—LR Mediator, Processing","path":"/lrsiem/7.18.0/performance-counterslr-mediator-processing","children":[]},{"id":"ci_4a21dc86a639a8c126d8ad7e366c7e271aad510b9ab72da274e93aa8e4690870","title":"Performance Counters—LR Mediator, Stats","path":"/lrsiem/7.18.0/performance-counterslr-mediator-stats","children":[]},{"id":"ci_24bfd75cbac0f41dfcf8dac21a1777595c57c87eddc11f9580e92d44c3c718d8","title":"Performance Counters—LR Mediator, True Source","path":"/lrsiem/7.18.0/performance-counterslr-mediator-true-source","children":[]},{"id":"ci_c27b70c0099e51b08721d9ee34d723891c6e63197ca0c9f03a7378877b3677ed","title":"Performance Counters—LR Messaging (DP to DX)","path":"/lrsiem/7.18.0/performance-counterslr-messaging-dp-to-dx","children":[]},{"id":"ci_3a976e6087c9fba223fd7a073fda5c22263d4b2b099590ae956ea87d6ff2b32a","title":"Performance Counters—LR System Monitor","path":"/lrsiem/7.18.0/performance-counterslr-system-monitor","children":[]},{"id":"ci_be4d5e56b204ac2f611b6ac0215a4fb107bd28a920466b7b327cf4d34cb111df","title":"View and Add Performance Counters","path":"/lrsiem/7.18.0/view-and-add-performance-counters","children":[]}]}]},{"id":"ci_4e2a79f0edb3a16ab9b37e7eae3211babc63080ec405f0bcf9e77a8a3d09fbeb","title":"Deployment Manager","path":"/lrsiem/7.18.0/deployment-manager","children":[]},{"id":"ci_e15e1eb1b7f5fda1bf7f0189f9a44a969e64e3ce2cfc49e4568c2805425f75fa","title":"Deployment Security","path":"/lrsiem/7.18.0/deployment-security","children":[{"id":"ci_5214635028390bc892c24a05a8e1c05894f0c703ba31d96694a16a152a23081a","title":"Common Criteria Audit Data Generation","path":"/lrsiem/7.18.0/common-criteria-audit-data-generation","children":[{"id":"ci_6882a0ed290999e7f1c0f66e59658a3bb9542f464a82a2c236c296a43764792c","title":"Set Up the Audit Functionality","path":"/lrsiem/7.18.0/set-up-the-audit-functionality","children":[]},{"id":"ci_e3d3d92a438d7a05adfe9cb5be5c1b5bffaa5ea6d87d05be40a803eced6cb7ec","title":"Set up Discretionary Access Controls on the Trace Folder on an NTFS File System","path":"/lrsiem/7.18.0/set-up-discretionary-access-controls-on-the-trace-folder-on-an-ntfs-file-system","children":[]},{"id":"ci_7fa42b8452fb0d02bcd34d6f0b4af9933045e0dc40fe8cdb268ecf5f0de4dd6f","title":"Configure Windows Task to Alarm on Audit Trace Failure","path":"/lrsiem/7.18.0/configure-windows-task-to-alarm-on-audit-trace-failure","children":[]},{"id":"ci_1bb7633a871a6199e75c5f928c57f362884360dbeee7f2b36cea005a13d63a1e","title":"Configure SQL Server to Run Under Domain Account","path":"/lrsiem/7.18.0/configure-sql-server-to-run-under-domain-account","children":[]},{"id":"ci_204e239e679a1c7f3010f4391809ab59b072be41d7d27531fb28c81f4343d09a","title":"SQL Server Trace File Converter (TFC) User Guide","path":"/lrsiem/7.18.0/sql-server-trace-file-converter-tfc-user-guide","children":[{"id":"ci_9448cf41c207df4b002b21ab730947dc65cc03b0b5e28d6cb013fb1079b7543c","title":"Download the SQL TFC Installer","path":"/lrsiem/7.18.0/download-the-sql-tfc-installer","children":[]},{"id":"ci_a86472fdc9df1429d50265672dab6ae0408c9e3d14f9294782e3a6731d6d795c","title":"Install the SQL Server TFC Server","path":"/lrsiem/7.18.0/install-the-sql-server-tfc-server","children":[]},{"id":"ci_c7cdb51684eccee39f5cc26fbb6e80693f152e1acb9e11a1b4adf9e737d69bdb","title":"Configure SQL Server TFC","path":"/lrsiem/7.18.0/configure-sql-server-tfc","children":[]},{"id":"ci_1904b5601fced5581c8f6004b5bca03fe208f7a120e1f2b2eabd8c8725688c79","title":"Add a SQL Server TFC Log Source","path":"/lrsiem/7.18.0/add-a-sql-server-tfc-log-source","children":[]}]}]},{"id":"ci_4e28148d431d7f4ed2926cc403b230c07d1b8bc363f521abfc03b9b903010543","title":"Common Criteria","path":"/lrsiem/7.18.0/common-criteria","children":[{"id":"ci_11b646c3f2e94e5470f8869618489c9e753dea06caec5a6b26f7fc595313cd25","title":"Web Console Compliance","path":"/lrsiem/7.18.0/web-console-compliance","children":[{"id":"ci_9fbf4ef2be18f54518b00a5756eec930f0306386b404e2f118cbbf5bcee11060","title":"Auto Logout for Idle Users (US9521)","path":"/lrsiem/7.18.0/auto-logout-for-idle-users-us9521","children":[]},{"id":"ci_787e6e1f3785eaec5dd0cb803b30e32ca455423bb6447d743b360e5af4f7164b","title":"Nginx File Configuration Updates (US9305)","path":"/lrsiem/7.18.0/nginx-file-configuration-updates-us9305","children":[]},{"id":"ci_e935450d2f98129cc9ee694ba089a4f063e0116cbc72736c745d79a9ee5b6cf8","title":"Requirements","path":"/lrsiem/7.18.0/requirements","children":[]},{"id":"ci_a83ed926a232aa309c1332d02ed794232ee28b0aa707191bc7393c794efdeb2a","title":"Warning Banner on Login Page (US9518)","path":"/lrsiem/7.18.0/warning-banner-on-login-page-us9518","children":[]},{"id":"ci_a9141facc4593dd3c5f6abdba156a1a091af577705236afa5c8399a9c08e57c7","title":"Web Console FIPS Compliance Configuration (US9525)","path":"/lrsiem/7.18.0/web-console-fips-compliance-configuration-us9525","children":[]},{"id":"ci_0bf44efeab7f3aef8f8ebc6fbdcfd25b3ad75ff8a85bb32aa4533e600d3cdf5f","title":"Web Console Logout Button (US9519)","path":"/lrsiem/7.18.0/web-console-logout-button-us9519","children":[]}]}]},{"id":"ci_8e85218f083dabff86b7ab3ed8d249aac663860bd5b5d846b498b9cdc0a35757","title":"Federal Information Processing Standards (FIPS)","path":"/lrsiem/7.18.0/federal-information-processing-standards-fips","children":[{"id":"ci_b83dfd91067f70c11b7c447a60cb7eab8af9c296c2dc837a4aa59c65c721b338","title":"Configure User Access Control for FIPS Mode","path":"/lrsiem/7.18.0/configure-user-access-control-for-fips-mode","children":[]},{"id":"ci_b8b3a2c842d465b52b635381c10b47586882037f71d02ed93b58fad39aa37fed","title":"Configure LogRhythm XM for FIPS Mode","path":"/lrsiem/7.18.0/configure-logrhythm-xm-for-fips-mode","children":[]},{"id":"ci_edbc6a5891a090089df3b402fe29854ea5ad1b1e7431bb62a6b40fd30d76c40d","title":"Configure LogRhythm DPAWC + DX for FIPS Mode","path":"/lrsiem/7.18.0/configure-logrhythm-dpawc-dx-for-fips-mode","children":[{"id":"ci_aeb50e9cd21af8ec4df491d721c38695029f0ccfdf970b8780fc72f3a07afec4","title":"Configure LogRhythm DPAWC","path":"/lrsiem/7.18.0/configure-logrhythm-dpawc","children":[]},{"id":"ci_fef7f700905cd0b613989a404de5b7b9bd52133ecf7d60fd367b7c1eb631256f","title":"Configure LogRhythm DX","path":"/lrsiem/7.18.0/configure-logrhythm-dx","children":[]},{"id":"ci_7d4467a7c61a8d34105e2cadf4ad74a2be8a0e67105f75dcfde19035abac5928","title":"Establishing IPsec Communications between Windows & Linux OS","path":"/lrsiem/7.18.0/establishing-ipsec-communications-between-windows-linux-os","children":[{"id":"ci_dab69a854e931d20fbffa6aee1874dc2e2e93e388764877169a5adeadb5597af","title":"Windows OS IPsec Configuration","path":"/lrsiem/7.18.0/windows-os-ipsec-configuration","children":[{"id":"ci_e604e0906b4b34c98d580218712916e3a556e2125f4eb5837a9c5e0def20746f","title":"Create a Custom MMC Console","path":"/lrsiem/7.18.0/create-a-custom-mmc-console","children":[]},{"id":"ci_1ffa355aa18e9dbc68677944120d04143873e3bd21dcbaa71977f0e5ed68c4dd","title":"Enable Audit Policy for Your Computer","path":"/lrsiem/7.18.0/enable-audit-policy-for-your-computer","children":[]},{"id":"ci_dff25c0382519561311bae741417c327d14d4ae14bd64e1395eab358a4f36247","title":"Build a Custom IPsec Policy","path":"/lrsiem/7.18.0/build-a-custom-ipsec-policy","children":[]},{"id":"ci_926fa630902bc8ca41a406213c3c08a76eccddddaa2f69ff37f725b961048c3c","title":"Configure an IPsec Filter List","path":"/lrsiem/7.18.0/configure-an-ipsec-filter-list","children":[]},{"id":"ci_53f3ece5d77bdea1679ce46da37348e33df1ad5d259b0b9f67c890ee3f9e2ead","title":"Configure an IKE Authentication Method","path":"/lrsiem/7.18.0/configure-an-ike-authentication-method","children":[]}]},{"id":"ci_17a9aafd992d81d4b02e5198526ce0e9cd8daf75cc45eaf7fa8382a9c5acdb21","title":"Linux/CentOS IPsec Configuration","path":"/lrsiem/7.18.0/linux-centos-ipsec-configuration","children":[{"id":"ci_0c0c5a4b30bc7df7d1ffe4aeeba0afd81091dbd84c4e5cf8dfc615c6d76e6505","title":"Configure IPsec on Linux Machine","path":"/lrsiem/7.18.0/configure-ipsec-on-linux-machine","children":[]},{"id":"ci_acd8e3cb09f6107951dc6fcc69faf88e21c4b246423fee6a9d4094cb08b7c491","title":"Put Linux/CentOS into FIPS Mode","path":"/lrsiem/7.18.0/put-linux-centos-into-fips-mode","children":[]}]},{"id":"ci_6be171943b37e30d7b98eb4e65a4c15e4ead37ffa7b315a66a058d3bbad3558a","title":"Test Your Custom IPsec Policy on both Computers","path":"/lrsiem/7.18.0/test-your-custom-ipsec-policy-on-both-computers","children":[]}]}]},{"id":"ci_af9bee3b20ae3ba2d54215e738b971b6845c5198e26a0df97624e81beda3ef77","title":"Force Encrypted Connections for SQL (Recommended)","path":"/lrsiem/7.18.0/force-encrypted-connections-for-sql-recommended","children":[]},{"id":"ci_d7b47de4a3113c7540ac28683a6c21a0a75bd8ed5ea10cc8facb9d54a7a6dbb9","title":"Deploy LogRhythm in a FIPS-Enabled Domain","path":"/lrsiem/7.18.0/deploy-logrhythm-in-a-fips-enabled-domain","children":[]},{"id":"ci_9d40f10f2622533e6e466c085c0e5a79fdd6ac3e552c3ab7168afc565623e67f","title":"Put Windows into FIPS Mode","path":"/lrsiem/7.18.0/put-windows-into-fips-mode","children":[]},{"id":"ci_3765789ca530e4adc78bd43325b988749e7f637bd9eef6240552a72375aef9d5","title":"Configure LogRhythm Services and the Windows Data Indexer for FIPS Mode","path":"/lrsiem/7.18.0/configure-logrhythm-services-and-the-windows-data-indexer-for-fips-mode","children":[]}]},{"id":"ci_673ac7d45805d8ba8d2bb3d0c3344054e89b6180ff1c93e967638f9e14cf3737","title":"Integrated Security","path":"/lrsiem/7.18.0/integrated-security","children":[{"id":"ci_aa4536260fa17fc599e134ddb47f8311bd09c6d6b9e26facc702e3281651fff9","title":"Create Accounts for LogRhythm Components","path":"/lrsiem/7.18.0/create-accounts-for-logrhythm-components","children":[]},{"id":"ci_47094b289bd47d0b9b33e11b1a47fd14100db7fbf4d37acf150a4af0525a89c1","title":"Configure Database Access","path":"/lrsiem/7.18.0/configure-database-access","children":[]},{"id":"ci_3f90a027a682d8b1937b527642094975cdbc214c87f29988db6777f60605ef75","title":"Shut Down LogRhythm Services","path":"/lrsiem/7.18.0/shut-down-logrhythm-services","children":[]},{"id":"ci_1abe16ea383aeb305ea43a01d6a7c640817a896c485f8e2139e776cc21c4be7c","title":"Reconfigure LogRhythm Services to Use Integrated Security","path":"/lrsiem/7.18.0/reconfigure-logrhythm-services-to-use-integrated-security","children":[]},{"id":"ci_70f3bc3494fca9e908e7877158303d1918f25f25b47c59fc0dc74746eee81942","title":"Enable Mixed Authentication Mode","path":"/lrsiem/7.18.0/enable-mixed-authentication-mode","children":[]},{"id":"ci_515837d0c320bb8cd14f7a4a9278536d42e0180b88e1dd92bbd35cb7dfb77ef4","title":"Restart LogRhythm Services","path":"/lrsiem/7.18.0/restart-logrhythm-services","children":[]}]},{"id":"ci_b6f75e6882d85c52439c8060ac24586af685f5ae5175944adb2e29060bd64fc5","title":"Least Privileged User","path":"/lrsiem/7.18.0/least-privileged-user","children":[{"id":"ci_0a0360747cc880cb282bdd9e3c3eb1919982f3e857356c0cec8a094b8fec6b7c","title":"Configuring LogRhythm Permissions","path":"/lrsiem/7.18.0/configuring-logrhythm-permissions","children":[]},{"id":"ci_d62cc1d68f2ab731553b9bb0006e772bb4bb48639c9bd3173fbc0bd9efc8157f","title":"Least Privileged User: DP, Mediator Server","path":"/lrsiem/7.18.0/least-privileged-user-dp-mediator-server","children":[]},{"id":"ci_0b30b4caf63d2c3716b9d330577aa913ecbe5d50e98947e8a44d08a6516eb627","title":"Least Privileged User: DX, Linux","path":"/lrsiem/7.18.0/least-privileged-user-dx-linux","children":[]},{"id":"ci_8163f30c1bf10363ae73f3094e962f7df1893c667c2641077d28906cd18fd653","title":"Least Privileged User: DX, Windows","path":"/lrsiem/7.18.0/least-privileged-user-dx-windows","children":[]},{"id":"ci_26407510108ca8623f8889bf192568bea70c2b7251825f1a35247dfb94ca96d5","title":"Least Privileged User: PM, Advanced Intelligence Engine","path":"/lrsiem/7.18.0/least-privileged-user-pm-advanced-intelligence-engine","children":[]},{"id":"ci_98daae3fa75ed56fd32042ac4b5385f029cc3dae3d5231d388dc21e05b191ca3","title":"Least Privileged User: PM, AIE Communication Manager","path":"/lrsiem/7.18.0/least-privileged-user-pm-aie-communication-manager","children":[]},{"id":"ci_904df3a32d0527976e0f738fe4d8f31188dc6bbbdb948cdba3a95dbd8efde731","title":"Least Privileged User: PM, Alarming and Response Manager","path":"/lrsiem/7.18.0/least-privileged-user-pm-alarming-and-response-manager","children":[]},{"id":"ci_b96b56255137a91567076a86bf05f0da6d754e9e2583d665fee99ca91736cf70","title":"Least Privileged User: PM, Disaster Recovery","path":"/lrsiem/7.18.0/least-privileged-user-pm-disaster-recovery","children":[]},{"id":"ci_f72d926ace626c0c64f7c266aa052f04cd31eb29a9a4981444dc8f0195de8678","title":"Least Privileged User: PM, High Availability","path":"/lrsiem/7.18.0/least-privileged-user-pm-high-availability","children":[]},{"id":"ci_7081c09185211fd44ba16ebcd7cdf30d2af06a5ef5df4e1f24eb08a6b1d1b488","title":"Least Privileged User: PM, Job Manager","path":"/lrsiem/7.18.0/least-privileged-user-pm-job-manager","children":[]},{"id":"ci_b38b92abe6fd07e4b2d7f6c92a62c52343da59a77e7ce26e6fdaab534a790a91","title":"Least Privileged User: PM, Web Console","path":"/lrsiem/7.18.0/least-privileged-user-pm-web-console","children":[]},{"id":"ci_acd7d7f4c96b33f4072efc6d70a65c09e73c535cf65c8ece03edee3ba525121a","title":"Least Privileged User: SysMon, Linux, Unix","path":"/lrsiem/7.18.0/least-privileged-user-sysmon-linux-unix","children":[]},{"id":"ci_21d939b68d65c9949e87bb0cf8666c0159a3a88724073ac0a9c2b3a000a73bf6","title":"Least Privileged User: SysMon, Windows","path":"/lrsiem/7.18.0/least-privileged-user-sysmon-windows","children":[]}]},{"id":"ci_a9f8b61ccb0ed76d75f350283233438ce11b6f55b9853bd131f35fa54fe0cc81","title":"Public Key Infrastructure (PKI) Support","path":"/lrsiem/7.18.0/public-key-infrastructure-pki-support","children":[{"id":"ci_8e6897fcb984f9f61dbde23a85bfd4852ae32b35f2bba09cdaa9ec6937c90207","title":"Certificate Configuration for LogRhythm Component Connections","path":"/lrsiem/7.18.0/certificate-configuration-for-logrhythm-component-connections","children":[]},{"id":"ci_65478e3087f6a9149121990b6811378145357fa4e29bf3984fd44db7ee309726","title":"Create a Certificate for Microsoft SQL Server Connections","path":"/lrsiem/7.18.0/create-a-certificate-for-microsoft-sql-server-connections","children":[]},{"id":"ci_085c15d415c2626f16cab2923ebf2968e4f012d85bb34cfdbf7c4b11adc6c186","title":"Create Client and Server Certificates","path":"/lrsiem/7.18.0/create-client-and-server-certificates","children":[]},{"id":"ci_580ca7c6ba7b3051acbd6b8c54224784da285027fd2f60994b94423af67a9020","title":"Verify Certificates","path":"/lrsiem/7.18.0/verify-certificates","children":[]},{"id":"ci_4ff3895f795d6389a05451d7fdb030d51aec4f894c73dddfd97d3df10b0c5699","title":"View an Example of Configuring Mutual Authentication in LogRhythm","path":"/lrsiem/7.18.0/view-an-example-of-configuring-mutual-authentication-in-logrhythm","children":[]},{"id":"ci_1347503063ee3a9eb1e7a346d7fdedf813020ce427da2ca91778b164ead57137","title":"View an Example of Configuring Certificates for AI Engine","path":"/lrsiem/7.18.0/view-an-example-of-configuring-certificates-for-ai-engine","children":[]}]},{"id":"ci_1b16397d19027e9f5a6c94aedffc899129e501569bf2d50ea865119fe57c6a8a","title":"Security Banners","path":"/lrsiem/7.18.0/security-banners","children":[{"id":"ci_c33c6e852d0746c94e953a48f198835666733ed002c18d4649a563c06179ae3c","title":"Configure the Session-Timeout Error Message","path":"/lrsiem/7.18.0/configure-the-session-timeout-error-message","children":[]},{"id":"ci_14eefc93bd0c232e765857cb05376bb5476726a6114a76eea4dac91d9cba2d6e","title":"Configure the Start-Up Warning","path":"/lrsiem/7.18.0/configure-the-start-up-warning","children":[]}]},{"id":"ci_0859d016c9ab16c7df069591afdb663c2e6b2172e3dab458fbf75980fbc42aaf","title":"LogRhythm Default Passwords","path":"/lrsiem/7.18.0/logrhythm-default-passwords","children":[]},{"id":"ci_f82e75573052e54ad4cf6e73ef50878ef50ff182fd47a075b46a7123487a96e8","title":"Enhanced Auditing","path":"/lrsiem/7.18.0/enhanced-auditing","children":[{"id":"ci_8cc72829a9499d78e09214c52c4145789a7c91cec7ec88ff8a67fcff9baab422","title":"Collect Enhanced Audit Logs","path":"/lrsiem/7.18.0/collect-enhanced-audit-logs","children":[]}]},{"id":"ci_bc80a7d3bdb1b93349f7ac14183c55c0db7d64d0048f431cbe2b126e17e10c4e","title":"Query Auditing","path":"/lrsiem/7.18.0/query-auditing","children":[]}]},{"id":"ci_20ef30be1e29d7d14eaf7b0f302eb93ef707d206e6a501b7869c12a9a54a53b8","title":"Endpoint Monitoring","path":"/lrsiem/7.18.0/endpoint-monitoring","children":[{"id":"ci_2ea457b8e6d6bcf43816faec10d246a7e5b39f4dc69e2dedb7d4c33205307594","title":"Data Loss Defender (DLD)","path":"/lrsiem/7.18.0/data-loss-defender-dld","children":[{"id":"ci_4907ae081d798d9de507fb0f963af70181282deee9839a8f2f7238c9b90202fc","title":"Create DLD Policies","path":"/lrsiem/7.18.0/create-dld-policies","children":[]},{"id":"ci_1acf35ec371da5f0f3abc2e1e09fdcdcb33f181458c6fe5d7546b5af3c61481b","title":"Delete DLD Policies","path":"/lrsiem/7.18.0/delete-dld-policies","children":[]},{"id":"ci_4d8eaa74bb52c7d781b71af3b0ae37d1678ebe3102333fa7bcd98d4c4448ac20","title":"Enable DLD for an Agent","path":"/lrsiem/7.18.0/enable-dld-for-an-agent","children":[]},{"id":"ci_aa0e3600a9b9b433ae92f8e850144f52303dd2fc3a2c9cff970ed9535e67920c","title":"Modify DLD Policies","path":"/lrsiem/7.18.0/modify-dld-policies","children":[]}]},{"id":"ci_29d5ef634e77c8a0ecdf93d3381b57475cfd6ac30285e54f67ba8fabc33af7cb","title":"File Integrity Monitor (FIM)","path":"/lrsiem/7.18.0/file-integrity-monitor-fim","children":[{"id":"ci_cae42bc0977b483c939580baa2d4cc1e1a6e7395688e726744a66ab0296f16ca","title":"Create File Integrity Monitor Policies","path":"/lrsiem/7.18.0/create-file-integrity-monitor-policies","children":[]},{"id":"ci_e80f326560878f9cbed0621dc410bf5526bae169997e7f4346b7cedf5e2b06dc","title":"Create Inclusions and Exclusions for FIM","path":"/lrsiem/7.18.0/create-inclusions-and-exclusions-for-fim","children":[]},{"id":"ci_ada0245fb164af0d7cad8f2ee897ee21d7a13fd3999986ab26a66e1d203b0296","title":"Associate a File Integrity Monitor Policy With an Agent","path":"/lrsiem/7.18.0/associate-a-file-integrity-monitor-policy-with-an-agent","children":[]},{"id":"ci_bdc7f3fd539ac832d592612867646216b70d2eb2642357fdf308b35f323a5338","title":"Modify File Integrity Monitor Policies","path":"/lrsiem/7.18.0/modify-file-integrity-monitor-policies","children":[]},{"id":"ci_ff7341e1cdbb80a8805dd5846cfd289d91c0a655576e27d037bc1a38d10a727a","title":"Clone File Integrity Monitor Policies","path":"/lrsiem/7.18.0/clone-file-integrity-monitor-policies","children":[]},{"id":"ci_4f3f300234cc0ca6e80ac8bcb3714249ead0f257c82e45898ba4be9897e6de89","title":"Delete File Integrity Monitor Policies","path":"/lrsiem/7.18.0/delete-file-integrity-monitor-policies","children":[]}]},{"id":"ci_d07de94d82ed4f41775b8efb7771aa076082fe23847cd5df484569de38d01576","title":"Network Connection Monitor (NCM)","path":"/lrsiem/7.18.0/network-connection-monitor-ncm","children":[{"id":"ci_976ca836de11e7383fdfff9579f5a84f70e503631486a5d05ce2bff94edb7339","title":"Enable NCM for an Agent","path":"/lrsiem/7.18.0/enable-ncm-for-an-agent","children":[]}]},{"id":"ci_dff1baf0b328afc0abc8d8afc7df38d6527fc291ec2c604e32ddc1b35861eb98","title":"Process Monitor","path":"/lrsiem/7.18.0/process-monitor","children":[{"id":"ci_37402ae75b83ce0a594af062d5770c61091355c334d1f237436fcd67f2a517c6","title":"Enable Process Monitor for an Agent","path":"/lrsiem/7.18.0/enable-process-monitor-for-an-agent","children":[]}]},{"id":"ci_43d9f5e24bd3a43e00628ad97cf2b77b90ef0f0356bcc2948a220cb735d852df","title":"Registry Integrity Monitor (RIM)","path":"/lrsiem/7.18.0/registry-integrity-monitor-rim","children":[{"id":"ci_d24743ec268c456080d3dfa2645cda18b7efbf4b5f3e33ec2163e3a2b9dd475e","title":"Associate Items to RIM Policies","path":"/lrsiem/7.18.0/associate-items-to-rim-policies","children":[]},{"id":"ci_d10dfa5a808d583a4ec47bb98570f335fe7d03c3e31215580df4d1eec8e5a3b4","title":"Associate RIM Policies to Windows System Monitor Agents","path":"/lrsiem/7.18.0/associate-rim-policies-to-windows-system-monitor-agents","children":[]},{"id":"ci_40ea08e524570e6bc1a2f141a29e8c2ac997a1bc5496eda9d7e379d5387f5212","title":"Configure RIM Policy Items","path":"/lrsiem/7.18.0/configure-rim-policy-items","children":[]},{"id":"ci_b851908d5df2e3ce7d2776ce3b6026ca4e5a006558216124d994b9c2fc004916","title":"Create RIM Policies","path":"/lrsiem/7.18.0/create-rim-policies","children":[]},{"id":"ci_318037279ac7d95342702fc4f617e44a61f8f4b1443f3a0205c37fd6d9573b1f","title":"Delete RIM Policies","path":"/lrsiem/7.18.0/delete-rim-policies","children":[]},{"id":"ci_41c0d35a79d6e75afd959a73ed9c18ce59d40c4f5d304996aa314a7db084df2b","title":"Delete RIM Policy Items","path":"/lrsiem/7.18.0/delete-rim-policy-items","children":[]},{"id":"ci_b592befe3789b4c914eafc5361941b0a1aa46aa318ae80c4e8f43674747302ae","title":"Modify RIM Policies","path":"/lrsiem/7.18.0/modify-rim-policies","children":[]},{"id":"ci_9d802880c753e32c9c29583237ecff628669ab19c5062ea3790aca40fe798fc9","title":"Modify RIM Policy Items","path":"/lrsiem/7.18.0/modify-rim-policy-items","children":[]}]},{"id":"ci_6a1ccdb0ce704367e87965e2dcae1a52e331da99b07a00c81473bf7d60354d23","title":"User Activity Monitor (UAM)","path":"/lrsiem/7.18.0/user-activity-monitor-uam","children":[{"id":"ci_99cecd57635353c36587ec0c0fd707ca44718519d8744c7cb73fe2e386e3051c","title":"Enable UAM for an Agent","path":"/lrsiem/7.18.0/enable-uam-for-an-agent","children":[]},{"id":"ci_e149ffad1dce4dc61a7096f2e221307c3c0579452b0be0320b01640fab5f1a94","title":"Include UAM in File Integrity Monitor","path":"/lrsiem/7.18.0/include-uam-in-file-integrity-monitor","children":[]}]}]},{"id":"ci_1bd22dd455902442de4f5870029c512935592f0f7195ae6812c2982d2bf93c8e","title":"Entities","path":"/lrsiem/7.18.0/entities","children":[{"id":"ci_0a5075aeea91055cbd1632211ac6c0901797b3b476eec2c77676a56cae040fe6","title":"Add a Single Entity","path":"/lrsiem/7.18.0/add-a-single-entity","children":[]},{"id":"ci_f1ee5b22fbb58c91c9cc217285b0a922f479863396beafe8160430969ce3ce8f","title":"Bulk Import Entities From a File","path":"/lrsiem/7.18.0/bulk-import-entities-from-a-file","children":[]},{"id":"ci_873c12b85ffb0cddc88615011e301c8fb077b5584b080962b3b1faf1c005a465","title":"Delete Entities","path":"/lrsiem/7.18.0/delete-entities","children":[]},{"id":"ci_3c5c16b46d59e2fb2de5131129f82267147d8405fdc3373a7093d75403bd3a37","title":"Modify Entities","path":"/lrsiem/7.18.0/modify-entities","children":[]},{"id":"ci_65a0435e07160418359c0650901f0dd5aa762f849d37036c1497e3408ea1cfc2","title":"Run the Entities Reorganization Wizard","path":"/lrsiem/7.18.0/run-the-entities-reorganization-wizard","children":[]}]},{"id":"ci_378012bf1296ac3cd870cb6c77854188652de58e485be0f521429bac0c661fdb","title":"Global Log Processing Rules","path":"/lrsiem/7.18.0/global-log-processing-rules","children":[{"id":"ci_092f7e2bf76066f307af275bf0cb4ef94dd8d7911059537160636fb73d7b67d0","title":"Create Global Log Processing Rules","path":"/lrsiem/7.18.0/create-global-log-processing-rules","children":[]},{"id":"ci_649c083cf14cdfba1842332455c803bee42000dac06aaa66876c5715765e5b43","title":"Modify Global Log Processing Rules","path":"/lrsiem/7.18.0/modify-global-log-processing-rules","children":[]}]},{"id":"ci_12b1619cc650c113373c397729dc259e65effc023a6d7cf3cdec428b2d433021","title":"Host Records","path":"/lrsiem/7.18.0/host-records","children":[{"id":"ci_397c7012c260c13530420283829e7d5ecba05cddb29c0fed0614d68d7bb176ee","title":"Add Host Records Manually","path":"/lrsiem/7.18.0/add-host-records-manually","children":[]},{"id":"ci_da5328087b03bcb1ff050d9a971cc3496e2cc6033133e040311de60cdc48717d","title":"Add Hosts From Clipboard","path":"/lrsiem/7.18.0/add-hosts-from-clipboard","children":[]},{"id":"ci_33bb55f3972740a3dd1b03e9ed2470598a5fd17ba547d7c84da2655a6b7e0b57","title":"Add Hosts From File","path":"/lrsiem/7.18.0/add-hosts-from-file","children":[]},{"id":"ci_ec75bf0ba40d94d3b6de6ac2844aea6d62cd0c8597b51d2331b110938901b06c","title":"Add Origin Hosts or Impacted Hosts as Known Hosts","path":"/lrsiem/7.18.0/add-origin-hosts-or-impacted-hosts-as-known-hosts","children":[]},{"id":"ci_314f67194be945c2a24de7faba2c592673768a3536d5ebc326254ef6956ac8d3","title":"Add or Remove Multiple Host Roles","path":"/lrsiem/7.18.0/add-or-remove-multiple-host-roles","children":[]},{"id":"ci_c374ad9b2539c4efebf0b223aa8eb149e26687f8013b76db33134bdf289b2029","title":"Export Multiple Host Roles to File","path":"/lrsiem/7.18.0/export-multiple-host-roles-to-file","children":[]},{"id":"ci_0eb67d4ae9766270f259c57f9bbc275601f9daed59aa205e08b5324d6d6c90bd","title":"Modify Properties for a Single Host Record","path":"/lrsiem/7.18.0/modify-properties-for-a-single-host-record","children":[]},{"id":"ci_6de1627224dbde45326abbcc448e4acb7458e07ec64bd7e65cd0a0f96f9c2518","title":"Modify Properties for Multiple Host Records","path":"/lrsiem/7.18.0/modify-properties-for-multiple-host-records","children":[]},{"id":"ci_9bbe8046f6deb919fc7f2ce03a41443cbb1f2f34145195101b00586c50a46b9e","title":"Resolve Known Hosts","path":"/lrsiem/7.18.0/resolve-known-hosts","children":[]},{"id":"ci_0d09aa2c5866fcfbb3695ce96ef50b50c901cb35b2023a4b65f61197b8d5e261","title":"Retire Host Records","path":"/lrsiem/7.18.0/retire-host-records","children":[]},{"id":"ci_22540bc6cc8b6f014ef0d09ec7f1c396c7c230b08007fb035ae04400c93ddeed","title":"Search for Hosts","path":"/lrsiem/7.18.0/search-for-hosts","children":[]},{"id":"ci_80e38599d414c73261e1968d5d6c8cbdc32f6c97fe722f82cbba6b2519057802","title":"Windows Host Wizard","path":"/lrsiem/7.18.0/windows-host-wizard","children":[{"id":"ci_dd3ddeb702e38b6e94659fc320e0a23728dfc0d0139a118ecf09e35f2b903788","title":"Configure Initial Host Settings in Windows Host Wizard","path":"/lrsiem/7.18.0/configure-initial-host-settings-in-windows-host-wizard","children":[]},{"id":"ci_82dd52b7aaa1355d507a61f7239b0ceed55ba7ef2a353718442e4d154aa38ee0","title":"Import Computers for Log Collection","path":"/lrsiem/7.18.0/import-computers-for-log-collection","children":[]},{"id":"ci_ba76c2062cdb34c385c2e2a89429872c2213720a32dd774d89154cc09fbacc4e","title":"Perform Optional Configuration for Remote Log Collection","path":"/lrsiem/7.18.0/perform-optional-configuration-for-remote-log-collection","children":[]},{"id":"ci_0749bb5ca3fad019bee910b662782c06957aed29b693f9c2649843e8f3a26214","title":"Query Computers with Windows Host Wizard","path":"/lrsiem/7.18.0/query-computers-with-windows-host-wizard","children":[]},{"id":"ci_b0ad03af67853e127d8679a2736a319c6d034734c4af66743f968061a5318222","title":"Review Computers with Windows Host Wizard","path":"/lrsiem/7.18.0/review-computers-with-windows-host-wizard","children":[]},{"id":"ci_7e73e67377824cd34a600c19f5f09c5f238340660abcc5e59028ef0a6764f6ed","title":"Scan a Domain for Computers","path":"/lrsiem/7.18.0/scan-a-domain-for-computers","children":[]},{"id":"ci_0236799a816d8dc4c8aeab9c67c68ae98dd4b24c125dbcca72ed1c84ff0bbf41","title":"Work with Hosts and Agents in Windows Host Wizard","path":"/lrsiem/7.18.0/work-with-hosts-and-agents-in-windows-host-wizard","children":[]}]}]},{"id":"ci_06f32272d8b740447300894b226ebcd468705bda5a13ba2e84707c6176e40b57","title":"Knowledge Base","path":"/lrsiem/7.18.0/knowledge-base","children":[{"id":"ci_a94d90b03c19f857d5065bcbe35aaca328024493d3cb1d959123d93917992132","title":"Back Up the EMDB","path":"/lrsiem/7.18.0/back-up-the-emdb","children":[]},{"id":"ci_9126b73af19ad3df88d2e74dc9f74e0aac5427f321d00ff8b69c053c7f59e5a3","title":"Configure Knowledge Base Synchronization Settings","path":"/lrsiem/7.18.0/configure-knowledge-base-synchronization-settings","children":[]},{"id":"ci_713fa0382546c70920b773a0ed3fdd62134d8fde9a75e3bc521f208189e5b079","title":"Download the Knowledge Base File","path":"/lrsiem/7.18.0/download-the-knowledge-base-file","children":[]},{"id":"ci_5cbea636d98db3e67da29e3b6aa7d49465fc4e96ea3f75967fc467c23fc7d825","title":"Import a Knowledge Base","path":"/lrsiem/7.18.0/import-a-knowledge-base","children":[]},{"id":"ci_56a7cf6a67421f650340cb5924a527cd15935e5d29fb90112e5bf639cbdbc37f","title":"Knowledge Base Manager","path":"/lrsiem/7.18.0/knowledge-base-manager","children":[{"id":"ci_28320c4afc7a60483a5a6c03c979c1f9cac3f456b5d9b5593ad0b99af2d2480a","title":"Disable Knowledge Base Modules","path":"/lrsiem/7.18.0/disable-knowledge-base-modules","children":[]},{"id":"ci_380094bfa751bba0a32ba90fa916008668856ee59328c06df157647fbeedf8a6","title":"Enable Knowledge Base Modules","path":"/lrsiem/7.18.0/enable-knowledge-base-modules","children":[]},{"id":"ci_8577b082fb59f6dbbb4b2052cbcf2c5c2c238102f2f09be05558b08bc0640fc8","title":"Export Knowledge Base Module Information to a File","path":"/lrsiem/7.18.0/export-knowledge-base-module-information-to-a-file","children":[]},{"id":"ci_326792dbff55d616f6bf2d09b472da13620a65526077948c2a4439c655c1409e","title":"Migrate Common Events","path":"/lrsiem/7.18.0/migrate-common-events","children":[]},{"id":"ci_0af3692ef5ad9f86430407ae497f212dfa680fbaa0afbdbc19d0e68b90854b43","title":"Modify the Properties of Knowledge Base Modules","path":"/lrsiem/7.18.0/modify-the-properties-of-knowledge-base-modules","children":[]},{"id":"ci_5f5fca1cca9f58c8574221be63b2c2995747e50b8024134df44dfc56e4c636f9","title":"View Knowledge Base Module Dependent Objects","path":"/lrsiem/7.18.0/view-knowledge-base-module-dependent-objects","children":[]}]}]},{"id":"ci_5211de581f03f822b71c58c886e88e0120b7391f954790d8561652b9980c995f","title":"Log Distribution Services","path":"/lrsiem/7.18.0/log-distribution-services","children":[{"id":"ci_b70882837dbe77cc3db5b9fb555d34f7e799441e1465f34e3a02d23a288c64da","title":"Log Distribution Receiver Manager","path":"/lrsiem/7.18.0/log-distribution-receiver-manager","children":[{"id":"ci_d2a5318712b543b57c169c8047d5484aa2050513ca177e9504b430bd89452488","title":"Create Log Distribution Receivers","path":"/lrsiem/7.18.0/create-log-distribution-receivers","children":[]},{"id":"ci_1a0aa00307000292a30bf2b5e897228270af4ba365db0a5e218c6d4ac4844c3e","title":"Enable Log Distribution Receivers","path":"/lrsiem/7.18.0/enable-log-distribution-receivers","children":[]},{"id":"ci_a44841a3882c618bbb6abe6642fa4bb97d6efd23d01901999d16305eb0d8e141","title":"Modify Log Distribution Receivers","path":"/lrsiem/7.18.0/modify-log-distribution-receivers","children":[]}]},{"id":"ci_132319dc60c479bf314445813233c6132ca18de41e74cc43e80bc94852ae108c","title":"Log Distribution Policy Manager","path":"/lrsiem/7.18.0/log-distribution-policy-manager","children":[{"id":"ci_2cbc4aa23ee3e05bcce64d3380ba0ef7e1285b36f5e4072ff0264c2056328332","title":"Create Log Distribution Service Policies","path":"/lrsiem/7.18.0/create-log-distribution-service-policies","children":[]},{"id":"ci_4676a3f0f4e87dbab875cc1f6c57ffccc7a3efac9860141e69b2ad75f8256240","title":"Enable or Disable Log Distribution Service Policies","path":"/lrsiem/7.18.0/enable-or-disable-log-distribution-service-policies","children":[]},{"id":"ci_fb6d9e4babed171c7cbbe655fd6cf2b9d910b437f9cdbc56a4fb3f864bcfdc51","title":"Modify Log Distribution Service Policies","path":"/lrsiem/7.18.0/modify-log-distribution-service-policies","children":[]}]},{"id":"ci_822adec950fe798771f581d8f94323e6749e5c3d410128b90174bdb9d8362dbc","title":"LogRhythm Log Distribution Services Version 2","path":"/lrsiem/7.18.0/logrhythm-log-distribution-services-version-2","children":[{"id":"ci_9601bc1fa04005f624b69212cad7d131a929d4ceaf009a52b327021bdea43e80","title":"Determine When to Switch to Log Distribution Services v2","path":"/lrsiem/7.18.0/determine-when-to-switch-to-log-distribution-services-v2","children":[]},{"id":"ci_2d1efde09430b83d0ad2ee999e72be3ae7c3bdeb5190586c7d729c78acf8f0e5","title":"Enable Log Distribution Services v2","path":"/lrsiem/7.18.0/enable-log-distribution-services-v2","children":[]},{"id":"ci_c426aee7c9547d5b923ee491a60c4824968e003120c9ab0f35502dbdab10a149","title":"Troubleshoot Log Distribution Services v2","path":"/lrsiem/7.18.0/troubleshoot-log-distribution-services-v2","children":[]}]},{"id":"ci_7608f15e526f26a3e53f9b98924dfafcbf7460d9d553dea8f07c40363a2b5cea","title":"Modify Log Distribution Service Properties in Data Processors","path":"/lrsiem/7.18.0/modify-log-distribution-service-properties-in-data-processors","children":[]}]},{"id":"ci_d033735a67e17059f2aa613c964ed1294d958e0446a5978451dfa286b1f57860","title":"Log Processing Policies","path":"/lrsiem/7.18.0/log-processing-policies","children":[{"id":"ci_091c6b72d937057ee0e3df1682c8fa756abfc6c747a7c82c5dd15edab7af67b1","title":"Create Log Processing Policies","path":"/lrsiem/7.18.0/create-log-processing-policies","children":[]},{"id":"ci_8f7573bd76269cf89c24ac587faf796fc820e5b3b958f2f732910839398fbc1c","title":"Assign Log Processing Policies","path":"/lrsiem/7.18.0/assign-log-processing-policies","children":[]},{"id":"ci_52a605140688b727ce11d21397cfdaa3f2c44ef706266af1205c29bcf72d18f3","title":"Modify Log Processing Policies","path":"/lrsiem/7.18.0/modify-log-processing-policies","children":[]},{"id":"ci_dde627d6256d3af232dcf2aa961eaa69710c0c53544d55a5a85ed2d779dbc71f","title":"Delete Log Processing Policies","path":"/lrsiem/7.18.0/delete-log-processing-policies","children":[]},{"id":"ci_cfd69bb3fdd4027de1c7f9ea55bcf83e581195a85e431d961e8302bcbad0a24a","title":"Troubleshoot MPE Rule Performance","path":"/lrsiem/7.18.0/troubleshoot-mpe-rule-performance","children":[]}]},{"id":"ci_9d85ae7685827b7de2c7ec697f88b15163c6060f680489c6e2d696229d522a76","title":"Log Sources","path":"/lrsiem/7.18.0/log-sources","children":[{"id":"ci_18362aedf1bcff5b0b4eb8f54703991128bf7e0293579e9ba38c7b04245dd370","title":"Work With Log Sources","path":"/lrsiem/7.18.0/work-with-log-sources","children":[{"id":"ci_0f1d4b4846d8550e88cee9075a9268a35f396533bebcb8f474742db76d1f853c","title":"Add a Single Log Source","path":"/lrsiem/7.18.0/add-a-single-log-source","children":[]},{"id":"ci_33c16be276648e118456812a92e10c97fc6b3de432fe3811b9e1c74e3805bd8c","title":"Add Multiple Log Sources","path":"/lrsiem/7.18.0/add-multiple-log-sources","children":[]},{"id":"ci_12e5448e1e2489a0ef51bd6c3af136db6e3d9f1ad626b54a0bc27219858e3ca5","title":"Associate New Log Sources","path":"/lrsiem/7.18.0/associate-new-log-sources","children":[]},{"id":"ci_f6c06af166305b91040e9af945fd613d03a7ff2452bf6a7d7b4b5f462974d043","title":"Collect Local Event Logs with the Server Service Disabled","path":"/lrsiem/7.18.0/collect-local-event-logs-with-the-server-service-disabled","children":[]},{"id":"ci_813a40018bb06b5a6ef6bd12846509a548c6320f078095efde0d7ad6f77d53cb","title":"Configure Log Sources Automatically","path":"/lrsiem/7.18.0/configure-log-sources-automatically","children":[{"id":"ci_4415490a2fdcd0825b1560c227f2ee635224e99f2660ebfd0b71515984ebe3ac","title":"Add and Delete SNMP Connections","path":"/lrsiem/7.18.0/add-and-delete-snmp-connections","children":[]},{"id":"ci_a892836f373ad7d9b9df34c2810752764b311e0acf470725b4c4ab5af2f045c3","title":"Enable Automatic Log Source Configuration","path":"/lrsiem/7.18.0/enable-automatic-log-source-configuration","children":[]},{"id":"ci_910ffa390bf6fdd7e9e03fe596bb1b35ae6d8507a1a5d0f8c47730316bacd037","title":"Use the Advanced Criteria Manager","path":"/lrsiem/7.18.0/use-the-advanced-criteria-manager","children":[]}]},{"id":"ci_c10cb39581e43d37d9378deed04c91fda430bb9a539bdf302a0156952e746f1b","title":"Configure Support for Multi-Line Logs","path":"/lrsiem/7.18.0/configure-support-for-multi-line-logs","children":[]},{"id":"ci_e94a1ced2dbab2f8da67fbae6beba85406c26663604dd17b7665070ef5686b6c","title":"Export Log Sources","path":"/lrsiem/7.18.0/export-log-sources","children":[]},{"id":"ci_f17a4395c5aa07a9a711e903a3d041bf0abde7caf3bc76db54841c3758e50d64","title":"Modify a Single Log Source","path":"/lrsiem/7.18.0/modify-a-single-log-source","children":[]},{"id":"ci_ebc5166643f8db0eee0470063022f25a2365b32ff0985f45c6370859d9eb8151","title":"Modify Event Settings","path":"/lrsiem/7.18.0/modify-event-settings","children":[]},{"id":"ci_315a3c471328b95651c9ac6f325a9b1719c575ca48549b10746b326a2bf4402b","title":"Modify Multiple Log Sources","path":"/lrsiem/7.18.0/modify-multiple-log-sources","children":[]},{"id":"ci_567d65b4086bd2cf59e9aab7f053982042e4794dced3c2f32e2fa821444d7411","title":"Move Log Sources to New Hosts","path":"/lrsiem/7.18.0/move-log-sources-to-new-hosts","children":[]},{"id":"ci_a4aea86f9860d21208d5cc4b04037e004222b9b6cc883aa47e5632cbada0054b","title":"Preregister Log Sources","path":"/lrsiem/7.18.0/preregister-log-sources","children":[]},{"id":"ci_cde85cef8b035916ef3900a9598ef7abf8f1ca9ebb41a17401bdf16db6853b79","title":"Resolve Log Source Hosts","path":"/lrsiem/7.18.0/resolve-log-source-hosts","children":[]},{"id":"ci_33e8560de2dfed7efc6adf61818938752f42bd58ddf9ac1cce08efe13c31e03a","title":"Retire or Activate Log Sources","path":"/lrsiem/7.18.0/retire-or-activate-log-sources","children":[]}]},{"id":"ci_94ce60b439a7cbc123be1ea3252ab5158dea692d489c7ec573cb9c272bfbb28b","title":"Log Source Types","path":"/lrsiem/7.18.0/log-source-types","children":[{"id":"ci_22ec5160e05fe4375be0d95342b870567b8d19c41c4c0952d4daead469cd59db","title":"Create Custom Log Source Types","path":"/lrsiem/7.18.0/create-custom-log-source-types","children":[]},{"id":"ci_3f836ab35a289748b9eb74664f88ae865c54ef7a76bf03e6786046c7518ec484","title":"Delete Custom Log Source Types","path":"/lrsiem/7.18.0/delete-custom-log-source-types","children":[]},{"id":"ci_47ec942c478da862b50998bfb3bca23a280734c8b9b7fb54dbdb6b2968da6787","title":"Modify Custom Log Source Type","path":"/lrsiem/7.18.0/modify-custom-log-source-type","children":[]},{"id":"ci_bae1df73e9b0ab0b2397a30b1f80158775b9977d43c5e817a08f29c0d5a5b454","title":"Modify Type for Pending Log Source","path":"/lrsiem/7.18.0/modify-type-for-pending-log-source","children":[]}]},{"id":"ci_c3c0af4bbab2a4aa91c125ac12ef03f01bc79c1a4e5d6de416e4922515512bf9","title":"Data Masking","path":"/lrsiem/7.18.0/data-masking","children":[{"id":"ci_fd91966b72bd31ccbf9b14ea313c182e1684221e25f09222969e5926cfe504ed","title":"Add New Data Masking Rules","path":"/lrsiem/7.18.0/add-new-data-masking-rules","children":[]},{"id":"ci_099d481ebc49f1e22ba79e01f15aa6e9d657c6116cbd9193f8e1d8cc25bd7900","title":"Import and Export Data Masking Rules","path":"/lrsiem/7.18.0/import-and-export-data-masking-rules","children":[]},{"id":"ci_d596611863a08155155b28c481b9f5be4b397fad2994bbcd347ce64187113c88","title":"Enable and Disable Data Masking Rules","path":"/lrsiem/7.18.0/enable-and-disable-data-masking-rules","children":[]},{"id":"ci_838dcc003fb65eeef638828ef804fae6eae80dea111fa20cf4376a041a47988c","title":"Reorder Data Masking Rules","path":"/lrsiem/7.18.0/reorder-data-masking-rules","children":[]},{"id":"ci_a061d89cf5be6e0e8ffefed4af7f76bc8514e3ce1e85ab84118860c07f7b0892","title":"Delete Data Masking Rules","path":"/lrsiem/7.18.0/delete-data-masking-rules","children":[]}]},{"id":"ci_8c5fdb19451a19a61f4596c8821bff1abf630b2929bad3bc26bbd819dd42f456","title":"Log Source Identification and Acceptance","path":"/lrsiem/7.18.0/log-source-identification-and-acceptance","children":[{"id":"ci_220012072c1c8d3ac26bea7135b728e86531d20625b4cd75976dd4c14e873fde","title":"Accept New Log Sources","path":"/lrsiem/7.18.0/accept-new-log-sources","children":[]},{"id":"ci_4845d45ea88ab15756f838f685587420b97e0339ecd2afbddb7fe9c9422ef0ba","title":"Accept New Log Sources Automatically","path":"/lrsiem/7.18.0/accept-new-log-sources-automatically","children":[{"id":"ci_2c0db86049c76e088c2607e5bd729665d77208079c0f3989e79d7d8d9aa4fcde","title":"Create IP Range Log Source Acceptance Rules","path":"/lrsiem/7.18.0/create-ip-range-log-source-acceptance-rules","children":[]},{"id":"ci_1720e00105be52290215bf750564ac7ef4fc4338b541a0bf2848c05baba18a83","title":"Create Pattern Match Log Source Acceptance Rules","path":"/lrsiem/7.18.0/create-pattern-match-log-source-acceptance-rules","children":[]},{"id":"ci_17f4d8bf75bfbc7b26dbeb7dbd9effabc28a2c9ef51851a358547cded8181b8f","title":"Manage Automatic Log Source Acceptance Rules","path":"/lrsiem/7.18.0/manage-automatic-log-source-acceptance-rules","children":[]}]},{"id":"ci_870e3c329ed397f5433ccde38da2cc7610558857888657e357bfcf7decebfab8","title":"Set the Log Source Identification Search Scope","path":"/lrsiem/7.18.0/set-the-log-source-identification-search-scope","children":[]},{"id":"ci_d33cf3effb8612df20fa45e86538ffafa14f909e3371a72e025fed94a6a937f5","title":"View Log Source Acceptance Properties","path":"/lrsiem/7.18.0/view-log-source-acceptance-properties","children":[]}]},{"id":"ci_260ae48b30240ddb0e2655a9591fae53cf187b8b7fbe796361e986d2608c5fd6","title":"Log Sources and Agents","path":"/lrsiem/7.18.0/log-sources-and-agents","children":[{"id":"ci_8559794976694445ddd24ffa71c8c5a3ac781dfd5ab6a3e3f9ea5a3b137b9f16","title":"Limit the Number of Agents Available for Batch Updates","path":"/lrsiem/7.18.0/limit-the-number-of-agents-available-for-batch-updates","children":[]},{"id":"ci_eb64a4750a632cad61214588bfb060ba269a91c2ac8e3423065027ecf2815410","title":"Move Log Sources Between Agents","path":"/lrsiem/7.18.0/move-log-sources-between-agents","children":[]}]},{"id":"ci_1ab7054a3feb7a14c26b59f0f67910ad0f7563d2e9852fac7d7c25cef6580c3e","title":"Flat File Collection","path":"/lrsiem/7.18.0/flat-file-collection","children":[{"id":"ci_62581b91f20c0f3988b2d55ed373ed8762bacf926194c3c6b1b4481b9b68bb8c","title":"Configure a Host for Local Flat File Collection","path":"/lrsiem/7.18.0/configure-a-host-for-local-flat-file-collection","children":[]},{"id":"ci_10b9f6b963b2f991af941facc819660c12d56ca9ad5565b56ff928f751b8f00d","title":"Configure an Agent for IIS Log Collection","path":"/lrsiem/7.18.0/configure-an-agent-for-iis-log-collection","children":[]},{"id":"ci_a3004056c2a27b3c0f295f073e72c6be3bafb8597efc0f6b31cd7b27bb2c54bf","title":"Convert Flat File to Epoch Time","path":"/lrsiem/7.18.0/convert-flat-file-to-epoch-time","children":[]},{"id":"ci_45b05d58c5806ff350f1d2a4b95f471911f4b9c68049181e32c2d18bffd30416","title":"Supported Date Parsing Formats","path":"/lrsiem/7.18.0/supported-date-parsing-formats","children":[]}]},{"id":"ci_38c3569c5caecdca8ce59ee3767c0511789ac804cd9bfc9e7ec5c53015e2fa9c","title":"UDLA Collection","path":"/lrsiem/7.18.0/udla-collection","children":[{"id":"ci_900367697e60f7042c19e21c38b38b8aeb4df6d8bd11bfaead87193e25aaceb5","title":"Configure UDLA Log Collection","path":"/lrsiem/7.18.0/configure-udla-log-collection","children":[]},{"id":"ci_c9cbdfcd2dc33b13be80f25ad3c5c3a6b1aa90e24d332a22ce150016f8ec8f0c","title":"Create a Sample McAfee ePolicy Orchestrator (ePO) Event Log Source","path":"/lrsiem/7.18.0/create-a-sample-mcafee-epolicy-orchestrator-epo-event-log-source","children":[]},{"id":"ci_e9492467b376fa74da8983c275a4ae734e6db83f601200233fc1492a4be344c5","title":"Create a Sample Oracle 10g Audit Trail UDLA Log Source","path":"/lrsiem/7.18.0/create-a-sample-oracle-10g-audit-trail-udla-log-source","children":[]},{"id":"ci_21db0589958276310044e3d339409f2d3e8c44a7d70c1ded7a610a1619cfb5ee","title":"Export and Import UDLA Log Source Configurations","path":"/lrsiem/7.18.0/export-and-import-udla-log-source-configurations","children":[]},{"id":"ci_4604240bc894ece431c86c6b134ebea0561c3148adc97ac378fcaaa67420097f","title":"Override UDLA SQL","path":"/lrsiem/7.18.0/override-udla-sql","children":[]}]},{"id":"ci_8f0c1a6d77d83014ae72a7235bad87c04eafc68773dbc96e94bd443d4c7a46cf","title":"Log Source Virtualization","path":"/lrsiem/7.18.0/log-source-virtualization","children":[{"id":"ci_9c739ab725e129232b85ffde1807058bf7574cb10217ea29a54ff7f9dc37b276","title":"Create Log Source Virtualization Templates","path":"/lrsiem/7.18.0/create-log-source-virtualization-templates","children":[]},{"id":"ci_e4f28d01634256c5e81d4fd1c2977e78c672eba3f6d956a9d229c2bad656d476","title":"Create Virtual Log Sources","path":"/lrsiem/7.18.0/create-virtual-log-sources","children":[]},{"id":"ci_08c85fe87d0e1fcda6008868b9d9d59297157861cc6151e5eda181e5eb00e069","title":"Delete Log Source Virtualization Templates","path":"/lrsiem/7.18.0/delete-log-source-virtualization-templates","children":[]},{"id":"ci_3169fc5f314f07011589360c6c2c71a0c236dc641cc276dee0202464184cb6b3","title":"Delete Virtual Log Sources","path":"/lrsiem/7.18.0/delete-virtual-log-sources","children":[]},{"id":"ci_b31ab7c26ad6f8310fd432a3af87110ce05b089534b487f1dd27b65e84c817a5","title":"Enable Virtualization on a Single Log Source","path":"/lrsiem/7.18.0/enable-virtualization-on-a-single-log-source","children":[]},{"id":"ci_2cd7ac7028bf470843f5363495f2d4b2fd51e383d517b675dc8720db5b290755","title":"Enable Virtualization on Multiple Log Sources","path":"/lrsiem/7.18.0/enable-virtualization-on-multiple-log-sources","children":[]},{"id":"ci_7c9bd2436e50e287cac10acfcc979c2ce89cba963f2a772dc8c2b05210b719a2","title":"Export Log Source Virtualization Templates","path":"/lrsiem/7.18.0/export-log-source-virtualization-templates","children":[]},{"id":"ci_10ba9657a6bb8f38dc9e81ed5526edbe49e5ae7b33a289469187915ce75bc83f","title":"Filter Virtual Logs at the Agent","path":"/lrsiem/7.18.0/filter-virtual-logs-at-the-agent","children":[]},{"id":"ci_ad1a81f2de4d821a5f84dd8714eedf440009e4685e02abb45b2307e515ead78b","title":"Import Log Source Virtualization Templates","path":"/lrsiem/7.18.0/import-log-source-virtualization-templates","children":[]},{"id":"ci_df2a5fbbe64ede61bd153644368d8e8b95d47d5266b045a22d65d81ef57c2b37","title":"Modify Catch-All Sources on a Batch of Parent Log Sources","path":"/lrsiem/7.18.0/modify-catch-all-sources-on-a-batch-of-parent-log-sources","children":[]},{"id":"ci_ef286bd80003a731fa899a35c169205a1065b11d6d71e965a08674d85f65de0a","title":"Modify Log Source Virtualization Templates","path":"/lrsiem/7.18.0/modify-log-source-virtualization-templates","children":[]},{"id":"ci_01783d9f488e831649595c6b27a7b3b840eb93dab8ebdfb0ada0c44b4acacb7d","title":"Modify Virtual Log Sources","path":"/lrsiem/7.18.0/modify-virtual-log-sources","children":[]}]}]},{"id":"ci_c8ee94566dcabd9facbbe4f17c31d42fa90015409d7c11f45d313d27f808ab11","title":"Network Monitor","path":"/lrsiem/7.18.0/network-monitor","children":[{"id":"ci_1965cd1611395ce4f9e90cfb2c022a31f519c402ab9ba4e9238f3aae140d8838","title":"Add NetMon in the Client Console","path":"/lrsiem/7.18.0/add-netmon-in-the-client-console","children":[]},{"id":"ci_368abc635b571ebe48e27287012b0e36f011ba3039027330f0d5b812a421f002","title":"Configure NetMon in the Client Console","path":"/lrsiem/7.18.0/configure-netmon-in-the-client-console","children":[]},{"id":"ci_e5f7e20f2aa35d2e19062bd5deaf634354f140bd6f02e726a942d8e8c815d760","title":"Delete NetMon in the Client Console","path":"/lrsiem/7.18.0/delete-netmon-in-the-client-console","children":[]},{"id":"ci_00e0acbc880d1b51608bd0c8d0da0454ecbd050d4d57d4c884e49913a791b04d","title":"Modify NetMon in the Client Console","path":"/lrsiem/7.18.0/modify-netmon-in-the-client-console","children":[]},{"id":"ci_40b6abfb47660344f5dafe824cc3190e3768c35250234388bc49280283726405","title":"Monitor NetMon in the Client Console","path":"/lrsiem/7.18.0/monitor-netmon-in-the-client-console","children":[]}]},{"id":"ci_677e8d5ab4f9b302b3a046b325c42fe23d6c3a30d88a280fd0f656ebad9b99da","title":"Network Records","path":"/lrsiem/7.18.0/network-records","children":[{"id":"ci_0e797a609240e955d37c57627f5203baf38f7a9bf34a79a7db238c2d47885d87","title":"Add Network Records from File","path":"/lrsiem/7.18.0/add-network-records-from-file","children":[]},{"id":"ci_8d5f790b4208de5bd380054f22356147390a7ab93a60a5bfb3edab730545b842","title":"Manually Add Network Records","path":"/lrsiem/7.18.0/manually-add-network-records","children":[]},{"id":"ci_ea636f378808f06f999b87be6ce968aeef5e53b3e1c935515d358dcfeae2b7ff","title":"Modify Properties for a Single Network","path":"/lrsiem/7.18.0/modify-properties-for-a-single-network","children":[]},{"id":"ci_1fcda9b9b54d19a4ff45c8b86552bc7e3af51f65d89eddc1f8c1b8c70a06bef7","title":"Modify Properties for Multiple Network Records","path":"/lrsiem/7.18.0/modify-properties-for-multiple-network-records","children":[]},{"id":"ci_4fc867055c6c74879161aaee7f29c3f002033e8617541dd7146a7d7c1018ae31","title":"Resolve Known Networks","path":"/lrsiem/7.18.0/resolve-known-networks","children":[]},{"id":"ci_50acaa60e73d9f1b566e51447bbc977ebfef5ef4f09ebe50b0e8279a7fdec183","title":"Retire Network Records","path":"/lrsiem/7.18.0/retire-network-records","children":[]},{"id":"ci_ea7986e0456056acfadd8da5714e947c1524acceb3888d5b1619b3d4c887bb83","title":"Search for Networks","path":"/lrsiem/7.18.0/search-for-networks","children":[]}]},{"id":"ci_63f2cce27e3c39b4b1d5427a96be35fe5b1a67556a5db0ad7d92d7146c4529b8","title":"Object Permissions Manager","path":"/lrsiem/7.18.0/object-permissions-manager","children":[{"id":"ci_79bad06378f097912e857305c1f35989b9cdaac0c19488f5cd65b1995f157010","title":"Modify Objects' Security Settings","path":"/lrsiem/7.18.0/modify-objects-security-settings","children":[]}]},{"id":"ci_36f6cf4617732288ab931675735c4526097f6430e78124511a39f3fefccb2266","title":"People and Users","path":"/lrsiem/7.18.0/people-and-users","children":[{"id":"ci_57b9c94c916389818dd701f3a7e7204fdab7f4c6c216c2c720dd23828c2b83a7","title":"Add Person Records or Roles","path":"/lrsiem/7.18.0/add-person-records-or-roles","children":[]},{"id":"ci_c71d5d6b8b0fbc450b3f49a595126857820fc7234acc100242470b9b2ff3a60e","title":"Assign Active Directory Credentials to Local Users","path":"/lrsiem/7.18.0/assign-active-directory-credentials-to-local-users","children":[]},{"id":"ci_0bded84f0721cb4c90514c2e4438ac07c66ea774d200d451b454bccd858b798f","title":"Create User Accounts for Person Records or Roles","path":"/lrsiem/7.18.0/create-user-accounts-for-person-records-or-roles","children":[]},{"id":"ci_53c3d755b33a51cdecc9fe5b5d9d7acfc02994d9dfef52435a93db4ff8153d23","title":"Direct Requests to the Case API URL","path":"/lrsiem/7.18.0/direct-requests-to-the-case-api-url","children":[]},{"id":"ci_ab22cf725c74f2362f639848fbe1d834148be948eb9e821a82b20c41dd962ad3","title":"Disable Person Records or Roles","path":"/lrsiem/7.18.0/disable-person-records-or-roles","children":[]},{"id":"ci_0f382ada98e4ba2dd31911bf85e700591c8dd8848e542348681b261311ed52ab","title":"Modify Logins for Person Records or Roles","path":"/lrsiem/7.18.0/modify-logins-for-person-records-or-roles","children":[]},{"id":"ci_1bed127c6e77641542270cd927d5892a9864d5c420d79e00c225f4a4b5784d1a","title":"Modify Person Records or Roles","path":"/lrsiem/7.18.0/modify-person-records-or-roles","children":[]},{"id":"ci_c30d7dad5cc89c0e43b4580d241236ae754c96220959286dd38a6ea806f771f5","title":"Rename LogRhythm Users","path":"/lrsiem/7.18.0/rename-logrhythm-users","children":[]},{"id":"ci_aeb2ef73c30ffb861197d726fc6029e78b63ff762c7f86a6ede3a6d2a542c12e","title":"Reset Multi-Factor Authentication Access to the Web Console","path":"/lrsiem/7.18.0/reset-multi-factor-authentication-access-to-the-web-console","children":[]},{"id":"ci_9c3cc47cfc1de25eac4990e3cbcc5ef3a02f1922f74bd9cf37e613ac72e1f24e","title":"User Profile Manager","path":"/lrsiem/7.18.0/user-profile-manager","children":[{"id":"ci_edaf97ae71d3151facf55e5c9d4650f329028ccad0f20055179b06ca7ca1cdd2","title":"Create a New User Profile","path":"/lrsiem/7.18.0/create-a-new-user-profile","children":[]},{"id":"ci_ce6c3d11ea0286042b553995d502330a2ec43a4f02bf53a3afbcc35617fd75a7","title":"Manage User Profile SmartResponse Access Rights","path":"/lrsiem/7.18.0/manage-user-profile-smartresponse-access-rights","children":[]},{"id":"ci_442575e5624645b8e2b06060f22463c7f65b755ba29309250991fcaf3ccf8408","title":"Modify User Profile Data Processor Access Rights","path":"/lrsiem/7.18.0/modify-user-profile-data-processor-access-rights","children":[]},{"id":"ci_fd6446e30b79c9cba2780ce281a008f44ea1e9e8a0fdee4e544042c65aafe97f","title":"Modify User Profile Effective Log Sources Settings","path":"/lrsiem/7.18.0/modify-user-profile-effective-log-sources-settings","children":[]},{"id":"ci_8ae2493879d1f17212573431d83d2ff5548b2a3e82be86b6e08e0bc70d211029","title":"Modify User Profile Entities Settings","path":"/lrsiem/7.18.0/modify-user-profile-entities-settings","children":[]},{"id":"ci_0e5ea4ee04c0c4d0273c380ed4cd4c6e1b423347f14ba48b791c69ea8145f37c","title":"Modify User Profile General Settings","path":"/lrsiem/7.18.0/modify-user-profile-general-settings","children":[]},{"id":"ci_13963a1c8848ddb88cf0480e5e3f6dd1aaaa911b083f3eb8c25747e7898f709c","title":"Modify User Profile Log Sources Access Rights","path":"/lrsiem/7.18.0/modify-user-profile-log-sources-access-rights","children":[]},{"id":"ci_dcfa2ede03a604890f9e834b1386e53212faf9e16415a18a41bfcb0034bf47ee","title":"Manage User Profile Notification Group Access Rights","path":"/lrsiem/7.18.0/manage-user-profile-notification-group-access-rights","children":[]},{"id":"ci_b978133b80aca722893458b242ca43d5c06df0e68a085ed8bc17c7cf3a915502","title":"Modify User Profile Management Permissions","path":"/lrsiem/7.18.0/modify-user-profile-management-permissions","children":[]}]}]},{"id":"ci_8e538475f9466af88737fc3c3f31ea3ef62f000d85236e98d132475292d5e37b","title":"Platform Manager","path":"/lrsiem/7.18.0/platform-manager","children":[{"id":"ci_00b67c7aaa2311350428ef80afa3c8ed15f3c81855871e9ab4599a802377630c","title":"Alarming, Reporting, and Response Manager Services","path":"/lrsiem/7.18.0/alarming-reporting-and-response-manager-services","children":[{"id":"ci_ba1e06452a233ab2342d1cc7e4cd5316360ba7041a87fdb56302bfbc56b660c2","title":"Apply Recommended Platform Manager Values","path":"/lrsiem/7.18.0/apply-recommended-platform-manager-values","children":[]},{"id":"ci_60916229f383fe30c509da2571af42dca6c96dfe73b4f04b508db9fa3b6ee50a","title":"Integrate LogRhythm and McAfee ePolicy Orchestrator","path":"/lrsiem/7.18.0/integrate-logrhythm-and-mcafee-epolicy-orchestrator","children":[]},{"id":"ci_e4c266f732ecced05d1dccedf8597080622628c5766992446b409e8697606614","title":"Modify Platform Manager Advanced Properties","path":"/lrsiem/7.18.0/modify-platform-manager-advanced-properties","children":[]},{"id":"ci_7342c76d5152fc8d878474cab255ee8e60c8a1e05559a395fb683da4c32bc607","title":"Modify Platform Manager Basic Properties","path":"/lrsiem/7.18.0/modify-platform-manager-basic-properties","children":[]},{"id":"ci_a67c5021c4f9e17325810dd2272d025212889890aacfc9538c701634f928faf3","title":"Revert to a Previous Platform Manager Configuration","path":"/lrsiem/7.18.0/revert-to-a-previous-platform-manager-configuration","children":[]},{"id":"ci_071e7f1105e32e8562160f2d7a5e33b09e6c0889740e7070d5c376f5c8304578","title":"Specific SMTP Servers to Allow for Failover","path":"/lrsiem/7.18.0/specific-smtp-servers-to-allow-for-failover","children":[]},{"id":"ci_41273cec9f0c9a079b252820a0ebc2e14d111b1cf7f793bc7ca9c084c0efe1cf","title":"Start, Stop, and Restart Platform Manager Services","path":"/lrsiem/7.18.0/start-stop-and-restart-platform-manager-services","children":[]}]},{"id":"ci_8deebde5e71a0e309b5ca629773d4fb16347bb6fff4421c1eb9aa869f1d19b7e","title":"Global Risk Based Priority","path":"/lrsiem/7.18.0/global-risk-based-priority","children":[{"id":"ci_6b444c13e3fec25e7eb87efa9d4bbfeae64548131e1b5d147e52ee9a4f37ed3c","title":"Determine the MPE RBP Manually","path":"/lrsiem/7.18.0/determine-the-mpe-rbp-manually","children":[]},{"id":"ci_0058bd483d7a5da9e5fe825c2d85501288dae1db4af12f52efab26def3c1176f","title":"Modify AIE Risk Based Priority Settings","path":"/lrsiem/7.18.0/modify-aie-risk-based-priority-settings","children":[]},{"id":"ci_715148854805a8d8ce1995a9da6ce67ff08268fe096cb7d1143955b926ceb343","title":"Modify the Default Destination Risk Level","path":"/lrsiem/7.18.0/modify-the-default-destination-risk-level","children":[]},{"id":"ci_92829cbf443ad42684e4f363e4792a8ddd57425a3af0c1e5150f1bdd8515510f","title":"Modify the Default Source Threat Level","path":"/lrsiem/7.18.0/modify-the-default-source-threat-level","children":[]},{"id":"ci_e174534acc15649b83d645c53717f5cdf4a13981283746dde3815884b3e790bb","title":"Modify the MPE Risk Based Priority Settings","path":"/lrsiem/7.18.0/modify-the-mpe-risk-based-priority-settings","children":[]},{"id":"ci_48b5b695398bfa561258fa9f895a74134d458c151e422693f835cb74665a33d6","title":"Risk Based Priority Calculator","path":"/lrsiem/7.18.0/risk-based-priority-calculator","children":[{"id":"ci_9a214f24ddf8c33b58c3bbd2bcd373105c6a06bbb549be83873cd649430479fe","title":"Install the RBP Calculator","path":"/lrsiem/7.18.0/install-the-rbp-calculator","children":[]},{"id":"ci_fddd1a35bae0aff6fc04db119da896ce88d5ca987b91b825a97271410cec1f7e","title":"Determine MPE or AIE Risk Based Priority With The RBP Calculator","path":"/lrsiem/7.18.0/determine-mpe-or-aie-risk-based-priority-with-the-rbp-calculator","children":[]},{"id":"ci_9a2d44ea11af49bfb1f497146e8efcb64696e5dc07f8cbf61e82b4945a91d32c","title":"Transfer AIE RBP Calculator Values to a LogRhythm Deployment","path":"/lrsiem/7.18.0/transfer-aie-rbp-calculator-values-to-a-logrhythm-deployment","children":[]},{"id":"ci_35f23de7f864391ff608f96484545dcb3e996e51661410a3aa6c2147ee3a67b9","title":"Host, Network, and Default DRL and STL Settings","path":"/lrsiem/7.18.0/host-network-and-default-drl-and-stl-settings","children":[{"id":"ci_c0cc09bcdd51a39f4652a62525f78c62e8ea373d175ee919cb1794ff960ecca5","title":"Known Host and Network Search Algorithm","path":"/lrsiem/7.18.0/known-host-and-network-search-algorithm","children":[]}]},{"id":"ci_61673f47017f2b52aac998d2be53b2748314d69aee4208914701ead64a2632f9","title":"Message Processing Engine RBP Algorithm","path":"/lrsiem/7.18.0/message-processing-engine-rbp-algorithm","children":[]},{"id":"ci_05924c63d5c1145180dfd2d7ab0923bfba8803805ebe995da0f345f2533edee5","title":"AI Engine RBP Algorithms","path":"/lrsiem/7.18.0/ai-engine-rbp-algorithms","children":[]}]}]},{"id":"ci_5ee4de8986c43c3d0af2a178ecd7bf181f0cd98d00b5e2547d1771cb9803418e","title":"Job Manager Services","path":"/lrsiem/7.18.0/job-manager-services","children":[{"id":"ci_62af0eb8e4fb2ebbbc016522d7f723925f28cef79e957617c55de8a700a4e621","title":"Modify Job Manager Advanced Properties","path":"/lrsiem/7.18.0/modify-job-manager-advanced-properties","children":[]},{"id":"ci_265c0aa00d2dde317d5d61dfa3e1bec40f0069cf420df7e1a2546dc937e6bcb9","title":"Modify Job Manager Basic Properties","path":"/lrsiem/7.18.0/modify-job-manager-basic-properties","children":[]},{"id":"ci_f7721e7096b158da40d5dd16099ec5da90b1c9f2ada3d66bcdbcf9b75e553e22","title":"Start, Stop, and Restart Job Manager Services","path":"/lrsiem/7.18.0/start-stop-and-restart-job-manager-services","children":[]},{"id":"ci_f8e9a46b748e9f7ae0f0d54bf35d19f4316a23b72ce8a233add79f7a346ba0e4","title":"Use the Job Manager Configuration Manager","path":"/lrsiem/7.18.0/use-the-job-manager-configuration-manager","children":[]}]},{"id":"ci_7f0a5b2caf4fc9bf11b374dbc75a5181b439f5833f12eb8b681e5ddc65762f80","title":"System Management Settings","path":"/lrsiem/7.18.0/system-management-settings","children":[{"id":"ci_5e9c36891ee328533820f87ae4a83bb63bce79d4159a7720d3352dba6bf72137","title":"Active Directory Domain Manager","path":"/lrsiem/7.18.0/active-directory-domain-manager","children":[{"id":"ci_6aa3ecacb60e9a0db66860c66fb40a79b02c290d073e320093cff7d46c5876c1","title":"Add Active Directory Groups as Filters","path":"/lrsiem/7.18.0/add-active-directory-groups-as-filters","children":[]},{"id":"ci_d3da732244d2580ae9b803b315be770b90d875104edf0cc0ab1ae7dd214dd013","title":"Add New Active Directory Domains","path":"/lrsiem/7.18.0/add-new-active-directory-domains","children":[]},{"id":"ci_cf42619fa3e36336e7b49708e3e2a01887c15986dff93662f7e717c32725d592","title":"Check the Active Directory Synchronization Status","path":"/lrsiem/7.18.0/check-the-active-directory-synchronization-status","children":[]},{"id":"ci_8b697924d95df08de8a1a88570d694efb6925f5aba6ac7659d11a2c4c6b1e3f7","title":"Modify Active Directory Domains","path":"/lrsiem/7.18.0/modify-active-directory-domains","children":[]},{"id":"ci_06adc4a41cecb0cd7558706c8fe326a183b9a70ee4f84efc86f27197b735ee02","title":"Retire or Activate Active Directory Domains","path":"/lrsiem/7.18.0/retire-or-activate-active-directory-domains","children":[]},{"id":"ci_03598141a9833705c9ed998e5d70f5bcda942e8095d8742bafb2df54e59b2314","title":"Run Active Directory Browser Investigations","path":"/lrsiem/7.18.0/run-active-directory-browser-investigations","children":[]}]},{"id":"ci_6e93c3bf0b6cf998b6cb92082c91974a116858b73652791fdb0801ff1d38f053","title":"Configure Global Maintenance Settings","path":"/lrsiem/7.18.0/configure-global-maintenance-settings","children":[]},{"id":"ci_8c33ab623571a7c916be2a6066442fbfdd6aae5f7825daed579659d511d6a32f","title":"Set or Modify Data Management Settings","path":"/lrsiem/7.18.0/set-or-modify-data-management-settings","children":[]},{"id":"ci_af97955fdce9ac3db49b9f30627a2c25c4e480a237d5f305bf27d353aa328b79","title":"Enable Intelligent Indexing Globally","path":"/lrsiem/7.18.0/enable-intelligent-indexing-globally","children":[]}]},{"id":"ci_848d6dd408d6577abeacaed2921a7b48ca3a7b16c847f3f3d6013b3c207216eb","title":"Update the IP Address of the Platform Manager","path":"/lrsiem/7.18.0/update-the-ip-address-of-the-platform-manager","children":[]},{"id":"ci_8a0de19cbee3cb87433b59ecc695cd393a6f812bec1ed32b764cb9bf3eaa7633","title":"Use the Platform Manager Configuration Manager","path":"/lrsiem/7.18.0/use-the-platform-manager-configuration-manager","children":[]}]},{"id":"ci_95e670604545a36c6c740810ccd94a9a698b20a9a7294d3bcede8aee4c4896ed","title":"SmartResponse","path":"/lrsiem/7.18.0/smartresponse","children":[{"id":"ci_fa0c30f07a6b01193517dc4a44df148b3922c01e93ac7d3cf0f695544d1531ac","title":"Approve or Deny SmartResponse Actions in the Client Console","path":"/lrsiem/7.18.0/approve-or-deny-smartresponse-actions-in-the-client-console","children":[]},{"id":"ci_50d04d8c456c70c5e5b0c833e7a720f28ec240c284ed8378c11ac30366321a86","title":"Develop SmartResponse Plugins","path":"/lrsiem/7.18.0/develop-smartresponse-plugins","children":[{"id":"ci_f9d13ed55a5e08ccc34d91b53db8bbc59c9b81d1ea27bbeb8cd55fa0cadb906d","title":"Create the Payload","path":"/lrsiem/7.18.0/create-the-payload","children":[]},{"id":"ci_729d3b71b4ba2c6bc4e85ce5e4527a99025eef8b2cbc3a5458409925e6abc78c","title":"Create the Configuration File","path":"/lrsiem/7.18.0/create-the-configuration-file","children":[]},{"id":"ci_bd95e8030829deb3c9d6adbeb66ee4731a31bdd6e68f1d992f95aff009276153","title":"Package and Test the SmartResponse","path":"/lrsiem/7.18.0/package-and-test-the-smartresponse","children":[]},{"id":"ci_306134e409cdb8e7f0eae34843bc9f4597ed78ea30929fab9cdb27b1ab82a24d","title":"Deploy Custom SmartResponse Plugins","path":"/lrsiem/7.18.0/deploy-custom-smartresponse-plugins","children":[]}]},{"id":"ci_de99c9a846ddab012f7da2edeb169988a3d485cb760ab16dee23cebf01caa217","title":"Import SmartResponse Plugins","path":"/lrsiem/7.18.0/import-smartresponse-plugins","children":[]},{"id":"ci_283922bffd64e0add28969322b7c1244670f2f13e348478e06c7a2fb2605e5d9","title":"Initiate SmartResponse","path":"/lrsiem/7.18.0/initiate-smartresponse","children":[]},{"id":"ci_9a89b9f8830888906c5e65f15f6fe5ca201ff9b37942232dd6f0c4c006568ae2","title":"Preview SmartResponse Command Execution","path":"/lrsiem/7.18.0/preview-smartresponse-command-execution","children":[]},{"id":"ci_5937bceefbcdb375911465c3475c5191de517763be48bc0c81f4c43fd4754543","title":"Test SmartResponse Plugin Actions","path":"/lrsiem/7.18.0/test-smartresponse-plugin-actions","children":[]},{"id":"ci_2ef2319e74c777b6bf6f016f5a04ff6f9b1505b5e6560695c7c481e72db4b983","title":"Troubleshoot SmartResponse Action Testing","path":"/lrsiem/7.18.0/troubleshoot-smartresponse-action-testing","children":[]},{"id":"ci_8e09834461e8038afefbfa5306d18fd9e2efe6b4b84e7c5171e9c24a5d2215fc","title":"Validate SmartResponse Plugins","path":"/lrsiem/7.18.0/validate-smartresponse-plugins","children":[]}]},{"id":"ci_37a7f1a3b8bde41375119bbff3040673f7837141728cdc890b51a3cb47862331","title":"System Monitor","path":"/lrsiem/7.18.0/system-monitor","children":[{"id":"ci_5267bd628a73dab4f0ea51331fe7937291f567399e917a1460a19fd8d89f6875","title":"Agent Identification and Acceptance","path":"/lrsiem/7.18.0/agent-identification-and-acceptance","children":[{"id":"ci_fceb2af2fbad9061f657f8f052500c079a77bf18abfbff74b45abd4ea6de60ba","title":"Accept a New System Monitor","path":"/lrsiem/7.18.0/accept-a-new-system-monitor","children":[]},{"id":"ci_f735bb3b6045fa04c8a5f7f7fa83ac39dce2ac053ab72f97c7e6e0f1cd990d5a","title":"Associate a System Monitor Agent","path":"/lrsiem/7.18.0/associate-a-system-monitor-agent","children":[]},{"id":"ci_4dfe8c508e91b32d841f121bf12a741b1936d01fee5799981f7d877c9684bfc1","title":"Work With New System Monitors","path":"/lrsiem/7.18.0/work-with-new-system-monitors","children":[]}]},{"id":"ci_cd0adbf11b51a9a74fa548a8c47b0c2653cd0149a487a3d9239b0b5f9401ac66","title":"NetFlow, IPFIX, and J-Flow Collection","path":"/lrsiem/7.18.0/netflow-ipfix-and-j-flow-collection","children":[{"id":"ci_cfbe662b999808e245bff7ac82db5cc514a8acfe8880d57d584f7653a99af009","title":"Configure a Device or Host for NetFlow, IPFIX, or J-Flow Collection","path":"/lrsiem/7.18.0/configure-a-device-or-host-for-netflow-ipfix-or-j-flow-collection","children":[]},{"id":"ci_b13c1829560542d626c0c65331b7a9625c45c870564f5ee23ceb589d26a5baf9","title":"Customize IPFIX Logs","path":"/lrsiem/7.18.0/customize-ipfix-logs","children":[]}]},{"id":"ci_681da6da659e05739d300232bb152c9605685d581779b5fb68ab73bd57bed4f6","title":"Work With System Monitor Agents","path":"/lrsiem/7.18.0/work-with-system-monitor-agents","children":[{"id":"ci_12f82ac94d9f69819a629f565bf65ce522202688d30180dcf80670da3b6e3aa2","title":"Add System Monitors","path":"/lrsiem/7.18.0/add-system-monitors","children":[]},{"id":"ci_c733955d81af6336448cd7aeaec14b11eaa17c938584effdffb92cc0927b7bd5","title":"Configure the scsm Service","path":"/lrsiem/7.18.0/configure-the-scsm-service","children":[]},{"id":"ci_d302fb5dd78c333c4e2a0b7c56b8bd5d4f1b8854c04cdab5b0b376e73a89c6ec","title":"Connect System Monitor Agents to Different Entities","path":"/lrsiem/7.18.0/connect-system-monitor-agents-to-different-entities","children":[]},{"id":"ci_5caaa322fdd70b2fe67081beed7c3329cbc0f256edc6e2b10aaf19c29eb3ec50","title":"Connect System Monitor Agents to New Data Processors","path":"/lrsiem/7.18.0/connect-system-monitor-agents-to-new-data-processors","children":[]},{"id":"ci_06d5185b4228f9503b4b96ea758fe2d621b21d9689ef239b67a55c8dcfaca9f6","title":"Connect System Monitor Agents to Existing Data Processors","path":"/lrsiem/7.18.0/connect-system-monitor-agents-to-existing-data-processors","children":[]},{"id":"ci_dd00cc945b7b7aeff75d28ddedd86fbd36a21705197187a5be4a49da380c517c","title":"Data Processor Pooling","path":"/lrsiem/7.18.0/data-processor-pooling","children":[{"id":"ci_fe49e83fc21d96fb1a77043d199cd11d1c4e4a04f505d7c6289330b83831da06","title":"Data Processor Pool Manager","path":"/lrsiem/7.18.0/data-processor-pool-manager","children":[]},{"id":"ci_5d5469e49ccf7931a7ffcb2c6717fc37d02289472f1a6745ff8451623c14723b","title":"Assign a Data Processor to a DP Pool","path":"/lrsiem/7.18.0/assign-a-data-processor-to-a-dp-pool","children":[]},{"id":"ci_ea488ecc24691b725d1e5cdb45a0b5fb914233ccb994d1dbdec09c313816a974","title":"Remove a Data Processor from a DP Pool","path":"/lrsiem/7.18.0/remove-a-data-processor-from-a-dp-pool","children":[]},{"id":"ci_2051aa641370604cd74e0339240071d53993fd08de62dbde28931cfba3d7d6a8","title":"Configure a System Monitor Agent into DP Pool Mode","path":"/lrsiem/7.18.0/configure-a-system-monitor-agent-into-dp-pool-mode","children":[]},{"id":"ci_376cb148b81506f3699b8f1929ea4598797c6420c496a9c9e7c90adfdfc4a68e","title":"Edit System Monitor Data Processor Settings","path":"/lrsiem/7.18.0/edit-system-monitor-data-processor-settings","children":[]},{"id":"ci_2723f84c0a012ef458ccfc274f1eea5f7c966b9ab883b5466d1ff78f630aedff","title":"Assign a DP Pool to a System Monitor Configuration Policy","path":"/lrsiem/7.18.0/assign-a-dp-pool-to-a-system-monitor-configuration-policy","children":[]}]},{"id":"ci_ed8424941e807b294c824424c4321b9063b4b9021d302344e62e5c405500cc8e","title":"License System Monitors","path":"/lrsiem/7.18.0/license-system-monitors","children":[]},{"id":"ci_5f72c38498f408ac2e9da7a20b5d6d709f3d8053b6c9fd345b8cd4206a52f02f","title":"Load Balanced Agent Groups","path":"/lrsiem/7.18.0/load-balanced-agent-groups","children":[{"id":"ci_4ffc7fe19e38e8d648f0b73c05e9b4cc8485c0f696b1228562f261a4b21818a6","title":"Load Balanced Group Manager","path":"/lrsiem/7.18.0/load-balanced-group-manager","children":[]},{"id":"ci_705383504360aa135eba7911f92c9d0ab998bf7cd86ae4c49dbcb903d8292298","title":"Assign Agents to a Load Balanced Group","path":"/lrsiem/7.18.0/assign-agents-to-a-load-balanced-group","children":[]}]},{"id":"ci_27110a31fbb41f7e3a55146383710dc67293abe2834c7c0f08fd24838e2770c3","title":"Modify System Monitor Basic Properties","path":"/lrsiem/7.18.0/modify-system-monitor-basic-properties","children":[]},{"id":"ci_48df9f582c843f694a937e91891078d842f42cd8d6a70989870974fa55cc4f58","title":"Modify System Monitor Advanced Properties","path":"/lrsiem/7.18.0/modify-system-monitor-advanced-properties","children":[]},{"id":"ci_1bdb3574c18333374622fe60c09e5f8a44fc596cffcfa1da86c3780156bbcaa9","title":"Modify Properties of Multiple System Monitor Agents","path":"/lrsiem/7.18.0/modify-properties-of-multiple-system-monitor-agents","children":[]},{"id":"ci_3a550de7db1c6acae64eacc013d0ea11393bfc8cfcce89a49a40faa4351df376","title":"Modify System Monitors","path":"/lrsiem/7.18.0/modify-system-monitors","children":[]},{"id":"ci_b3c8eb6083a9466dacb6ae26f05ecdb1871322d07bff7ac08ce66a3b059aab04","title":"Configure a Secure Syslog Agent","path":"/lrsiem/7.18.0/configure-a-secure-syslog-agent","children":[]},{"id":"ci_3c439ee93e77bc5c356f9030d15fc80117d7fd371c0791a1ad1bbc521b661859","title":"Retire or Activate System Monitor Agents","path":"/lrsiem/7.18.0/retire-or-activate-system-monitor-agents","children":[]},{"id":"ci_bf4ed0fa55fed3dcf23e65877f5b502235d4b4ae0db7a24e7bc5c318dc65cb94","title":"Revert System Monitor Agents to Previous Configurations","path":"/lrsiem/7.18.0/revert-system-monitor-agents-to-previous-configurations","children":[]},{"id":"ci_f58b8df9ebc1a545f5032ee69e97055db70b2bd74513bc22cfbdf0a957de6e3c","title":"Startup and Shutdown System Monitors on Linux","path":"/lrsiem/7.18.0/startup-and-shutdown-system-monitors-on-linux","children":[]},{"id":"ci_eb39ebecfdc45ea7f881d25fb821ce4e377dfd69e151c4c1174c558aac7107d2","title":"Stop, Start, and Restart Agent Services on Windows","path":"/lrsiem/7.18.0/stop-start-and-restart-agent-services-on-windows","children":[]}]},{"id":"ci_ad5441048841fc5f71433625edbe4ce6d7979dd5c32277e87f742e1e60d74262","title":"Register Agent to Host with Duplicate Name","path":"/lrsiem/7.18.0/register-agent-to-host-with-duplicate-name","children":[]},{"id":"ci_1ae3dbc3793da23776a640f006f066239db8e90ae00ef569f5b75c193cf10f3d","title":"sFlow Collection","path":"/lrsiem/7.18.0/sflow-collection","children":[{"id":"ci_6d15ac88d7031fbc51dcb2a6414d225040d4131efe396ae86c2b3768a27b0813","title":"Configure a Device or Host for sFlow Collection","path":"/lrsiem/7.18.0/configure-a-device-or-host-for-sflow-collection","children":[]}]},{"id":"ci_5d0c377eb03f13bce7536844f5aecca03a88bb41768a14de1b407fafcce59b8d","title":"SNMP Trap Receivers","path":"/lrsiem/7.18.0/snmp-trap-receivers","children":[{"id":"ci_43c1505c275ac4c3168f49c9abca5ba32634be146d340d055d9a1c2d16e2ac22","title":"Configure a System Monitor for SNMP Trap Receiver","path":"/lrsiem/7.18.0/configure-a-system-monitor-for-snmp-trap-receiver","children":[]}]},{"id":"ci_398c58a8394b3f36df163cd353a4d36d1f9833429d2d84b94774cc30d29632ad","title":"Syslog Collection","path":"/lrsiem/7.18.0/syslog-collection","children":[{"id":"ci_f998aa9250c4788c89b9dd048ac259acf32c054ca74ce4f168d18fbd0720f002","title":"Configure a Device or Host for Syslog Collection","path":"/lrsiem/7.18.0/configure-a-device-or-host-for-syslog-collection","children":[]}]},{"id":"ci_95b09dcb134837b82a0b21f19fc496a4b4eceed3e5b27ce4bbd69f96abb85f13","title":"System Monitor Configuration Policy Manager","path":"/lrsiem/7.18.0/system-monitor-configuration-policy-manager","children":[{"id":"ci_dc914ce5936e14da0105a7eea31a40937874e923bd06b108accb8404f926ffe9","title":"Apply System Monitor Configuration Policies","path":"/lrsiem/7.18.0/apply-system-monitor-configuration-policies","children":[]},{"id":"ci_c9e2b5165942641fb83e1e5fe22c89856e1d541f19a5936b85124bcbff7508c7","title":"Assign Configuration Policies to Multiple System Monitor Agents","path":"/lrsiem/7.18.0/assign-configuration-policies-to-multiple-system-monitor-agents","children":[]},{"id":"ci_9d072718aa6c4f73171b8c1acc0de560f102fb025127d981d14090357f7df38c","title":"Create New System Monitor Configuration Policies","path":"/lrsiem/7.18.0/create-new-system-monitor-configuration-policies","children":[]},{"id":"ci_4adfa5f1109cf7af0830175690d4e5f16aa0a531d3ee6ddc623ebac3ce1d3e28","title":"Delete System Monitor Configuration Policies","path":"/lrsiem/7.18.0/delete-system-monitor-configuration-policies","children":[]},{"id":"ci_a2ec7bca0f2589d38f0d2163fa4da7312c5c922205d009fc5bf165d9df9932c8","title":"Modify Configuration Policies on System Monitor Agents","path":"/lrsiem/7.18.0/modify-configuration-policies-on-system-monitor-agents","children":[]},{"id":"ci_802ae27a9819e2405c102a2e33df6351f3e1531144de551e1c6e774f646adde9","title":"Modify System Monitor Configuration Policies","path":"/lrsiem/7.18.0/modify-system-monitor-configuration-policies","children":[]}]},{"id":"ci_2185fca43436bb71df094d9b44f207b34ddf7469724613f9b302c025775db89f","title":"Unidirectional Windows Agent Settings","path":"/lrsiem/7.18.0/unidirectional-windows-agent-settings","children":[{"id":"ci_937659c4b86bbc6bdb43d3814c15844f61e0a7cf9c75a4fb22368905b9c8b519","title":"Confirm a SysMon Agent is Sending Logs","path":"/lrsiem/7.18.0/confirm-a-sysmon-agent-is-sending-logs","children":[]},{"id":"ci_dbaac0796bca3d14fcdb3a702f4d22b80a951ca09de5e075a0c0805069fe37d1","title":"Copy the System Monitor Agent Configuration File to the Agent Machine","path":"/lrsiem/7.18.0/copy-the-system-monitor-agent-configuration-file-to-the-agent-machine","children":[]},{"id":"ci_1e1b53458d7a0fc4d71a910be0da93f8bd4c12b77cb801a618a3c182a676459a","title":"Enable the Unidirectional Feature on the Data Processor","path":"/lrsiem/7.18.0/enable-the-unidirectional-feature-on-the-data-processor","children":[]},{"id":"ci_1a102933b67ab300c152efc58a34999e66e334434704d84217a019420395b75e","title":"Enable the Unidirectional Feature on the System Monitor Agent","path":"/lrsiem/7.18.0/enable-the-unidirectional-feature-on-the-system-monitor-agent","children":[]},{"id":"ci_0af512d1e52f7a1ae6a544b8f5b80656e729b8d453980e8cc164c9e7170a4595","title":"Export the System Monitor Agent's Local Configuration File","path":"/lrsiem/7.18.0/export-the-system-monitor-agent-s-local-configuration-file","children":[]}]},{"id":"ci_050d4252328368eb34b48b6b5e7e60c3d535f3e05a59e168aaf3da17bbb60294","title":"Windows Event Log Collection","path":"/lrsiem/7.18.0/windows-event-log-collection","children":[{"id":"ci_d497c09cb1f2288d40ea8afc518d480c75603dd8a2fceb87cfde1eaf9dc030a1","title":"Collect Non-Domain Logs Remotely","path":"/lrsiem/7.18.0/collect-non-domain-logs-remotely","children":[]},{"id":"ci_fa388e27ddb693c0448021fd99485c00ccd6dee72286b95c4748f7751c9c7915","title":"Create a Least-Privileged Domain User Account for Remote Log Collection","path":"/lrsiem/7.18.0/create-a-least-privileged-domain-user-account-for-remote-log-collection","children":[]},{"id":"ci_3d2088c2c7762191dafd78f36a7f7ac8ae20c4eed8c6008128a9532f6f3fe2ec","title":"Set Up Remote Log Collection","path":"/lrsiem/7.18.0/set-up-remote-log-collection","children":[]}]}]}]},{"id":"ci_8bb35c041a4ffdd30e246a22a2a04bc402b4954f7b95d0c72b5f92084ff8c0c9","title":"Client Console Analyst Guide","path":"/lrsiem/7.18.0/client-console-analyst-guide","children":[{"id":"ci_82ac926440fbec9b2daf08718e61975b2be567f0fd7355fcec54bc9d84381208","title":"Filters and Wizards","path":"/lrsiem/7.18.0/filters-and-wizards","children":[{"id":"ci_38eca38c89eceb2b01a63d4d67ad1d53c30aee8a91ba7e98589bcbd6b249a5d7","title":"Use Filter Modes","path":"/lrsiem/7.18.0/use-filter-modes","children":[]},{"id":"ci_7cfbee0c197a9cc655dc0b9b53f2e0b73b11d54f00c94cd06c8086b555b57a4e","title":"Use Lists with Filters","path":"/lrsiem/7.18.0/use-lists-with-filters","children":[]},{"id":"ci_74df6e1441b10e45e9be2f0d64cba766ab9872b934d27f2324c970f8b51fe15c","title":"Use Multiple Filters","path":"/lrsiem/7.18.0/use-multiple-filters","children":[]},{"id":"ci_84e4d86fb98b3e9ecfbe20a1f47fc7233e147a80953361ea5d90e59855f7f1e1","title":"Use Multi-Type Filters","path":"/lrsiem/7.18.0/use-multi-type-filters","children":[]},{"id":"ci_1c856c8e587b315ca057828b7874429d3ae79e690b37cf1163374d9e39c034a5","title":"Use Search Strings with Filters","path":"/lrsiem/7.18.0/use-search-strings-with-filters","children":[]},{"id":"ci_fc2eb2e2b193d02a133d796565f58bb5652cbdff9f764a77ff7f6fe06dbd1542","title":"Use SQL Pattern Match with Filters","path":"/lrsiem/7.18.0/use-sql-pattern-match-with-filters","children":[]},{"id":"ci_8a6633ea390338864c9f5b8a7430ad08a2acf7b367739470d8f2dda728cf1dc3","title":"Use the Filter Editor","path":"/lrsiem/7.18.0/use-the-filter-editor","children":[{"id":"ci_976a82439cb2d0ab21ad73b650b9e85172fd279088e5a1ead8d5db1524faeff9","title":"Filters—Action","path":"/lrsiem/7.18.0/filtersaction","children":[]},{"id":"ci_1d803e9e287253ec13f2a1d2ca7b35fce13282ba850ee827b2f1ea834f9e5e6c","title":"Filters—Aggregation","path":"/lrsiem/7.18.0/filtersaggregation","children":[]},{"id":"ci_116378c230637bede315884d6e8a9f25c0c4ce3958028edfcc508dc7111f91d6","title":"Filters—AIE Summary Fields","path":"/lrsiem/7.18.0/filtersaie-summary-fields","children":[]},{"id":"ci_1968f099ee80113cf8db474895ff7a9221a81d396b453e7d6905daefe2d25932","title":"Filters—Data Fields","path":"/lrsiem/7.18.0/filtersdata-fields","children":[]},{"id":"ci_6b35732e5dccb966b04fa1ab7c93220b9a8054b8674629b01e1c4b11a6f9c152","title":"Filters—Day and Time Criteria","path":"/lrsiem/7.18.0/filtersday-and-time-criteria","children":[]},{"id":"ci_070df6d3a2095576ef7f0f16dae6345c3ebf59cfd39aeaf77fc0fb11a85b3b34","title":"Filters—Distinct","path":"/lrsiem/7.18.0/filtersdistinct","children":[]},{"id":"ci_33f5af93f0b75524d93c45ba641c88d52feb297a2b6de797f87524b620a6629a","title":"Filters—Exclude Filter","path":"/lrsiem/7.18.0/filtersexclude-filter","children":[]},{"id":"ci_41985f39cc3ee2c826bc84f2274f23edb79e2adca783af49ea1d16372a3e36a4","title":"Filters—Expressions","path":"/lrsiem/7.18.0/filtersexpressions","children":[]},{"id":"ci_0ae72c447eec137b685a75be9b75ff8cfab8ab69340d7a856d4aa84d9c07517a","title":"Filters—Group By","path":"/lrsiem/7.18.0/filtersgroup-by","children":[]},{"id":"ci_fffe949af01ebbf35c9ba4ccb754807cef3b6b731ba445600cde5b1b1102903f","title":"Filters—Include Filter","path":"/lrsiem/7.18.0/filtersinclude-filter","children":[]},{"id":"ci_c4076b9681d9526a7eb41d9b2167b45c46d818ea2f5b8ed7bb7ae17011ae3dc0","title":"Filters—Information","path":"/lrsiem/7.18.0/filtersinformation","children":[]},{"id":"ci_bfc4d2dbab8a43b1cb721ea986289d705a26fff9a1a473388a50a9cc1fcbd3a8","title":"Filters—Log Source Criteria","path":"/lrsiem/7.18.0/filterslog-source-criteria","children":[]},{"id":"ci_5bc456c80dfaebd0f4f95d2c77e5a428871a920b3f1fe5ad91527a14d7ff8943","title":"Filters—Notify","path":"/lrsiem/7.18.0/filtersnotify","children":[]},{"id":"ci_06be395e0e373e1ba771a349ef5c5dcaa968a99beb1278a2c7243482a17227d8","title":"Filters—Primary Criteria","path":"/lrsiem/7.18.0/filtersprimary-criteria","children":[]},{"id":"ci_66b5eea17d3d2081483a0375261b3722585ab74c69e4c8c481596efc152f4b15","title":"Filters—Profile","path":"/lrsiem/7.18.0/filtersprofile","children":[]},{"id":"ci_5bffda990b4e4755118622db3e522848aa148f469866128caea20826fa2e6305","title":"Filters—Schedule","path":"/lrsiem/7.18.0/filtersschedule","children":[]},{"id":"ci_b9532e74db72523211097503250145f33e1965e406a4285cf936a0dcc7ec7530","title":"Filters—Settings","path":"/lrsiem/7.18.0/filterssettings","children":[]},{"id":"ci_0712922aaa40e3d1dfb22399a2c1a980571c359a6dfcc519ca4c712ec348ce77","title":"Filters—Thresholds","path":"/lrsiem/7.18.0/filtersthresholds","children":[]},{"id":"ci_f3619a9c299f28f6d6f6ad5a485494eb314dab4aa8cf4ac6d85f18e3d896eec3","title":"Filters—Time and Schedule","path":"/lrsiem/7.18.0/filterstime-and-schedule","children":[]},{"id":"ci_c0514f8e696580ff76d33170b421d62ea286e38c7f34a2ed4797b8c3e524844b","title":"Filters—Unique Values","path":"/lrsiem/7.18.0/filtersunique-values","children":[]}]}]},{"id":"ci_470ba9bf263cbfd2bcd6250cc68fab8143a8aa5c6e289ece5b8d2c9386b60c31","title":"General Console Features","path":"/lrsiem/7.18.0/general-console-features","children":[{"id":"ci_9c78ce82f4e1a29c3950d52455c73550cab75390a0197f2cc21a15e344998bee","title":"Export Grid to File","path":"/lrsiem/7.18.0/export-grid-to-file","children":[]}]},{"id":"ci_29c4eacd4c81c742abcad75cc7abb248f15173d86b455d136956e85d1f447074","title":"Layouts","path":"/lrsiem/7.18.0/layouts","children":[{"id":"ci_a730a7c2ef8352db89c43238163b6e6a628d829ae2f4d3af3fade1923b7df8a8","title":"Clone Existing Layouts","path":"/lrsiem/7.18.0/clone-existing-layouts","children":[]},{"id":"ci_c7492be0ab87b61ed3b2f3ada9dad27bc2c06506627b0625bed8e89ffc4a2eeb","title":"Create New Layouts","path":"/lrsiem/7.18.0/create-new-layouts","children":[]},{"id":"ci_d5e338c1fb0cf36aed963713f089691546e2e1925c4d36e49ee1ca07b53199b7","title":"Delete Layouts","path":"/lrsiem/7.18.0/delete-layouts","children":[]},{"id":"ci_5bf336fd350f4a42a6382339002b3c02d9cbd957e54ffeaa5347e7870c480ef8","title":"Import and Export Layouts","path":"/lrsiem/7.18.0/import-and-export-layouts","children":[]},{"id":"ci_21fee95165105aa66b68c2897864b2cfe6ae203c2c4f70a9e699d07c549c5c05","title":"Make or Clear Default Layouts","path":"/lrsiem/7.18.0/make-or-clear-default-layouts","children":[]},{"id":"ci_a98a066eaa03d15547fbc35c7ab1adb8fd7b7cae5adbde61ca83d6dc8c5fca0f","title":"Modify Layout Properties","path":"/lrsiem/7.18.0/modify-layout-properties","children":[]},{"id":"ci_d4febc6e6701d247964f1a55a76167c3b85a6f9d09697cde154a5f355d2c6bc4","title":"Reset Layouts","path":"/lrsiem/7.18.0/reset-layouts","children":[]},{"id":"ci_54a0859682a4d6c6b354cdccec46c3bef4e8516e5cce4d69bc32d8770dd7747a","title":"Save Layouts","path":"/lrsiem/7.18.0/save-layouts","children":[]},{"id":"ci_ac312156ec4ce3f873bc09b249173b258d8a53158e371ab90cc323a8ad639afd","title":"Set Color Themes in Layouts","path":"/lrsiem/7.18.0/set-color-themes-in-layouts","children":[]}]},{"id":"ci_cf6c18f403481e16e2bace2a0c440b964e9518201358e007bee457ee09bd3555","title":"Lists in the Client Console","path":"/lrsiem/7.18.0/lists-in-the-client-console","children":[{"id":"ci_c3a2ea946efb71f2bd1e6b4b66469a2cd431a9f83157f77c1633785ed8f2daa7","title":"Add Expiring Items to a List","path":"/lrsiem/7.18.0/add-expiring-items-to-a-list","children":[]},{"id":"ci_b03d5ff6e4e1bf277b2afd7d316d1892829e4a931cfc41963d4e1f451c2eb258","title":"Add Values to a List","path":"/lrsiem/7.18.0/add-values-to-a-list","children":[]},{"id":"ci_a988019b29c4430ddd0ce4f640b67b23dc468063dfa9286b4e06e1620ef745ff","title":"Clone Lists","path":"/lrsiem/7.18.0/clone-lists","children":[]},{"id":"ci_ccd0546e0766bff5a22ea2ab82415ab7df1adfa11fd490ebda56bbc986430205","title":"Create Lists in the Client Console","path":"/lrsiem/7.18.0/create-lists-in-the-client-console","children":[]},{"id":"ci_4d9ee1ad5fba2c60864b2be597e0f5614ada45b7755a5b66e1ea93b1431410b0","title":"Modify the Properties of Lists","path":"/lrsiem/7.18.0/modify-the-properties-of-lists","children":[]},{"id":"ci_c37f34f8366022d6dbf3d4cc3ef1fc598e1511776489efd51e758587bed0c4a3","title":"Remove List Items","path":"/lrsiem/7.18.0/remove-list-items","children":[]},{"id":"ci_6ff978002b60ac533a8f62f11d413bdd00f1293b3f43ebb0fec46b068dd1b716","title":"Reset Expiration Date for List Items","path":"/lrsiem/7.18.0/reset-expiration-date-for-list-items","children":[]}]},{"id":"ci_fed2c7a52154c59f02a38c1a0a39b68309f13fcbd07c9dd3fc8eac928c5de439","title":"Message Processing Engine Rule Builder","path":"/lrsiem/7.18.0/message-processing-engine-rule-builder","children":[{"id":"ci_42187cbf055fc6c7960b3f80f10c68fdab06522feff3441f352c06c9bbf7ab5a","title":"Application Manager","path":"/lrsiem/7.18.0/application-manager","children":[{"id":"ci_63a8562779cd6f1e6500025aaecd8436b9542f42dfa80d5c450d08ad1363721d","title":"Create New Application Records","path":"/lrsiem/7.18.0/create-new-application-records","children":[]},{"id":"ci_acdb0b9024cad2f2a4622ca2eb54f7747c0be70d7dba61ae36218552ac1aa19f","title":"Modify Application Record Properties","path":"/lrsiem/7.18.0/modify-application-record-properties","children":[]},{"id":"ci_6a66803e4a7e20f2b0a3d5409e354a9d7a34e8c3ec5f27eb61f711fe5f1f5a60","title":"Refresh the Application Manager","path":"/lrsiem/7.18.0/refresh-the-application-manager","children":[]},{"id":"ci_4c06e0d8146a9405a9ec1447d197ef9a07acc575a1838d98174ec6e3679ab35f","title":"Retire or Activate Application Records","path":"/lrsiem/7.18.0/retire-or-activate-application-records","children":[]}]},{"id":"ci_03fbc82e4f0776c2e546b731e5fa3ee4ad43be756032fec46e9c67f2195bf9a8","title":"Common Event Manager","path":"/lrsiem/7.18.0/common-event-manager","children":[{"id":"ci_111761318d38a26237b2dc76bacfbd835fb56a00cb06d5b1ef4b8488015af2d6","title":"Create Common Events","path":"/lrsiem/7.18.0/create-common-events","children":[]},{"id":"ci_4ea7b9233c45935c8e2d37bed29445e220e8f054f8bd89e28e90a8fdd1175c93","title":"Delete Common Events","path":"/lrsiem/7.18.0/delete-common-events","children":[]},{"id":"ci_76121e8f1e07fa60fbdb2a7b2dc07d5a6e2c3dc7ea7fb9d0fe6896e73ec75fbf","title":"Modify Common Events","path":"/lrsiem/7.18.0/modify-common-events","children":[]},{"id":"ci_f2b9bda86e50bbfc1839bee0a48ab9fe603c9a7fe7bb80c2086836489e637967","title":"Search for Common Events","path":"/lrsiem/7.18.0/search-for-common-events","children":[]}]},{"id":"ci_973688d6e3c177e70abb94e4c74eddc759d8e9618ae87a75e180bc6b40ceccae","title":"Create Custom MPE Sub-Rules","path":"/lrsiem/7.18.0/create-custom-mpe-sub-rules","children":[]},{"id":"ci_6ae4d75f848756c5666c1dbe1805193c312da13d20786085d1f1919fd7577e0e","title":"Create MPE Policies","path":"/lrsiem/7.18.0/create-mpe-policies","children":[]},{"id":"ci_8707ac2ee5123a8ed0911f28d7f8cf18d8975c3a94011371e193acf4b919d13d","title":"Create New Base MPE Rules","path":"/lrsiem/7.18.0/create-new-base-mpe-rules","children":[]},{"id":"ci_969e8ac72388ba50dd2b3938ae4979eedda9eda3d61cba48b6c4fd9ad1d66511","title":"Edit MPE Rules","path":"/lrsiem/7.18.0/edit-mpe-rules","children":[]},{"id":"ci_e6cc8b4a33d3c3ae91fb93d3583355e9dfb41c3ebf168daeb9794a070e97c969","title":"Edit Sorting Properties for System Base MPE Rules","path":"/lrsiem/7.18.0/edit-sorting-properties-for-system-base-mpe-rules","children":[]},{"id":"ci_3dbfbfffd6c27fe24aaf6f1ffafca008df5327b4ca1f634b6b6f30f7e40099db","title":"Import and Export MPE Rules","path":"/lrsiem/7.18.0/import-and-export-mpe-rules","children":[]},{"id":"ci_f1d627bbff1b094c573a2755c09d043998a9bc6b636ce1a9aaea098f0941cdde","title":"Regular Expression Characters and Practices","path":"/lrsiem/7.18.0/regular-expression-characters-and-practices","children":[]}]},{"id":"ci_04bf667cac00da85ba0c3873606f663e92889b55de8302d85b8977160f8eae48","title":"Monitor, Search, and Analysis","path":"/lrsiem/7.18.0/monitor-search-and-analysis","children":[{"id":"ci_717b3bb9bfd3380dc7ae3603d1cadefe620b1c12187b6d6aea4d335180cdc033","title":"Alarm Viewer","path":"/lrsiem/7.18.0/alarm-viewer","children":[{"id":"ci_7bf0f3d9abf53f6ba9083a8d3dc5d98db826e0cc2b3d16dea1722a353663bd23","title":"Change the Status of a Single Alarm","path":"/lrsiem/7.18.0/change-the-status-of-a-single-alarm","children":[]},{"id":"ci_dbcbdcf96f598a38b99e93e53c8da9407c701a61966a24c4725933d376f8e293","title":"Change the Status of Multiple Alarms","path":"/lrsiem/7.18.0/change-the-status-of-multiple-alarms","children":[]},{"id":"ci_85022472a3d239c205177826cccaccceb26e0714b2038494ae803f0cd9ba17c9","title":"Create Alarm Lists","path":"/lrsiem/7.18.0/create-alarm-lists","children":[]}]},{"id":"ci_ee4c38a51b00d9a5739da8faebf2c027b172104943e81d6d6f9796fbfc63a749","title":"Investigator","path":"/lrsiem/7.18.0/investigator","children":[{"id":"ci_65c8778ecbe2f4a14610a61f442562810368acba7c54ead6c642364290219194","title":"Change Share Permissions on a Saved Investigation","path":"/lrsiem/7.18.0/change-share-permissions-on-a-saved-investigation","children":[]},{"id":"ci_dc13a18ac5a4cb4341e2b400e94f5966f409d198a08abc73000c470e934381aa","title":"Create Investigations","path":"/lrsiem/7.18.0/create-investigations","children":[]},{"id":"ci_7eae182f9c8ede34a1a18fd4dee3a87a3af7a10ddea9570dac8f25134d725401","title":"Drill Down on a Single Item in Investigation Results","path":"/lrsiem/7.18.0/drill-down-on-a-single-item-in-investigation-results","children":[]},{"id":"ci_72e970610ab0c5093abe1861a89876f358eae67a0fc58f24e579416599489f6a","title":"Drill Down on Multiple Items in Investigation Results","path":"/lrsiem/7.18.0/drill-down-on-multiple-items-in-investigation-results","children":[]},{"id":"ci_35cb307cac7f256408169c770d6e030b8ba03ab7513c947c16cec79e4d2cbc80","title":"Import and Export Investigations","path":"/lrsiem/7.18.0/import-and-export-investigations","children":[]},{"id":"ci_0e6aada60b51c28fdb9e536299152f24d5a5d25f172ff32319324a75ccc9b8e3","title":"Run Saved Investigations","path":"/lrsiem/7.18.0/run-saved-investigations","children":[]},{"id":"ci_62827382505f780f39d323cbc576f13aa8377b98e71321b58a2dc0673007fbbd","title":"Save Investigations with Report Packages","path":"/lrsiem/7.18.0/save-investigations-with-report-packages","children":[]},{"id":"ci_d94c8e041c85bfe84b18c455ca37cd8dd1301557f1cec04d7ea651b5874a919c","title":"Save Investigations with Report Templates","path":"/lrsiem/7.18.0/save-investigations-with-report-templates","children":[]},{"id":"ci_53c9824b14818114badcd587286fb2382908ed5d9e149287b02f6a6055c9b075","title":"Search for Most Frequent Common Events","path":"/lrsiem/7.18.0/search-for-most-frequent-common-events","children":[]},{"id":"ci_ce4c4016f5f4afb494a1df752221be33783351f5816e7d68b6e22cce566e5a1f","title":"View Metadata in the Log Viewer Tab","path":"/lrsiem/7.18.0/view-metadata-in-the-log-viewer-tab","children":[]},{"id":"ci_831048e47737a52f2332f31a45ed13789525fa328b1cff36d115e20dfd9a92a2","title":"Work With Investigation Result Graphs","path":"/lrsiem/7.18.0/work-with-investigation-result-graphs","children":[]},{"id":"ci_70a3566e45edd59a71a188df630454478f9bbe9b895dbdca7b45952d17669893","title":"Work with Log Miner","path":"/lrsiem/7.18.0/work-with-log-miner","children":[]},{"id":"ci_be3fb34971ef4a7788c9e144da17746e7cadece4b8f9f42a3e5765aa32462677","title":"Work With Network Visualization Diagrams","path":"/lrsiem/7.18.0/work-with-network-visualization-diagrams","children":[]}]},{"id":"ci_098094d951801cfb7df75da45cff63462e1ac997932f80ce73418efef78f2f77","title":"Personal Dashboard","path":"/lrsiem/7.18.0/personal-dashboard","children":[{"id":"ci_d7869a2ebeed8257d6cb9cb709e11788e59b6168602fe9a146c413ca2c083a2b","title":"Add Personal Dashboard Filters","path":"/lrsiem/7.18.0/add-personal-dashboard-filters","children":[]},{"id":"ci_324111b525db42aa702f0f76c76d74e5fdb18d508c6ab62cb6baac635992ddfa","title":"Apply Personal Dashboard Filters","path":"/lrsiem/7.18.0/apply-personal-dashboard-filters","children":[]},{"id":"ci_fac1bc9659b672613c4a5f66a94f5e530625b8e1fad8c9424814444048042ef0","title":"Clone Personal Dashboard Filters","path":"/lrsiem/7.18.0/clone-personal-dashboard-filters","children":[]},{"id":"ci_e45908a0fd715d1ea510f93f9f44c1234d7dda5db4cc32fa537bee155bc74a29","title":"Configure the Personal Dashboard Display","path":"/lrsiem/7.18.0/configure-the-personal-dashboard-display","children":[]},{"id":"ci_acf29269927d9524b7283eb2ce5a517fda8f14115f48b2b2e72c2be8a728407d","title":"Delete Personal Dashboard Filters","path":"/lrsiem/7.18.0/delete-personal-dashboard-filters","children":[]},{"id":"ci_af8ef7d638cd21f60b8d310efa315cf5e2cb32befba840b491836966ba90f1d0","title":"Drill Down on Dashboard Data","path":"/lrsiem/7.18.0/drill-down-on-dashboard-data","children":[]},{"id":"ci_efd40d501a8282d7e11113d1bf41c0725495d52c2acb2c371b298c8f590902ee","title":"Modify the Properties of Personal Dashboard Filters","path":"/lrsiem/7.18.0/modify-the-properties-of-personal-dashboard-filters","children":[]}]},{"id":"ci_b9ac71ebfaa0b398b21ca8932091fb88afd84ac03d6ddd35c26d37a769c04d5c","title":"Quick Search Toolbar","path":"/lrsiem/7.18.0/quick-search-toolbar","children":[{"id":"ci_f4f9e57e6d323158f451f3d62d3c7e57c7590308d6e24587ae153e2eb9823523","title":"Use the Quick Search Toolbar","path":"/lrsiem/7.18.0/use-the-quick-search-toolbar","children":[]}]},{"id":"ci_a4a0b5842813e0e958994bff0cfb8a9f069458d59cc977265056749d45427bfb","title":"Run Contextualize","path":"/lrsiem/7.18.0/run-contextualize","children":[]},{"id":"ci_6dee257eea80570ab5a5cc55cc35ce922007fdb5e242106ca32becf5362c622c","title":"Run Correlate","path":"/lrsiem/7.18.0/run-correlate","children":[]},{"id":"ci_adc86f424b6a96849a12523a2d12b7b4a35e468c2d49854dd348bd2bc7f26e0f","title":"Tail","path":"/lrsiem/7.18.0/tail","children":[{"id":"ci_b250589cdb5ac1c1af4bc5f209398efcdee3e11635a8b831243c5fcc2c8e4e5e","title":"Create New Tails","path":"/lrsiem/7.18.0/create-new-tails","children":[]},{"id":"ci_74fb97a53353e141a2946e476875b89d35d4e66300b27e65ddb39d9fc4bdac8c","title":"Run Saved Tails","path":"/lrsiem/7.18.0/run-saved-tails","children":[]},{"id":"ci_8a08f0a269ca92764cfdae1c08d10f9f4e9e685001c8d3e3da0aac506ab75264","title":"Tail Log Sources","path":"/lrsiem/7.18.0/tail-log-sources","children":[]}]},{"id":"ci_3ca4f30ce7eda26e256e85b1dc7e052d7bd27101305e1c4ce596646a5b9be2ac","title":"TopX Analysis","path":"/lrsiem/7.18.0/topx-analysis","children":[{"id":"ci_19ab75caff646c66a3d38497740de1a24fb7cd43fcabb39a4b7241c4ffbe61ca","title":"Analyze TopX Results","path":"/lrsiem/7.18.0/analyze-topx-results","children":[]},{"id":"ci_4c960dbc28ad71504088835ac09f45ec3b03ca14bcfe9b3f2dc1b602c6b51bfa","title":"Configure TopX Widgets","path":"/lrsiem/7.18.0/configure-topx-widgets","children":[]}]}]},{"id":"ci_fb55c4ba247f8375924ca134415eefe8c1dc83cbff46aa2e3d19a8ff9a7ea9ac","title":"My LogRhythm","path":"/lrsiem/7.18.0/my-logrhythm","children":[{"id":"ci_1eec4fd6a3d57fd65a71afa32adb6ec4599cc7b88b71db2d18b1f6efd0e5d1b8","title":"Add or Modify a Person Record","path":"/lrsiem/7.18.0/add-or-modify-a-person-record","children":[]},{"id":"ci_edb674f31a41a6619420651a53faa853caa3ea5eb35cafa664c71bd0b9b3f427","title":"Change Your Password","path":"/lrsiem/7.18.0/change-your-password","children":[]},{"id":"ci_77c42a0e2901ed77ae09273fd6938dfb3f0f2d8ea689bb0d44b8e2a32f20cbe9","title":"Create Email Notification Policies","path":"/lrsiem/7.18.0/create-email-notification-policies","children":[]},{"id":"ci_5dc8392e59ecbae8661680323693cbe94349c20d0e174a2ca25c05eae88b1e81","title":"Manage Your Preferences","path":"/lrsiem/7.18.0/manage-your-preferences","children":[]}]},{"id":"ci_00e58a2965a9b159888396fb583365f124abc7eab216539b4c21b38c5f073f06","title":"Report Center","path":"/lrsiem/7.18.0/report-center","children":[{"id":"ci_137db4f105b75c8629b99f34a64dd6c68ed648aea2f6385fadee3ea517705f0f","title":"Add Custom Logos to Reports","path":"/lrsiem/7.18.0/add-custom-logos-to-reports","children":[]},{"id":"ci_3423ca7d3c27dadcf9e026927a3b7298b42e57bd77871a0b416e593b88c538e3","title":"Clone Reports or Report Packages","path":"/lrsiem/7.18.0/clone-reports-or-report-packages","children":[]},{"id":"ci_27291c219fb62a424bfc2dcc8635b25368ea0982959c67f6056ff133f64b8b85","title":"Create Custom Log Detail Report Templates","path":"/lrsiem/7.18.0/create-custom-log-detail-report-templates","children":[]},{"id":"ci_e5bd5b852e2ecfe9b8e28abb6523fd8cc1cf2675959bc7f6af8de0b7bf650050","title":"Create Custom Log Summary Report Templates","path":"/lrsiem/7.18.0/create-custom-log-summary-report-templates","children":[]},{"id":"ci_dea472045ad3c957be518dc7cc24790bda454b05863d100428d10d19ad30422b","title":"Create Report Packages","path":"/lrsiem/7.18.0/create-report-packages","children":[]},{"id":"ci_272006a980c7bfa20fd2cb5f25c498f3a34ceceb96077a352d35c769715f7a01","title":"Create Reports","path":"/lrsiem/7.18.0/create-reports","children":[]},{"id":"ci_05c21f4f2bc7a13a6692e5c39a98f8b20aad320b51a9c2c93b69c89c28130f12","title":"Create Scheduled Reports","path":"/lrsiem/7.18.0/create-scheduled-reports","children":[]},{"id":"ci_e2ecfd78c6974a135111a04d4270da829638d0f08c5b231e7c7bbc07aba1f084","title":"Import or Export Reports or Report Packages","path":"/lrsiem/7.18.0/import-or-export-reports-or-report-packages","children":[]},{"id":"ci_fd809198e529fc51b4a7c4f33e9b0c27002c7354fb98d00bd13e2c95d0b1d8c9","title":"Manage Scheduled Reports","path":"/lrsiem/7.18.0/manage-scheduled-reports","children":[]},{"id":"ci_b52f6415c9aacbdeed300eb65da5a0589bbc515d43f6cb3b4b38524b032c5043","title":"Modify Custom Report Templates","path":"/lrsiem/7.18.0/modify-custom-report-templates","children":[]},{"id":"ci_5393a1840575edbc0435b3b2b35e8676ec16541082ada28696c8a98516205862","title":"Restore Default Logo to a Report","path":"/lrsiem/7.18.0/restore-default-logo-to-a-report","children":[]},{"id":"ci_115424720457f58bfea9e0c6365a4ea437637b2762ba92035f0045b99a2aa79a","title":"Run Reports","path":"/lrsiem/7.18.0/run-reports","children":[]},{"id":"ci_2e7528d8e537b2b1f4317adad39d5cae4fc06f7c77ab64f1c76e68bc03e6e16e","title":"Run Reports as Investigations","path":"/lrsiem/7.18.0/run-reports-as-investigations","children":[]},{"id":"ci_91311672525ade418eb95d902e90cc46a2cc4b9718762a43c4aebd7b19597a69","title":"Troubleshoot Empty Reports","path":"/lrsiem/7.18.0/troubleshoot-empty-reports","children":[]},{"id":"ci_4e3fb47ea0118a39cee50f8f1e3d756bf6e77602250f202cda7a13ed7b1b8681","title":"View Report Center Job Status","path":"/lrsiem/7.18.0/view-report-center-job-status","children":[]},{"id":"ci_a0c79ad6cf2f19b693f44e53700f337358fcc01498a8efe4cf902d48d8b61eef","title":"View Reports in the Client Console","path":"/lrsiem/7.18.0/view-reports-in-the-client-console","children":[]}]}]},{"id":"ci_f8dd05498c4bba9f0362f3188eaf9bd5c86f2201d3828c654e77bd42550581af","title":"Web Console User Guide","path":"/lrsiem/7.18.0/web-console-user-guide","children":[{"id":"ci_66cfaeb98a761e8ff09b494162b609caf5be7ecbfb9e05f1878d8619e4e6bc03","title":"Alarms","path":"/lrsiem/7.18.0/alarms","children":[{"id":"ci_885083890992b3526cc2d65366e7eb19d12e37789da2ee1d61d0487956578e12","title":"Alarms Page Overview","path":"/lrsiem/7.18.0/alarms-page-overview","children":[{"id":"ci_a43c47916d9c5129f416f2a60d9daa5f5120fee188e5564996666d313e112d19","title":"Alarm Cards","path":"/lrsiem/7.18.0/alarm-cards","children":[{"id":"ci_29756cfcaac54151f11fbc5f051f1190a17725abdd045f9659671f5d10dc8170","title":"Sort Alarm Cards","path":"/lrsiem/7.18.0/sort-alarm-cards","children":[]}]},{"id":"ci_3ae6dfaf9c449043a2bf4b02a54db2ca261f18407f55a55809cd73c428c3cc7d","title":"Alarm Grid","path":"/lrsiem/7.18.0/alarm-grid","children":[{"id":"ci_210c792c66cc2838ad5736207807c85d27b6cfe3f02dcfe0587d76455684325f","title":"Pin and Resize Alarm Grid Columns","path":"/lrsiem/7.18.0/pin-and-resize-alarm-grid-columns","children":[]}]},{"id":"ci_38e84194d580d87b58ae72e3a8adf33d5a0657b87e10640e248467c36a41702b","title":"Alarm Status Trends","path":"/lrsiem/7.18.0/alarm-status-trends","children":[]}]},{"id":"ci_8e20e2c0ad0b9a9f8991507d48ac251ee3303fb375cfdb8e3643e2e6a6e3c996","title":"Alarm Filters","path":"/lrsiem/7.18.0/alarm-filters","children":[{"id":"ci_86e570cf1208e50a848fe51980d72c3789c7c609fc7277a5269cd56d2cf8799e","title":"Remove Alarm Filters","path":"/lrsiem/7.18.0/remove-alarm-filters","children":[]},{"id":"ci_5377b2affbedeca394dd911ee85a4cebb2bceb1f34ccc0c0b3b79f0f6952554f","title":"Use Status, Entity, Risk, Notification List, and Alarm ID Filters","path":"/lrsiem/7.18.0/use-status-entity-risk-notification-list-and-alarm-id-filters","children":[]},{"id":"ci_85c9992620f42f083be36dfb87b4b4829b7ce588e72a4e4b55d70757a6d04e26","title":"Use the Time Frame Filter","path":"/lrsiem/7.18.0/use-the-time-frame-filter","children":[]}]},{"id":"ci_85b1f0c916fe58e533e80186d85bce3c118669c85613f97a28f44ea8b4733cdd","title":"Add Comments to Alarms","path":"/lrsiem/7.18.0/add-comments-to-alarms","children":[]},{"id":"ci_015405a7fbe166f67e285a63778d5a509d827fe73c9640d0d31e832fd24b4331","title":"Approve or Deny SmartResponse Actions in the Web Console","path":"/lrsiem/7.18.0/approve-or-deny-smartresponse-actions-in-the-web-console","children":[]},{"id":"ci_5aa52a15498491f375b5d10dc507964d9ffc4160bed2e1bd54b31a411d7b192b","title":"Drill into Log Data Associated with an Alarm","path":"/lrsiem/7.18.0/drill-into-log-data-associated-with-an-alarm","children":[]},{"id":"ci_9550c7bee9430c28016f5dc9690ffeb09d7b77fa9cd0f3af4a06c967ccb98169","title":"Update the Alarm Status","path":"/lrsiem/7.18.0/update-the-alarm-status","children":[]},{"id":"ci_4c2af9b15bf286fc59fbb858751d276004d68c5fd35ccae5e5e582c581591ed4","title":"View Alarms in Your Browser","path":"/lrsiem/7.18.0/view-alarms-in-your-browser","children":[]},{"id":"ci_77d0cb4ba3f533d65a598d0f3c50a25039768147576a455ba5d8044dd390c85f","title":"View Additional Alarm Information","path":"/lrsiem/7.18.0/view-additional-alarm-information","children":[]}]},{"id":"ci_4d94c08f29cd2152a94eb5624e2041a58127fc0a7fd0e02fc3311bce97004d93","title":"Analyzer Grid","path":"/lrsiem/7.18.0/analyzer-grid","children":[{"id":"ci_7d2e99032e490ff06851af18fca06f9c79cff6d105e1a75e1819a40b4932da6e","title":"Use the Analyzer Grid","path":"/lrsiem/7.18.0/use-the-analyzer-grid","children":[]},{"id":"ci_8f776f582eaf0d78477e6c3edbf99cf969ad6e61be2268fce3f829076d158867","title":"Configure the Analyzer Grid","path":"/lrsiem/7.18.0/configure-the-analyzer-grid","children":[]},{"id":"ci_2427bc5f3c833f6ac1ab1b699575a623f1f107ccae56a8f77d697b24a38bec0f","title":"Details & Actions Panel","path":"/lrsiem/7.18.0/details-actions-panel","children":[]},{"id":"ci_9ee5fc319bba7c46cbf067c008386dc57b03557b1d6f65ff66190a0d6aa5c009","title":"Export Log Data into a CSV File","path":"/lrsiem/7.18.0/export-log-data-into-a-csv-file","children":[]},{"id":"ci_b43962139345930c8604cd47a3473c086211df7415974b4e8b46a70d35e92daf","title":"Inspector Panel","path":"/lrsiem/7.18.0/inspector-panel","children":[{"id":"ci_e7198108bcc889cf38ae28733a621b028f7ae0b335bc17aba9c7906e7e0b6b8c","title":"Integrate with LogRhythm UEBA (formerly CloudAI)","path":"/lrsiem/7.18.0/integrate-with-logrhythm-ueba-formerly-cloudai","children":[]},{"id":"ci_86fa9ad1ca47c95cd5de02bdba59bbe4c1b1cc1a4499e08aa138eaec0e8d1cde","title":"Use Contextualize","path":"/lrsiem/7.18.0/use-contextualize","children":[]},{"id":"ci_b685a0b6585e2b1341c42c000ebca2aa7b0a9589256a4f86d29c656c10b598ed","title":"Configure Third-Party Contextualize Actions","path":"/lrsiem/7.18.0/configure-third-party-contextualize-actions","children":[]},{"id":"ci_49a0a4e71cd45106a85a73235c497487308330ba87d41f8c983f8d78340995ff","title":"Use SmartResponse","path":"/lrsiem/7.18.0/use-smartresponse","children":[]},{"id":"ci_ac1177193ee5a3f7a28cec053ed222ebadbdd8573cb477447bc51bb0b7627d19","title":"Use the AI Engine Rule Viewer","path":"/lrsiem/7.18.0/use-the-ai-engine-rule-viewer","children":[]},{"id":"ci_6e0dcf9ae687b47a7540e80e3eeb59ffa7d1bbc18b8613bb49078f9eb97ced70","title":"Use Threat Intelligence Service Integration","path":"/lrsiem/7.18.0/use-threat-intelligence-service-integration","children":[]}]}]},{"id":"ci_787d64222e0f8c4e86096fbf18b07f4b79f43b663328704144ad9e5ec1ae7f77","title":"Case Management","path":"/lrsiem/7.18.0/case-management","children":[{"id":"ci_6294a60341e5f5c214ae6b1d98a185673eab97bd631684b3b3de5cacbd5c830d","title":"Case Cards","path":"/lrsiem/7.18.0/case-cards","children":[]},{"id":"ci_035997845e2a2cafc6db1f8291c5b5e4add9e9eb4d1c3741379153b92d112201","title":"Case History Widgets","path":"/lrsiem/7.18.0/case-history-widgets","children":[]},{"id":"ci_73326fb487348370470d62e659fe9017adae5d6f592caff3621e5f327ccf1440","title":"Case List Widgets","path":"/lrsiem/7.18.0/case-list-widgets","children":[{"id":"ci_c9656d5a242eaf726660e1013e30e698da2fda3e8d92ae72248f0422fde9c721","title":"Configure Case List Widget Settings","path":"/lrsiem/7.18.0/configure-case-list-widget-settings","children":[]}]},{"id":"ci_ecdcfb7ed84a34b99fd9e5eac74bd020389dcda92a3328543f2e71d36fd15399","title":"Case Owners vs. Collaborators","path":"/lrsiem/7.18.0/case-owners-vs-collaborators","children":[]},{"id":"ci_96d62302cba0f252f4eefc58ff053b2a9ab38c52862417c37b0f4e5cc9b73a21","title":"Case Status and Workflow","path":"/lrsiem/7.18.0/case-status-and-workflow","children":[]},{"id":"ci_68a847d90b0befa46f8423e7c4f87b4c9ed4c5c6ba8ff780c0fa43c0b017de4f","title":"Case Trend Widgets","path":"/lrsiem/7.18.0/case-trend-widgets","children":[{"id":"ci_a98fa754d0dc247fa533788aa49e8d8ccd3251ab921ad7e7b742e4df8845db53","title":"Configure Case Trend Widget Settings","path":"/lrsiem/7.18.0/configure-case-trend-widget-settings","children":[]},{"id":"ci_6ae2b2bb6d5ac9b0e7c45bba0e407b9d552acab9ff9aef03047ac3e7141b3ee0","title":"Read Case Trend by Priority Charts","path":"/lrsiem/7.18.0/read-case-trend-by-priority-charts","children":[]},{"id":"ci_52e58a03d80d77a8f3f1d5526408567d013413553e42bf4fd7abdb5bc46d6e6d","title":"Read Case Trend by Status Charts","path":"/lrsiem/7.18.0/read-case-trend-by-status-charts","children":[]}]},{"id":"ci_0e0e2c72824a6c4544d3dd7b0a60b98cdef12fea1762a8647235dd6600ab8acc","title":"Open the Case Details View","path":"/lrsiem/7.18.0/open-the-case-details-view","children":[]},{"id":"ci_c9617240ea96458d607ac17afded3e12daae998614ca9e93cf5d9812c0c944c5","title":"Separate Entities in Cases","path":"/lrsiem/7.18.0/separate-entities-in-cases","children":[]},{"id":"ci_b833c9779a3708434c4cc0f7031b8da5f897c49a5adf00f244d5226e90bd4e91","title":"Work with Cases","path":"/lrsiem/7.18.0/work-with-cases","children":[{"id":"ci_ad7e28984e327834ab343aec06c72ba63a10056da7b9fb82b2b22103ddabd037","title":"Add Alarms to a Case","path":"/lrsiem/7.18.0/add-alarms-to-a-case","children":[{"id":"ci_631d47955103f98458cd79d120ae56435e1d72176078f79092a48fd01d25f18c","title":"Update the Status of Alarms Associated with a Case","path":"/lrsiem/7.18.0/update-the-status-of-alarms-associated-with-a-case","children":[]}]},{"id":"ci_39ee99865908ca89ccd11793ef86ae223024692b00f7f26f5953ffd793c355d5","title":"Add Files to a Case","path":"/lrsiem/7.18.0/add-files-to-a-case","children":[]},{"id":"ci_df650c35971a6beb0ec74fccecbe2a912b81416f15e544962a5a03091e775673","title":"Add Logs to a Case","path":"/lrsiem/7.18.0/add-logs-to-a-case","children":[]},{"id":"ci_b2fea68a182689d43cebf4b72d0790964a325d514809c40c2071858b67b4e101","title":"Add Notes to a Case","path":"/lrsiem/7.18.0/add-notes-to-a-case","children":[]},{"id":"ci_1993e24296bff61717775962fc911fbd3ca68f0d0c10b20db89e568bc446851e","title":"Case Associations","path":"/lrsiem/7.18.0/case-associations","children":[{"id":"ci_b1f8e86bdadd5b99a45f2860232227c29161259101dc18c5e57551161f72d518","title":"Add Case Associations","path":"/lrsiem/7.18.0/add-case-associations","children":[]},{"id":"ci_b16419b43aae2dffc082e5290f11c5a3a9bac0847f43f1cde2d1192c0a1fa505","title":"Remove Case Associations","path":"/lrsiem/7.18.0/remove-case-associations","children":[]}]},{"id":"ci_9902655333fb7511c5563cd8f884f65539c6b96e612167d7c62c6f063bed2878","title":"Case Collaborators","path":"/lrsiem/7.18.0/case-collaborators","children":[{"id":"ci_a406ab0fad557b8e266af0c9311ebb68fdfaa5613f49b5e4f683459362e61995","title":"Assign Collaborators to a Case","path":"/lrsiem/7.18.0/assign-collaborators-to-a-case","children":[]},{"id":"ci_5a824a7f8e80410744b4a1535d4c158202b8a1189bbb587b78fb65bd49787f9d","title":"Remove Collaborators from a Case","path":"/lrsiem/7.18.0/remove-collaborators-from-a-case","children":[]},{"id":"ci_cf498f820f03b792ebdb922c8a1c428623e3cb497d59fa98c38ec32e826ae522","title":"Transfer Case Ownership","path":"/lrsiem/7.18.0/transfer-case-ownership","children":[]}]},{"id":"ci_812bd7ac763d63a709f99e27b54e3ee89b2dfb59f8e31e6b4398075a2f8aa61e","title":"Case Tags","path":"/lrsiem/7.18.0/case-tags","children":[{"id":"ci_e1639712d6434325bfaa7995e03b0e7abd3cf2a91774626864fbfcc8a4eda50c","title":"Add Case Tags to a Case","path":"/lrsiem/7.18.0/add-case-tags-to-a-case","children":[]},{"id":"ci_de0411efbdbcb52891f9f3643faee447d4a90562cdef8216a35dcaba10320899","title":"Remove Case Tags from a Case","path":"/lrsiem/7.18.0/remove-case-tags-from-a-case","children":[]},{"id":"ci_bc2aad59cf216374efd729d74019bc5d36183bfe01e87a44de1eb82221606a99","title":"Use Case Tags to Filter Cases in Case Widgets","path":"/lrsiem/7.18.0/use-case-tags-to-filter-cases-in-case-widgets","children":[]},{"id":"ci_3d3594d57073c5da1d9a2e8cdf36eb8291521eba2864ac0bfdf45789e8026177","title":"Use the Case Tag Library","path":"/lrsiem/7.18.0/use-the-case-tag-library","children":[]}]},{"id":"ci_33f941e59ac0bde38c865750fb2ed915b289a21e060fc5992d3f0ef6ded228aa","title":"Close Cases","path":"/lrsiem/7.18.0/close-cases","children":[]},{"id":"ci_0f33cac7bcc5efb29e1042dd4ef77859ebf715409def9337c09fea92210e9fff","title":"Create New Cases","path":"/lrsiem/7.18.0/create-new-cases","children":[]},{"id":"ci_0c42c91c07fee3fc465aba8a4dc498b070a01c741f1ca6d219bab59aae173221","title":"Delete Logs, Alarms, and Files from Case Evidence","path":"/lrsiem/7.18.0/delete-logs-alarms-and-files-from-case-evidence","children":[]},{"id":"ci_d8d1df9ff4e7ea527a3caf33b90f7252f9a3b5e50518cddebdaac62d6f0dee42","title":"Edit and Delete Notes in Case Evidence","path":"/lrsiem/7.18.0/edit-and-delete-notes-in-case-evidence","children":[]},{"id":"ci_ed484ff94d28d24474a29772cbf3c06ab83ab757168ab3662e73a277af8e70f7","title":"Edit Case Names, Priorities, Due Dates, and Summaries","path":"/lrsiem/7.18.0/edit-case-names-priorities-due-dates-and-summaries","children":[]},{"id":"ci_5c80c75870bbd47095be67fac9ccb0f4f5c6fd9614b6fd6e1bf9f7d106363eda","title":"Filter Cases","path":"/lrsiem/7.18.0/filter-cases","children":[]},{"id":"ci_465734e5b37df2c282f8311a24f4c1624adb0ac406337861f061c9c36ef881aa","title":"Pin Important Evidence","path":"/lrsiem/7.18.0/pin-important-evidence","children":[]},{"id":"ci_111668a23a58b2d43d36a6955a88bfdca3b00104c13ecc97bdf6e6c82544829d","title":"Reopen Cases","path":"/lrsiem/7.18.0/reopen-cases","children":[]},{"id":"ci_681312936953d98aa55ec105f0cfaf5055831766ef92d2c5d44a7a3aabc3afc9","title":"Unpin Evidence","path":"/lrsiem/7.18.0/unpin-evidence","children":[]}]},{"id":"ci_c178093244750d4e93210dc805ce6eae0232f5634ce363c50ab93cc7b2b93ac5","title":"Work with the Current Case Panel","path":"/lrsiem/7.18.0/work-with-the-current-case-panel","children":[]}]},{"id":"ci_bb84c220b1475e9259a3c0d468aba7f649d533411b36bc0cee33fe0313e2f8c9","title":"Cloud to Cloud Log Collection","path":"/lrsiem/7.18.0/cloud-to-cloud-log-collection","children":[{"id":"ci_f8d415fa702cb87095970370206b68c45e78efab3f9420fa17ee30b8bafef4e5","title":"Configure an Open Collector Log Source","path":"/lrsiem/7.18.0/configure-an-open-collector-log-source","children":[]},{"id":"ci_0a561379c47b1e443749528d209ee245519293d11d7f70774f30b80502a2b5ba","title":"Add a Log Source Configuration","path":"/lrsiem/7.18.0/add-a-log-source-configuration","children":[]},{"id":"ci_3bf88f5d6288f3863bf0e36ac07fdbcfe7a3bd675fc60445ef62c1dd28a90f7b","title":"Use the Log Source Configuration Grid","path":"/lrsiem/7.18.0/use-the-log-source-configuration-grid","children":[]},{"id":"ci_04dfb06e4f3818eb352224a84f4da9ed169ea4cb41e6c2f37e43b3f3a4d8a176","title":"Edit a Log Source Configuration","path":"/lrsiem/7.18.0/edit-a-log-source-configuration","children":[]},{"id":"ci_4de0534f3fce1713063473946abf8a2cd5ae160d6de1fa56a6f57659417e4193","title":"Delete a Log Source Configuration","path":"/lrsiem/7.18.0/delete-a-log-source-configuration","children":[]}]},{"id":"ci_186dfebc5048a61d2707957645e43cd6bfc3965fd9de6dd60e5860332a724d15","title":"Dashboards","path":"/lrsiem/7.18.0/dashboards","children":[{"id":"ci_c4ea20266639b7db52182e0fd235109cffe17d4f906fe81c68cd3ee5bbaadfa2","title":"Create New Dashboards","path":"/lrsiem/7.18.0/create-new-dashboards","children":[]},{"id":"ci_ad84294c85bf78d8a6647a273e82411b31f691e6ecf7cf8f3f2298b42e2e3ac0","title":"Clone Dashboards","path":"/lrsiem/7.18.0/clone-dashboards","children":[]},{"id":"ci_a9ca80678b060fc2d1e2572578863a1f2cf3a2559c428403cf32d6a5c60eae65","title":"Import and Export Dashboards","path":"/lrsiem/7.18.0/import-and-export-dashboards","children":[]},{"id":"ci_b7effbedded0d89e866acffe5518e261a797e43f476b2feef6a6008c8aee5d13","title":"Change Dashboards","path":"/lrsiem/7.18.0/change-dashboards","children":[]},{"id":"ci_2e674f67676033916978ced537f206e1f8da61c2242b3f893fc53f3928fe073d","title":"Revert Changes","path":"/lrsiem/7.18.0/revert-changes","children":[]},{"id":"ci_ebe9cd6e84eab17aa6f7cf6b99383247effc2a548c2f198fd1cb32607f4ea264","title":"Print Dashboards","path":"/lrsiem/7.18.0/print-dashboards","children":[]},{"id":"ci_7207839ccafe5d7c6436b4c04ed6778f1f9aeaf9ab706ac9414ba6bf4b4437a7","title":"Save Dashboard Changes","path":"/lrsiem/7.18.0/save-dashboard-changes","children":[]},{"id":"ci_89c7d8bb6949b89376345696fd3a3b0d058df1f22750a66b6162004b45ec671b","title":"Filter Data with Lucene Searches","path":"/lrsiem/7.18.0/filter-data-with-lucene-searches","children":[{"id":"ci_b5a8da7ce243014eba4cf39c9b1943790bd8a12f08fccc8f586415ea1c074d3c","title":"Lucene Search Syntax","path":"/lrsiem/7.18.0/lucene-search-syntax","children":[{"id":"ci_6f39fbc1cf987fa57313afbe24067d51eec035a3d9f75b4601a442fe1796807c","title":"Basic Queries","path":"/lrsiem/7.18.0/basic-queries","children":[]},{"id":"ci_ea71a9a7844c528a2d9f4041c1a558e983c5afe8364b1af4562c6a4b0414455d","title":"Complex Queries","path":"/lrsiem/7.18.0/complex-queries","children":[]},{"id":"ci_847b853248f7e1cfeab5d0544c828fceb2e75548f628a2d64c4b9aae4874dcc0","title":"Troubleshoot the Lucene Search","path":"/lrsiem/7.18.0/troubleshoot-the-lucene-search","children":[]},{"id":"ci_0791bd422d05e2f58b85e748d28b2513cb3dee80f87d737585121e58c59b8626","title":"Wildcard Queries and Fuzzy Matches","path":"/lrsiem/7.18.0/wildcard-queries-and-fuzzy-matches","children":[]},{"id":"ci_b9ff2afa2ce47636bee426a58b16423b0afe7d1a843ce3067b150f4243391d31","title":"Metadata Fields","path":"/lrsiem/7.18.0/metadata-fields","children":[{"id":"ci_267e14c2d3792a4be616fb9c33e70652fd20f09892ba296d7d82bfb6c5d9cba7","title":"Applications","path":"/lrsiem/7.18.0/applications","children":[]},{"id":"ci_3c8009dc5b612ba4083a845680d09e384880b2f50b9d1e111722304646ab25d7","title":"Classification","path":"/lrsiem/7.18.0/classification","children":[]},{"id":"ci_05ae84c61898cc34b9f9389b44a916d75ef473b17a2b2c207e68c927aa134b1b","title":"Host","path":"/lrsiem/7.18.0/host","children":[]},{"id":"ci_37690a16c9a20cab3a979ed02f2920d8a3933020dbec3bde3d9c1feede8c1d8e","title":"Identity","path":"/lrsiem/7.18.0/identity","children":[]},{"id":"ci_04ade8d5d99d5911a65b1dae26f418f066e7f2046f2532c6cd836e634400fd9e","title":"KBytes and Packets","path":"/lrsiem/7.18.0/kbytes-and-packets","children":[]},{"id":"ci_5118d5daf1bc16fb74e6897610a80f03b9060ee11eb8adfb5ef4cdbe1088df49","title":"Location","path":"/lrsiem/7.18.0/location","children":[]},{"id":"ci_fddfd1796f9e3c0e55d78a13518b6e29b75ef47f46b0cc45069c784bab3996cf","title":"Log","path":"/lrsiem/7.18.0/log","children":[]},{"id":"ci_93e1fbdff72a98375fe5025c31b91b2b74d34feacdb75bbc24a0bdba9bfaa507","title":"Network","path":"/lrsiem/7.18.0/network","children":[]}]}]}]}]},{"id":"ci_6634d19aac8ef5b232f357853c2d03411528cc538e064c753275644f3b1647f7","title":"Lists in Web Console","path":"/lrsiem/7.18.0/lists-in-web-console","children":[{"id":"ci_982223be235b2f90763a5810d0566e18cd21bdaed5455f09ce1ea1f8c5b1dc49","title":"Add List Items in the Web Console","path":"/lrsiem/7.18.0/add-list-items-in-the-web-console","children":[]},{"id":"ci_f8a94a5eade3ae0c4c3684741e8c7035a1bbfa2f14812190059b5ae73a9d047e","title":"Add Related Lists","path":"/lrsiem/7.18.0/add-related-lists","children":[]},{"id":"ci_ee4e0d9d0485d88e14089e7c00df6ad84d39215e9cebdbc8e3bb32db09bd5f22","title":"Create a List in the Web Console","path":"/lrsiem/7.18.0/create-a-list-in-the-web-console","children":[]},{"id":"ci_495c90f7364a90ac3629ea91972c451944b641859c16c89fa2d8f7af0a7c3175","title":"Filter and Sort Lists","path":"/lrsiem/7.18.0/filter-and-sort-lists","children":[]},{"id":"ci_b9e1acf37a80fd6acc0804f13d714c719a0a80e35be3bcb65162f71c2ee112c1","title":"Remove List Items in the Web Console","path":"/lrsiem/7.18.0/remove-list-items-in-the-web-console","children":[]},{"id":"ci_d9443d598d4329bae0c644641e9cfdcd5c519a084700710dc499cf4b73e3ff68","title":"Select and View a List","path":"/lrsiem/7.18.0/select-and-view-a-list","children":[]},{"id":"ci_8e13f73063b67b0ebfed1d152aa496b512c7f9ee9355ef2fbf801bb7dc638f62","title":"View Retired Lists","path":"/lrsiem/7.18.0/view-retired-lists","children":[]}]},{"id":"ci_2c12b482a03934639fff27885f9447426743dcfd6171b1693f870eaa3d40d21b","title":"Log Collection in Web Console","path":"/lrsiem/7.18.0/log-collection-in-web-console","children":[{"id":"ci_5e7ce0ba08a920058d328e15bbede12c32deba417243b0d77a5d7470f2ec0b8d","title":"Agents Grid","path":"/lrsiem/7.18.0/agents-grid","children":[]},{"id":"ci_d22acbab2d3a78080724d9aa6da6fecd5160f541c44d961d60bcfa34e676a946","title":"Beats Grid","path":"/lrsiem/7.18.0/beats-grid","children":[]},{"id":"ci_3809becf2d0639c281e460888b91973839cf0438859b57bf0b02b0caa2878484","title":"Log Sources Grid","path":"/lrsiem/7.18.0/log-sources-grid","children":[]},{"id":"ci_f0bd456bb179ea0ae3271c4b65b419279d33e0d64e55123e076817de298063df","title":"Open Collectors Grid","path":"/lrsiem/7.18.0/open-collectors-grid","children":[]},{"id":"ci_45ef6d7d12b861678bc61beb24dcd2e5f601fbaae14328c15930e22ad61541c3","title":"Add a New Beat in Web Console","path":"/lrsiem/7.18.0/add-a-new-beat-in-web-console","children":[]},{"id":"ci_3546e0c34cd2f134314bedd1937574ca82428918c4b15901630a1466b433795c","title":"Add a New Log Source in Web Console","path":"/lrsiem/7.18.0/add-a-new-log-source-in-web-console","children":[]},{"id":"ci_a75151e7e363410d33e9df08acaf7e4eaa0fc617750412fdbe76d365d681e837","title":"Manage Pending Log Sources","path":"/lrsiem/7.18.0/manage-pending-log-sources","children":[]},{"id":"ci_16de34b7b35401e895217a5aa4875fc105039d5eeabae446dfd36413aa9de4bb","title":"Retire Beats","path":"/lrsiem/7.18.0/retire-beats","children":[]},{"id":"ci_561d6dbe8802e95d1f1f9b7f7097b5966dcf505a2080933d9047c644c75a213b","title":"Retire Open Collectors","path":"/lrsiem/7.18.0/retire-open-collectors","children":[]}]},{"id":"ci_1d499f0698b0591368472703ef8c8e8f6e91ddadbb78197d731896617db83c0f","title":"Playbooks","path":"/lrsiem/7.18.0/playbooks","children":[{"id":"ci_6e8313a7c228a1ffe527b7943312f9a8d3e724df685894e98d9e6cb301386dcb","title":"Create Playbooks","path":"/lrsiem/7.18.0/create-playbooks","children":[]},{"id":"ci_c0013733b2ebe79484be32fa295cc20fc79df4d46af036dffdc2f9067ca4624c","title":"Import Playbooks","path":"/lrsiem/7.18.0/import-playbooks","children":[]},{"id":"ci_6cf2635003e236f69aa96dc95f35f5b735771be4ff74a27f9ca66215e635db6f","title":"Work with Playbooks","path":"/lrsiem/7.18.0/work-with-playbooks","children":[]},{"id":"ci_aa2e8b87e76e08a67c1748b26ac245d2ba9279ee44b0bb47cb597452ee8c5061","title":"Add Playbooks to a Case","path":"/lrsiem/7.18.0/add-playbooks-to-a-case","children":[]},{"id":"ci_8d249251b8394fa2c1694bc2c7b15e9a2866eb8f0f8926be41ea07df8a1ed44b","title":"Work with Playbooks in a Case","path":"/lrsiem/7.18.0/work-with-playbooks-in-a-case","children":[]},{"id":"ci_5bcc807d46210a3233b2c39a5c653c7434180992964d34c89541058175573230","title":"Procedures List Widget","path":"/lrsiem/7.18.0/procedures-list-widget","children":[]}]},{"id":"ci_50ff43445199346730f37e497ff20f81e3439e7942fe4f149177dd1d0ae6f18c","title":"Reports","path":"/lrsiem/7.18.0/reports","children":[{"id":"ci_be49c2454739b9c27263600dd15d9cb2d68cb363cd93d9b781b3e70e9cb32c89","title":"Completed Reports Widget","path":"/lrsiem/7.18.0/completed-reports-widget","children":[{"id":"ci_95df8c1b45d4e72706ea21dc4c665166a02fac3b749ac1522fa4bd091570ac2a","title":"Configure Completed Reports Widgets","path":"/lrsiem/7.18.0/configure-completed-reports-widgets","children":[]}]},{"id":"ci_e7a1e9a6637721582270976711340197cb9602bcc061e5a9e8edc2d8bcfc9a1f","title":"Download Reports from the Web Console","path":"/lrsiem/7.18.0/download-reports-from-the-web-console","children":[]},{"id":"ci_7cf7471bcbf9e25f3621e96a2b5236ce9dbc9b8e089fcae78db882075466934b","title":"Filter Report Packages on the Reports Grid","path":"/lrsiem/7.18.0/filter-report-packages-on-the-reports-grid","children":[]},{"id":"ci_6e0c332e1b644489ab45b1b6d371812904c57aac846d8d19427366b8556fd359","title":"Pin and Resize Reports Grid Columns","path":"/lrsiem/7.18.0/pin-and-resize-reports-grid-columns","children":[]},{"id":"ci_fa4225c266dcd7fd6a16eac450398e7fc5d2d2d2c574c288d35d75e9b0967bcf","title":"Run Searches from Report Filter Criteria","path":"/lrsiem/7.18.0/run-searches-from-report-filter-criteria","children":[]},{"id":"ci_68d36505309e7a75f7b3778390816a3662a012ad7a565778ae9b225c674f3365","title":"Sort Content on the Reports Grid","path":"/lrsiem/7.18.0/sort-content-on-the-reports-grid","children":[]},{"id":"ci_3bd53e8f55a27c21afd529ad5627d6be6d8941eedcde6063dae6f26ac742816d","title":"View Package and Reports Details in the Inspector","path":"/lrsiem/7.18.0/view-package-and-reports-details-in-the-inspector","children":[]}]},{"id":"ci_e833e86a03944c1d7fa0243f82349f0ab053570a658222d3dd60966e06e17674","title":"Search","path":"/lrsiem/7.18.0/search","children":[{"id":"ci_6bf82388fa23d9f440793ec42af1f4a2b560041ec74b2bca71b001a416dd8d22","title":"Manage the Searches Page","path":"/lrsiem/7.18.0/manage-the-searches-page","children":[]},{"id":"ci_065afb224f5f875a26b3c930ad2b33d275434877d92c58f9398e670891d071a3","title":"Run Searches from the Searches Page","path":"/lrsiem/7.18.0/run-searches-from-the-searches-page","children":[]},{"id":"ci_3731f56dc92de6e2339f863fa809b1dc05e6578cb754152e97904ecc002b61c8","title":"Use Search","path":"/lrsiem/7.18.0/use-search","children":[]},{"id":"ci_d1d30dbb3fe0fcf2ed330b21976850fea098539d7607274d87ce9e485a82fb2b","title":"Save Searches","path":"/lrsiem/7.18.0/save-searches","children":[]},{"id":"ci_c24da07776225691f3cdc19c18a38fcbd57c5da4dc21a95d7fd744ccf1faabca","title":"Perform Details Searches (User/Host)","path":"/lrsiem/7.18.0/perform-details-searches-user-host","children":[]},{"id":"ci_8e918d5b89d3f96c7c991b613725d7d4b97d9dc3692ed9e852282dc4459de4b9","title":"Perform Pivot Searches","path":"/lrsiem/7.18.0/perform-pivot-searches","children":[]},{"id":"ci_7b6224c1c5f83a1f2a9ab0f804d767c86ae3beb0039d802f3aaf78ff8590a366","title":"Search Tiers (Hot/Warm/Cold)","path":"/lrsiem/7.18.0/search-tiers-hot-warm-cold","children":[]}]},{"id":"ci_dd758a5f4fde7a0008bf3f044fda01cae4edb5c9f16f9f8629b8827c3d3d0028","title":"SecondLook - Web Console","path":"/lrsiem/7.18.0/secondlook-web-console","children":[]},{"id":"ci_9c04384159537b9431ac5b8188e38c4c4910af091b99ccf6a2a42be6b7fc2d63","title":"Single Sign-On","path":"/lrsiem/7.18.0/single-sign-on","children":[{"id":"ci_88e6f11ab617c035872649135b385feada715f311225eb279fabfac00f78ca5a","title":"SSO Known Issues and Recommendations","path":"/lrsiem/7.18.0/sso-known-issues-and-recommendations","children":[]},{"id":"ci_d0fb204419dc7cf6d23884e13bc3b4ffbbc6fd6304aeee65b0985d5c9e283ec9","title":"SSO User Auto-Provisioning","path":"/lrsiem/7.18.0/sso-user-auto-provisioning","children":[]},{"id":"ci_ff45d1aeaac31c9e106654304a23b53961bbfc09d165c3da8b09c0bf87b0b87f","title":"SSO Configuration","path":"/lrsiem/7.18.0/sso-configuration","children":[{"id":"ci_a541e173bb3f7609578e62b7d9a970aab6ab6fe0c6e74c937da439868e2ae783","title":"Supported Identity Providers","path":"/lrsiem/7.18.0/supported-identity-providers","children":[{"id":"ci_755ad934aa50a21e0f9d4e3d8b0e3f105985ad14407ab6030fee66cb4c2e880b","title":"Configure SSO with Okta","path":"/lrsiem/7.18.0/configure-sso-with-okta","children":[]},{"id":"ci_2c968fa1157a158a1d0499ec3d718e8dc2f575b2aad52daf099870848f6f8cdd","title":"Configure SSO with Azure AD","path":"/lrsiem/7.18.0/configure-sso-with-azure-ad","children":[]},{"id":"ci_b98197bf92231ef031faa2b96f4f25d8e6b9cbd3ebca2f33312d70fa419ad4da","title":"Configure SSO with PingOne for Customers","path":"/lrsiem/7.18.0/configure-sso-with-pingone-for-customers","children":[]},{"id":"ci_52232f6a73088401ff49def2cb4767c076a03fcd122f962a07727c33549981f1","title":"Configure SSO with PingOne for Enterprise","path":"/lrsiem/7.18.0/configure-sso-with-pingone-for-enterprise","children":[]}]}]}]},{"id":"ci_6ed850f00e4a83a07063922c4fc6fe0b5f4874e88cb37dbaea3490404298b063","title":"TrueIdentity","path":"/lrsiem/7.18.0/trueidentity","children":[{"id":"ci_e06a7b02b4fc8e21f35431b9587396d52f0084ca379bd6cf1fc964a116207984","title":"Work with TrueIdentities","path":"/lrsiem/7.18.0/work-with-trueidentities","children":[]}]},{"id":"ci_85fb1f1d981513ae6d3c26fe89bd5411d38be042a4e61e93fd498289ac2036b3","title":"User Interface","path":"/lrsiem/7.18.0/user-interface","children":[{"id":"ci_14556a5eebcdff1c099efdeb5221a772280d9e52cffe2daede87076a68bf6531","title":"Resource Center","path":"/lrsiem/7.18.0/resource-center","children":[]},{"id":"ci_7b9c2aa5a9b69cb587b1bbef5ad57533805f0f0d97027b3d83a3e36011899c0d","title":"Pages","path":"/lrsiem/7.18.0/pages","children":[{"id":"ci_9bc21f8e98d19cd0c73c75a8090c03e7de1fba4ade3cbd1c2e63e24cd1b21d5a","title":"Alarms Page","path":"/lrsiem/7.18.0/alarms-page","children":[]},{"id":"ci_9824088429e75073431d592dbb817b39e1def46d7122307f5244dc900576a133","title":"Analyze Page","path":"/lrsiem/7.18.0/analyze-page","children":[]},{"id":"ci_bd3514db33c1db401f6112e9ea70e503f9790c81a2d36c161d17b15878029cc0","title":"Cases Page","path":"/lrsiem/7.18.0/cases-page","children":[]},{"id":"ci_ea4cd1fa6c144911216a79cdb08a78446e35208ffa43b60fb60c500dd1df6501","title":"Dashboards Page","path":"/lrsiem/7.18.0/dashboards-page","children":[]},{"id":"ci_9d97b06ff1c1353662a11481bb3d365347cbf42a5fb6d9c2331f8df3c576c37a","title":"Host/User Detail Page","path":"/lrsiem/7.18.0/host-user-detail-page","children":[]},{"id":"ci_f81a75ffa85448746b17f762a15f31984c3b60bf85c8c98f19a39933317caf27","title":"Lists Page","path":"/lrsiem/7.18.0/lists-page","children":[]},{"id":"ci_951502c37e5eb53921aea96d34a7d67193d6477848315c88c52ffbca673438b9","title":"Reports Page","path":"/lrsiem/7.18.0/reports-page","children":[]},{"id":"ci_89c02a01e9f20dffb3350d1e4e54cb3874bf1131efbcbcff0eeb3882cb48d6cc","title":"Searches Page","path":"/lrsiem/7.18.0/searches-page","children":[]},{"id":"ci_01ad56b4938a90194c1ac32567baa34db2b3234d7bcb767cd4c565691a026b74","title":"TrueIdentity Page","path":"/lrsiem/7.18.0/trueidentity-page","children":[]}]},{"id":"ci_359ba36bd64cea45af2d92aa6a0760044b3a289f4e54ed0d1cce7f6dc1d99329","title":"Panels","path":"/lrsiem/7.18.0/panels","children":[{"id":"ci_e2e4acfe128df980ca4c377f902f5a779cdbcf00308fd216a190d1753558b9e7","title":"About the Analyzer Grid","path":"/lrsiem/7.18.0/about-the-analyzer-grid","children":[]},{"id":"ci_893eff30a53fdb208d4c92dc593e123149fe89a0bce9579783f92a25ff2f60f6","title":"Current Case Panel","path":"/lrsiem/7.18.0/current-case-panel","children":[]},{"id":"ci_1777000c600e078790e132c246fe200dc3bbbdbae767e72a2be313796c17e82e","title":"Inspector","path":"/lrsiem/7.18.0/inspector","children":[]}]},{"id":"ci_e2d6f88fbde5be5cdd039ae5eb286c3188665c88d3323d7200ebf733b2dd5682","title":"Tools","path":"/lrsiem/7.18.0/tools","children":[{"id":"ci_138ae3c661a038e1c879e1eaefdc79c497b1cb6d337a555d4d343c646cfa806e","title":"About Widgets","path":"/lrsiem/7.18.0/about-widgets","children":[]},{"id":"ci_6c32f97d803f28737db39e6779dbf204d9e610985994b0d2f0644eea4d09e29e","title":"Breadcrumbs","path":"/lrsiem/7.18.0/breadcrumbs","children":[]},{"id":"ci_33e3b283aff1a507c6f249d43142223cc8309aba028c4c65f82a6335991a7e68","title":"Hotkeys","path":"/lrsiem/7.18.0/hotkeys","children":[]},{"id":"ci_4332f6428d687568eff4b596b6882a9e04f631f452f024ca93e426766c823520","title":"Icons","path":"/lrsiem/7.18.0/icons","children":[]},{"id":"ci_b595eed845adca6432c31914653b3df3e92775d9cb62c53f764237125cc628b0","title":"Search Tools","path":"/lrsiem/7.18.0/search-tools","children":[]},{"id":"ci_eb0331404b67c35e0724dd319ffcdf99c6b057a1b517f99c296831633f8457bd","title":"Taskbar","path":"/lrsiem/7.18.0/taskbar","children":[]},{"id":"ci_01bc36509592730dbf3ce49e4d1aa21c7c4178b3aaee3616b96a9efb2dfd35a8","title":"Typeahead Filters","path":"/lrsiem/7.18.0/typeahead-filters","children":[]}]}]},{"id":"ci_9696b4cbe54269d786ae8043b69f4c7213f317d4b8c8e44d1f4a4dd441216469","title":"User Settings","path":"/lrsiem/7.18.0/user-settings","children":[{"id":"ci_6c2b0bfa778ed5684c151e54a8def0951a9c16c1dadb8aef1ebf970c8f39b567","title":"Access Web Console Help","path":"/lrsiem/7.18.0/access-web-console-help","children":[]},{"id":"ci_376299a80a288958405d429f7701dfcef72e365324c927182f4ac20cd145fd86","title":"Change the Default Web Console Search Timeout Period","path":"/lrsiem/7.18.0/change-the-default-web-console-search-timeout-period","children":[]},{"id":"ci_67f00fe19a1c9742ee2f7c053b08e99364591262c35304fb4fdf0cde8fc08aaa","title":"Change the Web Console NGINX Configuration to Modify Available Ciphers","path":"/lrsiem/7.18.0/change-the-web-console-nginx-configuration-to-modify-available-ciphers","children":[]},{"id":"ci_1c089d7167787807b0081e4f11def20582c6b68c4eab24c762c7e77a3c1e488e","title":"Change Web Console Password","path":"/lrsiem/7.18.0/change-web-console-password","children":[]},{"id":"ci_64a0888c3fe39fea03067999f5eed4bc1daed21a45d304b5d849fd1c013a810d","title":"Configure Navigation Warning","path":"/lrsiem/7.18.0/configure-navigation-warning","children":[]},{"id":"ci_e5b1a73084d4738bb0ccc9f6d84a4126117ce3b10adcd3498caaac5e815da0bf","title":"Configure Search Results","path":"/lrsiem/7.18.0/configure-search-results","children":[]},{"id":"ci_eb94d3c6c70149813e7bf52bb10b346986d17708a0859cfd49207015cddf1d9f","title":"Select Query Location","path":"/lrsiem/7.18.0/select-query-location","children":[]},{"id":"ci_329511d9577a9a8e1a3e23c8474fc98d8d41bfb42d6e3f85ae4a3f33db9cbace","title":"Set the Date Time Format","path":"/lrsiem/7.18.0/set-the-date-time-format","children":[]},{"id":"ci_c35c88c147f42bd03c2c71e7b0403849adc2193b02143abd21b57dc2e7e0d0ef","title":"Set Your Drilldown Preference","path":"/lrsiem/7.18.0/set-your-drilldown-preference","children":[]},{"id":"ci_aacb46b681a24356c09a9817db4b257cd9ca09572d5b131f24030b96b1e7ea3b","title":"Switch Between Day and Night Modes","path":"/lrsiem/7.18.0/switch-between-day-and-night-modes","children":[]}]},{"id":"ci_851b3dab11772737af4e897fbd5c04e1d00bd94746620c6ab00e48fd320ecb1a","title":"Widgets","path":"/lrsiem/7.18.0/widgets","children":[{"id":"ci_05641066ed53b609d2f0bd2ea8f0c604ef88e1e89dce5b12319e5ce06b6262d0","title":"Customize Dashboard Widgets","path":"/lrsiem/7.18.0/customize-dashboard-widgets","children":[{"id":"ci_0a35a6d00fd2f3aa85819d5029bd81d18d8158b32771d1a14ac8783acaecc4d0","title":"Add Widgets","path":"/lrsiem/7.18.0/add-widgets","children":[]},{"id":"ci_38ac778cfc4d5e5d8dd221d4c11665c15ac2f2110cece36391ddfd55ea0d5bde","title":"Configure Widget Settings","path":"/lrsiem/7.18.0/configure-widget-settings","children":[]},{"id":"ci_ae87dae235c2a56b8d0c16f9815d4073a06cd8fa4debf0aa7bcbc0e5de760b0d","title":"Copy Widgets","path":"/lrsiem/7.18.0/copy-widgets","children":[]},{"id":"ci_974a9647d656b3add6ca1c9b05236be9c5cc22ef7c2c1892e50c146cb1abb47b","title":"Delete Widgets from a Dashboard Layout","path":"/lrsiem/7.18.0/delete-widgets-from-a-dashboard-layout","children":[]},{"id":"ci_e2625b68d0a41653c7da8d81687e4e46c49d0ddeb347a857fc7dbc75dd7c11de","title":"Move Widgets","path":"/lrsiem/7.18.0/move-widgets","children":[]},{"id":"ci_2fd5de32b3e84843a8178ac4313d181a9866742313565ca09cdea2a10e2a0d6b","title":"Rename Widgets","path":"/lrsiem/7.18.0/rename-widgets","children":[]},{"id":"ci_47e770a9ef32f1061c02094f028c88f5226d614d4fb47bff0518d24eee9c6ff6","title":"Resize Widgets","path":"/lrsiem/7.18.0/resize-widgets","children":[]}]},{"id":"ci_e91ebad74c3dbb333a07943f5ad02f85c44cbbfe690f06ae002505a9751eaf3a","title":"Component Status Widget","path":"/lrsiem/7.18.0/component-status-widget","children":[]},{"id":"ci_c95860fa66a105a0dcb194e6412f4f3df1b91fb94c4d147378987e43e9a7348f","title":"Current Processing Rate Widgets","path":"/lrsiem/7.18.0/current-processing-rate-widgets","children":[]},{"id":"ci_6ca435b2a17afc1c72f0a4eddb1a50abac749ed16c29663264c81c02db4d9f73","title":"Data Processing Trend Widgets","path":"/lrsiem/7.18.0/data-processing-trend-widgets","children":[]},{"id":"ci_55b5b3f3a4fbacc66dd8b86226c7ccad7eb96053acfa26879256e1bff2a29ceb","title":"Node-Link Graph Widgets","path":"/lrsiem/7.18.0/node-link-graph-widgets","children":[]},{"id":"ci_4d9a9ab37a917daf52fdaaaabdc7a2de8173972cee4d02f6d23f047bb60d7fff","title":"System Database Usage Widget","path":"/lrsiem/7.18.0/system-database-usage-widget","children":[]},{"id":"ci_5f579ad606b9c9c3c6d703fdc7881e76ecc55d3df33a6fc7eb827fc1d74d64ff","title":"Threat Activity Map","path":"/lrsiem/7.18.0/threat-activity-map","children":[{"id":"ci_949b2af176a859ea390388781149fda42a77bca5a961417e227020a168508cf4","title":"Configure Threat Activity Map Widget Settings","path":"/lrsiem/7.18.0/configure-threat-activity-map-widget-settings","children":[]},{"id":"ci_d8e13f4a39d346aede9acfd6120ddd06d464284b73e570289a3c4f88a1912456","title":"Drill into Threat Activity Map Node Data","path":"/lrsiem/7.18.0/drill-into-threat-activity-map-node-data","children":[]},{"id":"ci_b3c11d99c1f9a1a3c9456acf238c4ccd05af083d96067b1b27ea5dd43ec86e78","title":"Troubleshoot Threat Activity Map","path":"/lrsiem/7.18.0/troubleshoot-threat-activity-map","children":[]},{"id":"ci_a65e8a97615f94ea3c0db0c278479ae250bc4a17a0c4e7329dc936e44879eb0f","title":"Zoom In and Out on the Map","path":"/lrsiem/7.18.0/zoom-in-and-out-on-the-map","children":[]}]},{"id":"ci_ca6cdfb5bf9fb7c98b91acab84f276e6753f2e329b373017ddc79b341d9daed3","title":"Timeline Widget","path":"/lrsiem/7.18.0/timeline-widget","children":[]},{"id":"ci_dcb93cc8847dcf5f2cc972bfe8b24e8b408a48b722746951c0de95347f979a7a","title":"TopX Widgets","path":"/lrsiem/7.18.0/topx-widgets","children":[{"id":"ci_e27338ba8737efba8987848729f966ba47c4423a0240f23e8240a2187806facd","title":"Configure TopX Widget Data Settings","path":"/lrsiem/7.18.0/configure-topx-widget-data-settings","children":[]},{"id":"ci_a185b88da42495b745d58df6b08bfe3fe358791a7bb8a6b881748853629f4969","title":"Configure TopX Widget Graph & Options Settings","path":"/lrsiem/7.18.0/configure-topx-widget-graph-options-settings","children":[]},{"id":"ci_522783318a71eeb185e6c71606475960d89c83230fdd0b60867c429c2ed3e45f","title":"Drill into Chart Metadata from the Dashboards","path":"/lrsiem/7.18.0/drill-into-chart-metadata-from-the-dashboards","children":[]},{"id":"ci_1aecc769e513050f8b16037de67730efd170c2903b3860ff033e7878065daacf","title":"Filter Data by Time Range on the Dashboards and Analyze Pages","path":"/lrsiem/7.18.0/filter-data-by-time-range-on-the-dashboards-and-analyze-pages","children":[]},{"id":"ci_cd022eca94db99ea6f7121aeddf6cc35ae9c8ed24059f52f83e482a680bf2139","title":"Resize TopX Data Labels on Bar Charts","path":"/lrsiem/7.18.0/resize-topx-data-labels-on-bar-charts","children":[]}]}]}]},{"id":"ci_754201c2132e26a9afef03632a6788aa734b7c0c00af4526b2b94a69c2560588","title":"LogRhythm Schema Dictionary and Guide","path":"/lrsiem/7.18.0/logrhythm-schema-dictionary-and-guide","children":[{"id":"ci_df93d98f68174310369e995a0c2e17f46f4b39f78d54b9e89b350cfaf6f7f970","title":"Application Tab","path":"/lrsiem/7.18.0/application-tab","children":[{"id":"ci_b943e6234e8a8bae766298db525dea7c27d290e59ed76752401e36b6a557b606","title":"Action [7.2]","path":"/lrsiem/7.18.0/action-7-2","children":[]},{"id":"ci_3b0948d902038a3a3b89359a34cbca11065cc9c13e43bf6808c8533fbcf06619","title":"Amount","path":"/lrsiem/7.18.0/amount","children":[]},{"id":"ci_f2346054bedb512e2b95796b80a2f90e4b3aec618448b3404179abfccee348b3","title":"Command","path":"/lrsiem/7.18.0/command","children":[]},{"id":"ci_6529721d0565df92e9554bddaefb01b3e3624fa257edad734c5838b7b09e5601","title":"Hash [7.2]","path":"/lrsiem/7.18.0/hash-7-2","children":[]},{"id":"ci_1d77fbc805f3b174a4347469f1385ac697796ab611c3a9d812260fbfa230c91e","title":"IANA Protocol Name","path":"/lrsiem/7.18.0/iana-protocol-name","children":[]},{"id":"ci_2761495fdc860272e08ec0fcb0af1bc5eaa83f83a6ead5424950cdb17962b66b","title":"IANA Protocol Number","path":"/lrsiem/7.18.0/iana-protocol-number","children":[]},{"id":"ci_59f30fc6c102cce734c06d3d4168b081b81676810382e7591d084146b8753c79","title":"Object","path":"/lrsiem/7.18.0/object","children":[]},{"id":"ci_c33270cbee9eef73f109bf01bc63194ec053e96237e609446acc0e3be3f31fc1","title":"Object Name","path":"/lrsiem/7.18.0/object-name","children":[]},{"id":"ci_bb8dca32c69e183c2de49865a8f72d2b2452b2fd4fab8eec259c4818fc4ad530","title":"Object Type [7.2]","path":"/lrsiem/7.18.0/object-type-7-2","children":[]},{"id":"ci_e16195ddadeb2f3a201d5f39749a0f1e2dbad3299a33fa9a1a33d1254984652f","title":"Parent Process ID [7.2]","path":"/lrsiem/7.18.0/parent-process-id-7-2","children":[]},{"id":"ci_f95b0e6b34084090a461ad81d26e391d878dab1cee995ca4379589d2a013c355","title":"Parent Process Name [7.2]","path":"/lrsiem/7.18.0/parent-process-name-7-2","children":[]},{"id":"ci_fe460b5e6d80f376ea4c4d565904c2f4365a95f5c3a8005e796823a9bd72ad73","title":"Parent Process Path [7.2]","path":"/lrsiem/7.18.0/parent-process-path-7-2","children":[]},{"id":"ci_af61dc9f597cc8ee1aec61386488f9a6be9c3f8b7de994291c6db3cdd5ce1fb1","title":"Policy [7.2]","path":"/lrsiem/7.18.0/policy-7-2","children":[]},{"id":"ci_7ab250af19f66605c7ef62435b575d696a0910e3005824f5a05a84bb46fd7446","title":"Process ID","path":"/lrsiem/7.18.0/process-id","children":[]},{"id":"ci_fbb8103d0d404bf5b107d40b5577a2b169600c3a467d6c9095c4c89832377bab","title":"Process Name","path":"/lrsiem/7.18.0/process-name","children":[]},{"id":"ci_624c03086e9ebe58d682279b9b1c04f8670758bf26f62ed661e69d0066dc3cd4","title":"Quantity","path":"/lrsiem/7.18.0/quantity","children":[]},{"id":"ci_19d8c9081b3304d9b2dd8c97698045600e01cc3a9888412e9532d496365379d9","title":"Rate","path":"/lrsiem/7.18.0/rate","children":[]},{"id":"ci_36e42d7fcfe28868a22ea50c0bee67a17e8b096e6d16f985e0174a350f9258aa","title":"Reason [7.2]","path":"/lrsiem/7.18.0/reason-7-2","children":[]},{"id":"ci_fa3fb7ff9f406845ace2b3733d6552816fe82bbfec4176cf2d1f0aae62fdbcd3","title":"Response Code [7.2]","path":"/lrsiem/7.18.0/response-code-7-2","children":[]},{"id":"ci_2b138392fd059c14aa65dd8ce7b966dbfa23b4bcdeebcacfcdb4a7db1fcdc14a","title":"Result [7.2]","path":"/lrsiem/7.18.0/result-7-2","children":[]},{"id":"ci_350e82a2ab49f3edf0893ce78605563db58350db375c9370bfe74406a7676bdc","title":"Session","path":"/lrsiem/7.18.0/session","children":[]},{"id":"ci_ed845f10688a39d6d7961f7fb0a2a3201e5d7c0832c022f2f3e790996a60e1e1","title":"Session Type [7.2]","path":"/lrsiem/7.18.0/session-type-7-2","children":[]},{"id":"ci_a60c79ab7b5dcbcd2dad4892b11076173e1fad6b6162897e4f3c30d8b2bd6fed","title":"Size","path":"/lrsiem/7.18.0/size","children":[]},{"id":"ci_d0e20fa6f9c5a404b483238837012bccc7d5cdf6e5561bd1ac9ab2a678e6ed45","title":"Status [7.2]","path":"/lrsiem/7.18.0/status-7-2","children":[]},{"id":"ci_83fecda32c9c51518aa02cfed1ff714bd5bed6d21307759a05a9fa13da39eda5","title":"Subject","path":"/lrsiem/7.18.0/subject","children":[]},{"id":"ci_08f348ddbc22f6333a84cbbdd1529530aa1bbed24bbe065a970d3133b9cdc488","title":"URL","path":"/lrsiem/7.18.0/url","children":[]},{"id":"ci_b7919d1b270923fcd4b3d2d9cf0eef3594266c27b9bcfd9364f1ed28adb622ed","title":"User Agent [7.2]","path":"/lrsiem/7.18.0/user-agent-7-2","children":[]},{"id":"ci_2d1ee21333ec6063cf735951d4585897211948dccabb1d0f94fe7935d2fce959","title":"Version","path":"/lrsiem/7.18.0/version","children":[]}]},{"id":"ci_6e246a0bb987b8c2e635b754e6ad8f553b770a2e5299bf361fd472ae05a1bcc4","title":"Kbytes/Packets Tab","path":"/lrsiem/7.18.0/kbytes-packets-tab","children":[{"id":"ci_ebda47aaf9033fcaeccd44e0ae448b0bfcef0e50b948799acacb8e3a13bf23a2","title":"[prefix] [Bits/Bytes] [blank/In/Out]","path":"/lrsiem/7.18.0/prefix-bits-bytes-blank-in-out","children":[]},{"id":"ci_551cf77fc480184fee7ba428435910bd97ad04694ff199f7250fd9922419a08a","title":"Packets [Total/In/Out]","path":"/lrsiem/7.18.0/packets-total-in-out","children":[]}]},{"id":"ci_9e74d93caf7bd7b96bb62d3e765c6093d51d5e53ba5f3a512151ccd54acba004","title":"Classification Tab","path":"/lrsiem/7.18.0/classification-tab","children":[{"id":"ci_fde2d43354aa3837980680655c4ed5497fcde5379b1413d569cba4db4f42cf65","title":"CVE [7.2]","path":"/lrsiem/7.18.0/cve-7-2","children":[]},{"id":"ci_c6376172c26dda9faa30d17bec58f6be5f133c38d608614275ae73fe8b348e9e","title":"Severity","path":"/lrsiem/7.18.0/severity","children":[]},{"id":"ci_5a54c107f5f828f5e73fea7ef223bab9bf7eaffd765e22d21050c1b3f99864e5","title":"Threat ID [7.2]","path":"/lrsiem/7.18.0/threat-id-7-2","children":[]},{"id":"ci_ac821bfd2c31969a6bdd4142bf71b78f928d22a32c3200a33c0069301035ee66","title":"Threat Name [7.2]","path":"/lrsiem/7.18.0/threat-name-7-2","children":[]},{"id":"ci_880abbc4aed710fd4936a8b92571ce2fa4ba5d76a5a6d8f68b79922447a61293","title":"Vendor Info [7.2]","path":"/lrsiem/7.18.0/vendor-info-7-2","children":[]},{"id":"ci_78150a71f4eacbebc366af3902833fec85c013fc63d8c748b57ab5ae528ea078","title":"Vendor Message ID","path":"/lrsiem/7.18.0/vendor-message-id","children":[]}]},{"id":"ci_e49902b4ae4898ea8797c908b89830e3d37f93eb36f73ad9b845ab98a5bd83a1","title":"Host Tab","path":"/lrsiem/7.18.0/host-tab","children":[{"id":"ci_348605203399a3ffcb6fee058920c091761c2d6163fa63db50a610adc119ff04","title":"DIP/DestinationIP/Impacted IP","path":"/lrsiem/7.18.0/dip-destinationip-impacted-ip","children":[]},{"id":"ci_cd36f14277808b58865f975cdb013086f47f9b6a65ef3d8a6eb534115f53d4f0","title":"DIPv4","path":"/lrsiem/7.18.0/dipv4","children":[]},{"id":"ci_79ccb86f91310a7495e3dc421a19cd998b090746fde80cf6c2dbdd8b0a0f83db","title":"DIPv6","path":"/lrsiem/7.18.0/dipv6","children":[]},{"id":"ci_9795758e929b7dbd6fb007259467a52e5293d4b77bc96f1aa5c8c9348ca84fb1","title":"DIPv6E","path":"/lrsiem/7.18.0/dipv6e","children":[]},{"id":"ci_c7e6f330751a281e05bdaa383ea7c4a282b9086b409ff7c5f857ccc1b19ca345","title":"Impacted Hostname","path":"/lrsiem/7.18.0/impacted-hostname","children":[]},{"id":"ci_baf18578caf6b019dbd11375c17f36406f2474451b8b093e7898b71094b7ffb6","title":"Impacted Hostname or IP","path":"/lrsiem/7.18.0/impacted-hostname-or-ip","children":[]},{"id":"ci_db9096cfa5f05c0b3443eaed0c4472aafb2168302ae345bd8fda2e2652e7ec02","title":"Impacted Interface","path":"/lrsiem/7.18.0/impacted-interface","children":[]},{"id":"ci_a0ef86a6967c8252739851d86d78cc9f1365e08e9f4582b8bc351fbf7c30b9a0","title":"Impacted MAC Address","path":"/lrsiem/7.18.0/impacted-mac-address","children":[]},{"id":"ci_fda8646865e710975cab7eb1dae198891061153696506f29173bff41d588c959","title":"Impacted NAT IP","path":"/lrsiem/7.18.0/impacted-nat-ip","children":[]},{"id":"ci_0ee815e0583bac1e4ce88d6c757a6bd254a85faf9bb55023eec021778db59aec","title":"IP Address (Origin)","path":"/lrsiem/7.18.0/ip-address-origin","children":[]},{"id":"ci_321d33478860d4795cd10ad037fd92198e37332ec4fce45d339611a9ffe768f8","title":"Origin Hostname","path":"/lrsiem/7.18.0/origin-hostname","children":[]},{"id":"ci_852b6e651d24c39d1afac9545f193ea32099bd5dfe592e26a0125c74dc74b731","title":"Origin Hostname or IP","path":"/lrsiem/7.18.0/origin-hostname-or-ip","children":[]},{"id":"ci_a2862f97b002f59997665d97c9dea73a21c1c37380ead90a32a4d126e8ee654a","title":"Origin Interface","path":"/lrsiem/7.18.0/origin-interface","children":[]},{"id":"ci_fd95be6ac3d82b7c3c571b6b0ca9763c51d43ed0c4fbfc14e6a4d9c506b9bbe5","title":"Origin MAC Address","path":"/lrsiem/7.18.0/origin-mac-address","children":[]},{"id":"ci_b7180982f797e029d47dd9f09467803b9f5d90c7cf4a8c041ec40f3ecf97cb78","title":"Origin NAT IP","path":"/lrsiem/7.18.0/origin-nat-ip","children":[]},{"id":"ci_d140f2381adee1b7173a277a6364da47516663a96710f52b691290c2e93c6f5e","title":"Serial Number [7.2]","path":"/lrsiem/7.18.0/serial-number-7-2","children":[]},{"id":"ci_57a2c6f1c1bf3f6e7f3c00a1abd57a99c78e9f0506945f2c96a4e90c5549005d","title":"SIPv4","path":"/lrsiem/7.18.0/sipv4","children":[]},{"id":"ci_c39f22c9ad5bd5a2363b9617d2a1dc95689c05e870f7d6642ce7141346dee525","title":"SIPv6","path":"/lrsiem/7.18.0/sipv6","children":[]},{"id":"ci_76efdd3e4417cb52b189c65ae74899cca0e8a611969ae60656baa0b760d6ac88","title":"SIPv6E","path":"/lrsiem/7.18.0/sipv6e","children":[]}]},{"id":"ci_b6de3d2505a9936e8b0ad51b7ae159e417861dfb57597b08d5e086a0e955680c","title":"Identity Tab","path":"/lrsiem/7.18.0/identity-tab","children":[{"id":"ci_dd6f07e2024c46877e34544c04a269ddb0a6799113f3e01b27c2d825fd03f63b","title":"Account > User (Impacted)","path":"/lrsiem/7.18.0/account-user-impacted","children":[]},{"id":"ci_deb8d36385e0030747faad62c6596c3971878d087b4ea3560bfd77096cffc1b4","title":"Group","path":"/lrsiem/7.18.0/group","children":[]},{"id":"ci_2ae72b5981acd54ea431d659ebc6074e722f0b3a1ad5533345d23a6c4ea590c4","title":"Login > User (Origin)","path":"/lrsiem/7.18.0/login-user-origin","children":[]},{"id":"ci_9daed41dc3d449708ab94a6e4894cf0fb5daced0e1b344bd695835e20a5b3555","title":"Recipient","path":"/lrsiem/7.18.0/recipient","children":[]},{"id":"ci_cb845c468ec7ff667836b54a0decc01c431d7a473072637b9575829852fcb09d","title":"Sender","path":"/lrsiem/7.18.0/sender","children":[]}]},{"id":"ci_c7bd7b4bbd9f2edd5f2441be7ecf413ca5d9f8d62ece06b4c505fbf792f63745","title":"Location Tab","path":"/lrsiem/7.18.0/location-tab","children":[]},{"id":"ci_6c105d58deb0f95ac9cfb7ef2768a7532782d88333e8a3809e21e08822e63339","title":"Log Tab","path":"/lrsiem/7.18.0/log-tab","children":[]},{"id":"ci_5db44f02d5d5e1443109b47dcdf31833d2ada7c42679ec8c82881d01b9129b86","title":"Network Tab","path":"/lrsiem/7.18.0/network-tab","children":[{"id":"ci_8001287e381e60dd45b434be2010fafed0ba5eadd1400c0470351895893323e1","title":"Domain (Origin) [7.4]","path":"/lrsiem/7.18.0/domain-origin-7-4","children":[]},{"id":"ci_86c01e8b9b122dc4114a3b9601c22c72d7f1d9cfd4b7160dcef85c58251c9f4d","title":"Domain [7.2] (Domain (Impacted))","path":"/lrsiem/7.18.0/domain-7-2-domain-impacted","children":[]},{"id":"ci_8197d52c5bed5259a2d7519befa5ec47d62be97e0b00d8ca529a2497bd8dc16d","title":"Impacted NAT Port","path":"/lrsiem/7.18.0/impacted-nat-port","children":[]},{"id":"ci_457df4fd2900de3679109c3ee598e4280663ecbc6ed233dde53fc669053a8ca3","title":"Impacted Port","path":"/lrsiem/7.18.0/impacted-port","children":[]},{"id":"ci_320836162ef495cf134c98b63a62ed73a1a95c83a9ce6688afc9af9d66362b8d","title":"Origin NAT Port","path":"/lrsiem/7.18.0/origin-nat-port","children":[]},{"id":"ci_491cd0584e0793e44ed6113d54ad7532798e5374eda8e2f119f18e3a2f4f29a5","title":"Origin Port","path":"/lrsiem/7.18.0/origin-port","children":[]}]},{"id":"ci_5ed29f4c9c70000001516f69aeb39d8fef45bceaf94a27694a874fe0763916a5","title":"Other MPE Fields","path":"/lrsiem/7.18.0/other-mpe-fields","children":[{"id":"ci_d67e41466c0be1336b3e145fe1522ec4d523d696c45e7f920e0bcc3f7be638f5","title":"[Tag1-Tag5]","path":"/lrsiem/7.18.0/tag1-tag5","children":[]},{"id":"ci_bcbe99895fb8101d8bd45230b2def6497cd2705c160fd93830ef9972ab40152a","title":"Items In","path":"/lrsiem/7.18.0/items-in","children":[]},{"id":"ci_427a6502ca2e31890ef9ae393c10bcf4f1208d7a839a915816bc1d05f3d0c3be","title":"Items Out","path":"/lrsiem/7.18.0/items-out","children":[]}]},{"id":"ci_08e24ea132de4a833e85f78997b3f6447c2639f3dc6045e1ddd2355ec7bb5a69","title":"Derived Data","path":"/lrsiem/7.18.0/derived-data","children":[{"id":"ci_3e9136d62899eba301faa8428201ddedfcd654be5be05e6476227396fcc46f8b","title":"Identity-Derived Data","path":"/lrsiem/7.18.0/identity-derived-data","children":[]},{"id":"ci_47fa5f87307a33be41e77d35a7cb8ea67eb7c4373561de8a6bcf3571fd1ce638","title":"Log-Derived Data","path":"/lrsiem/7.18.0/log-derived-data","children":[]}]}]},{"id":"ci_7cc84753269ee60e662f434877580bca3e0c52d3384c5e680e030c5b3194dac7","title":"Other LogRhythm Applications","path":"/lrsiem/7.18.0/other-logrhythm-applications","children":[{"id":"ci_138274de72d863a955f0b7253405576a4962fee0a3225304a169cc94f0aa8aa7","title":"LogRhythm Intelligence","path":"/lrsiem/7.18.0/logrhythm-intelligence","children":[]},{"id":"ci_bab759a622379367fcbfbc0a19e89d2142347fe5b35baaabde7d3dfb2a893d17","title":"Threat Intelligence Service","path":"/lrsiem/7.18.0/threat-intelligence-service","children":[{"id":"ci_fb54475e19ffec1f361476c7af75f53628ec59f3d8e8c80786eddc056dfe6a61","title":"Install and Deploy the Threat Intelligence Service","path":"/lrsiem/7.18.0/install-and-deploy-the-threat-intelligence-service","children":[{"id":"ci_63c1b116d74fe5e6abeaef2e38876b77f218b9eb6eba85a83c058506a46fec4e","title":"Run the Threat Intelligence Service Installer","path":"/lrsiem/7.18.0/run-the-threat-intelligence-service-installer","children":[]},{"id":"ci_c9bf4c9fe5494c4e35653bee853ec48cee4ad0186b7657dcb84bb5f499f26344","title":"Modify, Repair, or Remove the Threat Intelligence Service","path":"/lrsiem/7.18.0/modify-repair-or-remove-the-threat-intelligence-service","children":[]},{"id":"ci_9059a6b48b732963c87bc959231ca11d3983db264316a46e781919ea47f4c955","title":"Enable and Import the Threat Intelligence Service Modules","path":"/lrsiem/7.18.0/enable-and-import-the-threat-intelligence-service-modules","children":[]},{"id":"ci_2edaff137551a87d1237639f5db54babb93c2f4de3c75a8d7e1df576d081f60a","title":"Associate Vendor Lists with LogRhythm Lists","path":"/lrsiem/7.18.0/associate-vendor-lists-with-logrhythm-lists","children":[]},{"id":"ci_374a54ec397decce4f1535429640a168280a0c26b4139793fb34373ac058c2e5","title":"Enable Threat List AIE Rules","path":"/lrsiem/7.18.0/enable-threat-list-aie-rules","children":[]},{"id":"ci_ab3e3c9c897bdcb2dc41db3229aa00eec0ca80fd87e2d053368d0432ff31366a","title":"Start the LogRhythm Threat Intelligence Service","path":"/lrsiem/7.18.0/start-the-logrhythm-threat-intelligence-service","children":[]},{"id":"ci_4983b936b65acbd357dfbe643682cac89423afe545a083e69bda9f2d3e618e0a","title":"Vendor Lists","path":"/lrsiem/7.18.0/vendor-lists","children":[{"id":"ci_62fa55bc59361bf8c3180b28ff0af8cc8965a7c854044e8eda70bbea78d7228e","title":"BrightCloud","path":"/lrsiem/7.18.0/brightcloud","children":[]},{"id":"ci_dda0734905950ab7889044f81ef137322c466b6a118898dd4fbe221473e2053f","title":"CrowdStrike","path":"/lrsiem/7.18.0/crowdstrike","children":[]},{"id":"ci_ae6dc238184e0b6ec57c336ae22ffdda7b0fcb61848aa405beb6ca39c391cf54","title":"Cisco AMP Threat Grid","path":"/lrsiem/7.18.0/cisco-amp-threat-grid","children":[]},{"id":"ci_633450c5383c801fb253f9b211901b14afb52850c81ce6ce9e9afdeb697ecca2","title":"Symantec","path":"/lrsiem/7.18.0/symantec","children":[]},{"id":"ci_325cd32971d34ee9240b563b1953e3bb5969314c3225dbdd792c3bf2b778257b","title":"Open Source","path":"/lrsiem/7.18.0/open-source","children":[]},{"id":"ci_934d06b84db888c1c3f2d5f05e9e00a178786fbf947dcc22ee9d55b87672d186","title":"Custom Providers","path":"/lrsiem/7.18.0/custom-providers","children":[]}]}]},{"id":"ci_04af932934592d33f0728637d56e4da3dbf71a14ec8eb550a023e90f780233b2","title":"Threat Intelligence Service User Guide","path":"/lrsiem/7.18.0/threat-intelligence-service-user-guide","children":[{"id":"ci_c0324240d985b8f8d4bd34a4f6bc48f31795b1ccc64cba048c5380bc02fa48a3","title":"Launch the Service Manager","path":"/lrsiem/7.18.0/launch-the-service-manager","children":[]},{"id":"ci_5c31d51f70add86e657a91792c2759973fa74ef2c108700f9b3618be57f2fc82","title":"Configure the Connection to LogRhythm","path":"/lrsiem/7.18.0/configure-the-connection-to-logrhythm","children":[]},{"id":"ci_aad69c85bc1ec958555083942837874f6dc1fe9e63f35cafa6449dacbe2c0e55","title":"Configure Proxy Settings","path":"/lrsiem/7.18.0/configure-proxy-settings","children":[]},{"id":"ci_edff54369a879ebcd7ec15fd13c873e1742b02af013a2229a61ff955a4e0f7fe","title":"Configure Vendor Threat Feeds","path":"/lrsiem/7.18.0/configure-vendor-threat-feeds","children":[]},{"id":"ci_40a6968e6e72c722ca737e59202af7f3fe3a10c996d7488fba9f138e8cb984c0","title":"Add a Custom STIX/TAXII Provider","path":"/lrsiem/7.18.0/add-a-custom-stix-taxii-provider","children":[{"id":"ci_1fc6e05dc0e63d0e7563ca41ae01516e54ecda763e62514249f46ed06e5a9e90","title":"Add a STIX Feed in TIS","path":"/lrsiem/7.18.0/add-a-stix-feed-in-tis","children":[]},{"id":"ci_7734816e0c14dd778ba232390f99627e200d493b63313603edca57943e86b3e1","title":"Configure CustomObjectType in STIX/TAXII Feeds in TIS","path":"/lrsiem/7.18.0/configure-customobjecttype-in-stix-taxii-feeds-in-tis","children":[]}]},{"id":"ci_9976873cc95a851d2a3bc088eca89cf90f761dcafd2453ad39d40e31c8e1477c","title":"Start and Stop the Service","path":"/lrsiem/7.18.0/start-and-stop-the-service","children":[]},{"id":"ci_b9a7f9e0b0c544e5ce3f8db4c549eed21f699e75222268eedd3370788b9e897a","title":"Configure the Threat Intelligence Service Whitelist","path":"/lrsiem/7.18.0/configure-the-threat-intelligence-service-whitelist","children":[]},{"id":"ci_9e504f2bdb85cbe1508fca81f4b8f239f533fcef4c2d70901a0edd3b77457963","title":"URL Normalization","path":"/lrsiem/7.18.0/url-normalization","children":[]},{"id":"ci_52b7f1bdcab14464cedc5ad446c31d08568a0172c5a7b23e849cb67ce6df0d3e","title":"Request Response Logging","path":"/lrsiem/7.18.0/request-response-logging","children":[]},{"id":"ci_f28fdb6bff4d9fea569daa97669a91c112630491d2ee3abe27d059e069751728","title":"View Log Files","path":"/lrsiem/7.18.0/view-log-files","children":[]},{"id":"ci_3a450051c90efbe796936eee7418750ae4cc7c49e8468381174364693cdf3fc6","title":"Troubleshoot the Threat Intelligence Service","path":"/lrsiem/7.18.0/troubleshoot-the-threat-intelligence-service","children":[{"id":"ci_c6e0bd0baa3e30c007f2d009a411db25c69109aaf74301a2496743652eabc9ae","title":"Firewall Blocking Open Source URLs in TIS","path":"/lrsiem/7.18.0/firewall-blocking-open-source-urls-in-tis","children":[]},{"id":"ci_5637012795ac9921c78d8c388d7d9661bd58c7553c5541a7c21a4febe9e8b3b3","title":"Log Files in TIS","path":"/lrsiem/7.18.0/log-files-in-tis","children":[]},{"id":"ci_ab9a2c943f61afb05b0f756f74293d866c5e091740bfc7a7d9f478ad3be78bdf","title":"Resource Utilization in TIS","path":"/lrsiem/7.18.0/resource-utilization-in-tis","children":[]},{"id":"ci_e7828f4e16255637a88c2bcb812808e6c9b1a394ce586a95cdcfdbe24b92a660","title":"Threat Intelligence Service Will Not Start","path":"/lrsiem/7.18.0/threat-intelligence-service-will-not-start","children":[]}]}]}]},{"id":"ci_0b3f3d774e2cf98382bcb59646206da5c7489e2ec6631094f0520acc079b46c5","title":"LogRhythm Diagnostics Tool","path":"/lrsiem/7.18.0/logrhythm-diagnostics-tool","children":[{"id":"ci_511d12430d0ecd3f99e1793a98745ee203c9ec931f1cda8a818f7d6f180e0f35","title":"Install the Diagnostics Agent and Diagnostics Tool","path":"/lrsiem/7.18.0/install-the-diagnostics-agent-and-diagnostics-tool","children":[]},{"id":"ci_02c7374318708604276f7610e1b778fc5ee7a3c26efe487f702e6ab0aaf4b8fe","title":"Configure Collection on the Diagnostics Tool","path":"/lrsiem/7.18.0/configure-collection-on-the-diagnostics-tool","children":[]},{"id":"ci_620ff4c309d92f1a9b8ba8b964ef4879fc1cda8e49b677211b79820a74eb5425","title":"Tabs in the Diagnostic Tool","path":"/lrsiem/7.18.0/tabs-in-the-diagnostic-tool","children":[]},{"id":"ci_1dd7babc699b6a97cde38f1b2fd3b6bd3ac135dfc1a81ec8bf6ebdbd6238cd41","title":"Log Files and Data Collected by the Diagnostic Tool","path":"/lrsiem/7.18.0/log-files-and-data-collected-by-the-diagnostic-tool","children":[]},{"id":"ci_ded78f399975d5f64c5430759203bc8f4f428e1de8153c0983d722eac623e8ff","title":"Detailed .zip File Contents From the Diagnostics Tool","path":"/lrsiem/7.18.0/detailed-zip-file-contents-from-the-diagnostics-tool","children":[]}]},{"id":"ci_f32f189e53bc46bfd2c004a7867b561a58b8ad00cc5f63a73474f7e93f83a0a2","title":"LogRhythm Echo","path":"/lrsiem/7.18.0/logrhythm-echo","children":[{"id":"ci_f74af2e570389705481533079831759dc0dcef1cd65ebcba0f152a9b97a019fa","title":"Install or Upgrade LogRhythm Echo","path":"/lrsiem/7.18.0/install-or-upgrade-logrhythm-echo","children":[]},{"id":"ci_70cb8b2a9f002f97fe7277c9f4e654d7a7cf8cd0a31db14dcf5a35c4f97d5cb7","title":"Configure LogRhythm Echo","path":"/lrsiem/7.18.0/configure-logrhythm-echo","children":[]},{"id":"ci_d2b5661ad2c2924cc898d02b2ebad6925fad0feac8fba33b01db48017fb92c28","title":"Manage LogRhythm Echo Use Cases","path":"/lrsiem/7.18.0/manage-logrhythm-echo-use-cases","children":[]},{"id":"ci_2dac753454b4f520afb002ab0cf8297d72aa0a38e22031643a4ea22e6139e40f","title":"Run LogRhythm Echo Use Cases","path":"/lrsiem/7.18.0/run-logrhythm-echo-use-cases","children":[]},{"id":"ci_c475c6c8b1a80ebaa18e38bb1a3b5c9eb2e49f38b9d0a90e4b819949d43f9810","title":"Schedule LogRhythm Echo Use Cases","path":"/lrsiem/7.18.0/schedule-logrhythm-echo-use-cases","children":[]},{"id":"ci_66de754ab39cea730b6891c1a61ef94e896e536939c911ec3623bd4715695f3f","title":"LogRhythm Echo API","path":"/lrsiem/7.18.0/logrhythm-echo-api","children":[]},{"id":"ci_0204f7b065edda6879e920a7138bceda8e5a65503aecf600b874d0eaefd1de92","title":"LogRhythm Echo Troubleshooting","path":"/lrsiem/7.18.0/logrhythm-echo-troubleshooting","children":[]},{"id":"ci_f1cb41e624a67c22c6d68964a31bb1e3bf3ed1a93bf44317309d62dcb0cec62f","title":"LogRhythm Echo Use Case DB","path":"/lrsiem/7.18.0/logrhythm-echo-use-case-db","children":[]},{"id":"ci_8cfc12444e8e5a17413ca2c8bf20f8cdca967a8d190b60eb458db87ee881a94d","title":"LogRhythm Echo Use Cases and Their AIE Rules, Lists, and SmartResponses","path":"/lrsiem/7.18.0/logrhythm-echo-use-cases-and-their-aie-rules-lists-and-smartresponses","children":[]}]},{"id":"ci_8dfdb73fde952ad1f7df5f8a4d8156c8157b50f8456babcd970b2919ab1550b1","title":"TrueIdentity Sync Client User Guide","path":"/lrsiem/7.18.0/trueidentity-sync-client-user-guide","children":[{"id":"ci_a9c8ca13441f003f4683eb030f3f0d61acc9bab3e2578d5beaf82046120038ec","title":"TrueIdentity Sync Client Release Notes","path":"/lrsiem/7.18.0/trueidentity-sync-client-release-notes","children":[]},{"id":"ci_9183df042187f7cc1a85d0adee32ed076e32cec969717c4a324a04df90faa2f6","title":"Install the TrueIdentity Sync Client","path":"/lrsiem/7.18.0/install-the-trueidentity-sync-client","children":[]},{"id":"ci_104dc3a9585dc74e0bf9ff0796ec05e762a14667328bb28599f34776feacc975","title":"Create Custom Certificates","path":"/lrsiem/7.18.0/create-custom-certificates","children":[]},{"id":"ci_efa8775f98e54577c59ed65751cb561dfd55e8f72760df79f5c062d37d7881ac","title":"Generate LR API Token","path":"/lrsiem/7.18.0/generate-lr-api-token","children":[]},{"id":"ci_cd0ecbfc15a0e0272c462f99b67f84f3a5a94d6a8b709271cff59b3b205a70c5","title":"Launch the TrueIdentity Sync Client","path":"/lrsiem/7.18.0/launch-the-trueidentity-sync-client","children":[]},{"id":"ci_fdb53a4c01c89762f249dde6babf87544c773ccfe5b7cc5c46d4221ea582464b","title":"Add a TrueIdentity Sync Job","path":"/lrsiem/7.18.0/add-a-trueidentity-sync-job","children":[]},{"id":"ci_8b637db1e2776f6df11d0cf69f2cdd40d64ef6c8c524778630d22dbda392e1c0","title":"View Synchronized TrueIdentities","path":"/lrsiem/7.18.0/view-synchronized-trueidentities","children":[]},{"id":"ci_fa17fbfa3d8f11643eafff5864079943b2e6ff1461ac6bce72e526404f677af7","title":"Troubleshoot the TrueIdentity Sync Client","path":"/lrsiem/7.18.0/troubleshoot-the-trueidentity-sync-client","children":[]}]},{"id":"ci_654e40140461c968e16ea549e5256dc6cfdb17128c5dfe0e01fc6cb479742f4a","title":"Using Kibana with LogRhythm SIEM","path":"/lrsiem/7.18.0/using-kibana-with-logrhythm-siem","children":[]},{"id":"ci_61333776c48a48805af9960a6b66345310845a139954059c3b3707adfc2b2950","title":"DX Upgrade Checker","path":"/lrsiem/7.18.0/dx-upgrade-checker","children":[]}]},{"id":"ci_ac6885ccce4b03eaefbe58baa12a7a57ba3d6986f27bce88ecb185801ba4b8d4","title":"Understand the LogRhythm Architecture","path":"/lrsiem/7.18.0/understand-the-logrhythm-architecture","children":[{"id":"ci_64aa0664e93d739caefc024915e77d234d41e90fc8554988a0cf49f38fb14945","title":"Licensing","path":"/lrsiem/7.18.0/licensing","children":[]},{"id":"ci_42e0625d9f0324041e2d46330b311ecaaf447409cc15d44c7e8e9a00276fd711","title":"Log Processing","path":"/lrsiem/7.18.0/log-processing","children":[{"id":"ci_663eb9ec165f434c900f4cd010aaf4d75457f028c4a07493982d4b94c38920cb","title":"Audit Classifications","path":"/lrsiem/7.18.0/audit-classifications","children":[]},{"id":"ci_2c6c26ed9c306d875d353265dc57cf933cf822355a7859156e1bfafa0517cabf","title":"Configuration and Log Processing","path":"/lrsiem/7.18.0/configuration-and-log-processing","children":[]},{"id":"ci_970002783bd25360752f753e344231979aec7816a54be3a619fa3ef385c94688","title":"Operations Classifications","path":"/lrsiem/7.18.0/operations-classifications","children":[]},{"id":"ci_646b98389397aa0cc59c64b54d66540ff6c2875ac614ea2835f241b6269540dc","title":"Security Classifications","path":"/lrsiem/7.18.0/security-classifications","children":[]}]},{"id":"ci_d7a596474ce9b962d52334727e5d7f497a08b64f5565c1e5d6bdea22280be5dc","title":"LogRhythm SIEM Databases","path":"/lrsiem/7.18.0/logrhythm-siem-databases","children":[]},{"id":"ci_2cf0b8185ed30bb0de93a9c78f9c3b46602c87ac789037c5183126c906bc0b72","title":"Logs, Events, and Alarms","path":"/lrsiem/7.18.0/logs-events-and-alarms","children":[]},{"id":"ci_a775a507a168dc791a2760d7252cc588f577a71ad4fb6aed6d6bedf253d66378","title":"Networking and Communication","path":"/lrsiem/7.18.0/networking-and-communication","children":[]},{"id":"ci_873e820e8848b76ce11165ffc23e2ead453ae6a1598bd4e2640db3ccbbd48e82","title":"Component Reference","path":"/lrsiem/7.18.0/component-reference","children":[]}]},{"id":"ci_b9ef24f71a84f7cef10f41dcb735d0c17d2c218db6623490cb9f2d31b7bde511","title":"Find More Information","path":"/lrsiem/7.18.0/find-more-information","children":[{"id":"ci_95771408099070bd5ef06413c5e99ec47aba6bee5a999ba6232d40b55be95855","title":"Customer Support Guide","path":"/lrsiem/7.18.0/customer-support-guide","children":[]},{"id":"ci_f8fc246f382c8b22c0e53a960e91c952c8e91210cd6ec153c4f1bc8eb5f5a690","title":"End of Life Policies for Software and Hardware","path":"/lrsiem/7.18.0/end-of-life-policies-for-software-and-hardware","children":[]},{"id":"ci_e0034a187480e7f3fe50237d559d1dcc60dddcca2d292170e7d936175e68c600","title":"Glossary of LogRhythm Products and Components","path":"/lrsiem/7.18.0/glossary-of-logrhythm-products-and-components","children":[]},{"id":"ci_78f25088ace4219f502d986d51292dbe86668df686dd4f2a63b9cc8cfb5f0cca","title":"Open Source License Acknowledgements","path":"/lrsiem/7.18.0/open-source-license-acknowledgements","children":[]},{"id":"ci_d80f729c5c3e15a0457bf94dafbf62aa895a7fe318dc009b15c35f6ffd58020a","title":"Upgrade FAQ and Determining the Correct Upgrade Path","path":"/lrsiem/7.18.0/upgrade-faq-and-determining-the-correct-upgrade-path","children":[]}]},{"id":"ci_6960995be0c2a99da58aa9d5e128883656be3605de004a386a6829b8d9c45d8e","title":"Download PDFs","path":"/lrsiem/7.18.0/download-pdfs","children":[]}]