[{"id":"ci_93c87938dec56401a9f8fb0cb2a4c7ab0ca2fff3d47361294cf8f0779da311ed","title":"LogRhythm Release Notes","path":"/lrsiem/7.19.0/logrhythm-release-notes","children":[{"id":"ci_68db234648215e79f0554cd6285281b1b98e3c1fde5b075f9010d905e265eb09","title":"7.19.0.54 Release Notes - 3 February 2025","path":"/lrsiem/7.19.0/7-19-0-54-release-notes-3-february-2025","children":[]},{"id":"ci_aebe0b18f5b660c98135e93f2ea73eec9a13c969049b981961e8846b7fe5b726","title":"7.19.0 GA Release Notes - 7 January 2025","path":"/lrsiem/7.19.0/7-19-0-ga-release-notes-7-january-2025","children":[]},{"id":"ci_8adf5f9c6dc84de16c5ddcd354776d04c7c033560fb22b9d25c3201ceece10dd","title":"7.18.0.48 Release Notes - 7 November 2024","path":"/lrsiem/7.19.0/7-18-0-48-release-notes-7-november-2024","children":[]},{"id":"ci_e4417dd69a743d557d2e6763db379b7b63debd85f320d3b4c1a20ade81f2eab5","title":"7.18.0.46 Release Notes - 31 October 2024","path":"/lrsiem/7.19.0/7-18-0-46-release-notes-31-october-2024","children":[]},{"id":"ci_66c6b2a3e99882c05cf8c8c9494864a887aa158aad1c94e44b182fd1868f1184","title":"7.18.0 GA Release Notes - 1 October 2024","path":"/lrsiem/7.19.0/7-18-0-ga-release-notes-1-october-2024","children":[]},{"id":"ci_1113b2e5e31f4e40cfaa7ad74b827e2ce2cd429128e261ca55cb9492a419cce6","title":"7.17.0.55 Release Notes - 12 August 2024","path":"/lrsiem/7.19.0/7-17-0-55-release-notes-12-august-2024","children":[]},{"id":"ci_eba92620a1301b2857993a7f3217396e238584a40542d4a7140ec0086ebd832b","title":"7.17.0 GA Release Notes - 1 July 2024","path":"/lrsiem/7.19.0/7-17-0-ga-release-notes-1-july-2024","children":[]},{"id":"ci_2a93b21d8be6e1c4c6be974a31ad9b9b05fc23ddcd3d5680be1280602b850291","title":"7.16.0.45 Release Notes - 24 April 2024","path":"/lrsiem/7.19.0/7-16-0-45-release-notes-24-april-2024","children":[]},{"id":"ci_14630de3c488714e526d13cc92d0f051a74c3196d9b14df7f2e4d9bc060376cf","title":"7.16.0 GA Release Notes - 1 April 2024","path":"/lrsiem/7.19.0/7-16-0-ga-release-notes-1-april-2024","children":[]},{"id":"ci_34daaa1ab8a10b912dcaeed94897336cd39ca34d9b0f01ce3ee64178de9e75fd","title":"7.15.0.64 Release Notes - 5 February 2024","path":"/lrsiem/7.19.0/7-15-0-64-release-notes-5-february-2024","children":[]},{"id":"ci_9b895b300cac650bef6ae8357310d897578fa472d94258066ca0e215c87402d1","title":"7.15.0 GA Release Notes - 4 January 2024","path":"/lrsiem/7.19.0/7-15-0-ga-release-notes-4-january-2024","children":[]},{"id":"ci_f434ebeb0e33035ce4646d413c819837bef64f7f1eefaa6ec5c68942bc73d9bb","title":"7.14.0.107 Release Notes - 18 October 2023","path":"/lrsiem/7.19.0/7-14-0-107-release-notes-18-october-2023","children":[]},{"id":"ci_489aa87f82976614446e6d923f43b2e3ea7ee7213606868b8ef905c6cc822abc","title":"7.14.1 Release Notes - 13 November 2023","path":"/lrsiem/7.19.0/7-14-1-release-notes-13-november-2023","children":[]},{"id":"ci_45379aef16612c8c37e2a83a9fb46d77d5f335ce18fed196bf62bd418a96f38b","title":"7.14.0 GA Release Notes - 2 October 2023","path":"/lrsiem/7.19.0/7-14-0-ga-release-notes-2-october-2023","children":[]},{"id":"ci_b5bfac74fd50e9e2bc5b8bfcac5410f0833bd958ca54496665016813bba10f6b","title":"7.13.0.78 Release Notes - 2 August 2023","path":"/lrsiem/7.19.0/7-13-0-78-release-notes-2-august-2023","children":[]},{"id":"ci_3515104d0dc3bd589fff2252b73508e87c104b5656e52ea1c1aa13ce55a0423a","title":"7.13.0.76 Release Notes - 17 July 2023","path":"/lrsiem/7.19.0/7-13-0-76-release-notes-17-july-2023","children":[]},{"id":"ci_0bc35f90d74e080d14505e3ffa1dc875e092bb2f4a34c93cf39ea1c36f4f7d4c","title":"7.13.0 GA Release Notes - 29 June 2023","path":"/lrsiem/7.19.0/7-13-0-ga-release-notes-29-june-2023","children":[]},{"id":"ci_3520896f35922abfdd0b3a3a859d3c376650b86a942f7604d15083a987bc2918","title":"7.12.0 GA Release Notes - 3 April 2023","path":"/lrsiem/7.19.0/7-12-0-ga-release-notes-3-april-2023","children":[]},{"id":"ci_819124e596c9173da14831f831895708d56a7556512f5042abbd0f883a68225a","title":"7.11.0.43 Release Notes - 6 March 2023","path":"/lrsiem/7.19.0/7-11-0-43-release-notes-6-march-2023","children":[]},{"id":"ci_19bbfcf311c46b9038d46993212c6520adda6f64897390275d153ef74aecdcbf","title":"7.11.0 GA Release Notes - 5 January 2023","path":"/lrsiem/7.19.0/7-11-0-ga-release-notes-5-january-2023","children":[]}]},{"id":"ci_935a70ae3e6152880fbe2e17cae6a16816ef86c2c9f6844df4bf6d274ef9206a","title":"Get Started with LogRhythm SIEM","path":"/lrsiem/7.19.0/get-started-with-logrhythm-siem","children":[{"id":"ci_dc7fa9b1fbd056e4fedfd05e4b938eb6fcfc2b74090ae0c5ba240f975cdec8ce","title":"Log in to the Client Console","path":"/lrsiem/7.19.0/log-in-to-the-client-console","children":[]},{"id":"ci_8439806463d4b7bf1d7daf4eab0c4a9a50f00374a4fab6216e696ab60c190066","title":"Complete the New Deployment Wizard","path":"/lrsiem/7.19.0/complete-the-new-deployment-wizard","children":[]},{"id":"ci_2e14be7d759236fab8c03f56657fcec67192b4a6ef370ccf092625bcc15a00ce","title":"Assign LogRhythm Licenses","path":"/lrsiem/7.19.0/assign-logrhythm-licenses","children":[]},{"id":"ci_fe20960b4d13efad2356565852d0712a4cd6933fa7e8c3e7a374f13e676c0962","title":"Log in to the Web Console","path":"/lrsiem/7.19.0/log-in-to-the-web-console","children":[]},{"id":"ci_980183fc0b077801055f5f23a7acd35aa20b1a555ecaf4df90cf296718b94b97","title":"Verify the Web Console Connection Status","path":"/lrsiem/7.19.0/verify-the-web-console-connection-status","children":[]},{"id":"ci_c56501272999319047a4673b2a6255cd5c55c92842592bcf71032b87987cc533","title":"Configure NetMon to Integrate with the Web Console","path":"/lrsiem/7.19.0/configure-netmon-to-integrate-with-the-web-console","children":[]}]},{"id":"ci_af309063aa53abb9489f75d4d58be7d3aae62bee22523f1b5eacf00fe310a336","title":"Client Console Administrator Guide","path":"/lrsiem/7.19.0/client-console-administrator-guide","children":[{"id":"ci_9efc0c033d6d6cab5de0d36b8c44dbfde666e059caa564bea3bc1be7dcdd503a","title":"Advanced Intelligence Engine","path":"/lrsiem/7.19.0/advanced-intelligence-engine","children":[{"id":"ci_f9dfd685703a86ed31690d3d432c8127427f3ffa666517b789eccabeaf4e48e7","title":"Add AI Engine Servers","path":"/lrsiem/7.19.0/add-ai-engine-servers","children":[]},{"id":"ci_72686bb7ebb2e285349536fe36ee855085dbba6e2c7fa2aa286e7d97eed1efd3","title":"Apply Recommended Values to an AI Engine Server","path":"/lrsiem/7.19.0/apply-recommended-values-to-an-ai-engine-server","children":[]},{"id":"ci_e919918143018c3084fa3f5d68cadbc37cb9dfebddd5b48b44d28ac9d13f188b","title":"Configure the Advanced Intelligence Engine","path":"/lrsiem/7.19.0/configure-the-advanced-intelligence-engine","children":[]},{"id":"ci_878d7b65dc6ca21548905d64135380ea7bd9937c768b02b4175b1eb2d800244e","title":"Create New AI Engine Rules","path":"/lrsiem/7.19.0/create-new-ai-engine-rules","children":[]},{"id":"ci_edc15dcaf0dad3d86d56eefd22876c926d54e6a9abd0085e143c4237d67bed77","title":"Define AI Engine Linked Data Block Relationships","path":"/lrsiem/7.19.0/define-ai-engine-linked-data-block-relationships","children":[]},{"id":"ci_09dacfcc8cba191ec69d9a8df9ee099e19700a3b21816d135cbba4c2402a4b8e","title":"Define AI Engine Rule Block Relationships","path":"/lrsiem/7.19.0/define-ai-engine-rule-block-relationships","children":[]},{"id":"ci_613aab7c3a3206f136fe721ed624965e187e8c1a41f164f3dbb15f4f3a8ae008","title":"Drill Down on AI Engine Results","path":"/lrsiem/7.19.0/drill-down-on-ai-engine-results","children":[]},{"id":"ci_4ebe695c02460beb05644dfecf2574eb199de85f47cbd6778b04938bd6469e09","title":"Import or Export AI Engine Rules from the Grid","path":"/lrsiem/7.19.0/import-or-export-ai-engine-rules-from-the-grid","children":[]},{"id":"ci_92a04d09e60c35af7217331b83463c97a0e8ac458772105cc99fde6dde17611e","title":"Modify AI Engine Rules","path":"/lrsiem/7.19.0/modify-ai-engine-rules","children":[]},{"id":"ci_f79d4b8e4ae7355c9c70a559126ce86c046333bd947ed20512109c0b3e9d6f22","title":"Restart AI Engine Servers","path":"/lrsiem/7.19.0/restart-ai-engine-servers","children":[]},{"id":"ci_40609743c6d18d20b5862987e40dac78142954404181ac5de2064760c00ec7e5","title":"Revert an AI Engine Server to a Previous Configuration","path":"/lrsiem/7.19.0/revert-an-ai-engine-server-to-a-previous-configuration","children":[]},{"id":"ci_98202aa4b0b16d888e9c2b1f6d51347de0ba0f6ac09428d5bdbf4f7f83ac0d31","title":"Update the IP Address of an AI Engine","path":"/lrsiem/7.19.0/update-the-ip-address-of-an-ai-engine","children":[]},{"id":"ci_1e91982a9fb68f59a7f4c0d328624945cd379c5d0de7c42e93b352f9e68d76d4","title":"Use AI Engine Rule Sets","path":"/lrsiem/7.19.0/use-ai-engine-rule-sets","children":[]},{"id":"ci_de900cdeeb38cba786ee1132873a210ea51432386da27f0d2f2c009bd1c0113a","title":"Use AI Engine Workloads","path":"/lrsiem/7.19.0/use-ai-engine-workloads","children":[]},{"id":"ci_7fee7711977aa4fdbd4a24aa7814aae24e904e87dc35c73e93e8099b04f28381","title":"Use Saved AI Engine Filters","path":"/lrsiem/7.19.0/use-saved-ai-engine-filters","children":[]},{"id":"ci_c7665308105a4d56f72bea8f0fdbfc5ea7bd14bf5fca965299660b2642a6c3d8","title":"Use the AI Engine Local Configuration Manager","path":"/lrsiem/7.19.0/use-the-ai-engine-local-configuration-manager","children":[]},{"id":"ci_ad9517ac2f17c7081d99c343761cb8c4572e908607deb14a3e10d017b0d49cdc","title":"View AI Engine Generated Alarms","path":"/lrsiem/7.19.0/view-ai-engine-generated-alarms","children":[]},{"id":"ci_08ee94b21457b4b78afa9d849f178005dc9f2e6c43de6fcbd42a705ebef208e9","title":"View AI Engine Rules","path":"/lrsiem/7.19.0/view-ai-engine-rules","children":[]},{"id":"ci_4e5fba4aa8b8a5a940cb0f70e7b9ad9912f095d66486d5f774d3c127a082d7b0","title":"Work with Existing AI Engine Rules","path":"/lrsiem/7.19.0/work-with-existing-ai-engine-rules","children":[]}]},{"id":"ci_a11f79fed2e3291513e92efcff476d10c291a833ba1edace8e7739ff918e64c5","title":"Alarm Rules","path":"/lrsiem/7.19.0/alarm-rules","children":[{"id":"ci_d81140c851135f90e5f167efcbb2416aaaf5d4cc5c68e3d4d37d7bf77d166676","title":"Alarm Notification Policies","path":"/lrsiem/7.19.0/alarm-notification-policies","children":[{"id":"ci_daaa670c09521973a08b5db26673b77823b731bb06da18e83f1e318193b947aa","title":"Create Group Notifications for Alarms","path":"/lrsiem/7.19.0/create-group-notifications-for-alarms","children":[]},{"id":"ci_410288c814fd984ca031b469d51bfba287a6a12c75e8dac73c73a279117e4022","title":"Create New Email Alarm Notification Policies","path":"/lrsiem/7.19.0/create-new-email-alarm-notification-policies","children":[]},{"id":"ci_cc8331606da78437f2def6a15b74051ed91e2bbd6cd8febabc25cefe6bdb98ef","title":"Create New SNMP Alarm Notification Policies","path":"/lrsiem/7.19.0/create-new-snmp-alarm-notification-policies","children":[]},{"id":"ci_47b918d2b7db9ab2dc19d4d59e7695fcc66b15a4a7d4402eefd097a6db40bc9c","title":"Create New Text File Alarm Notification Policies","path":"/lrsiem/7.19.0/create-new-text-file-alarm-notification-policies","children":[]},{"id":"ci_a43e84fd4fc80be329dab1bf03390ba016a44ae69e90f675e3c51d234bec1cc6","title":"Define a Text File Notification Policy","path":"/lrsiem/7.19.0/define-a-text-file-notification-policy","children":[]}]},{"id":"ci_99f108d4a359fd679b46a1bbc27070afd86621a8cbc7f7249d8a9c3e630b196a","title":"Create Alarm Rules","path":"/lrsiem/7.19.0/create-alarm-rules","children":[]},{"id":"ci_82a399bd4a1301c05ce90bf79137c2826c5d0e5af38e5bbac987f58b9765e954","title":"Create Alarm Rules for Known Logs","path":"/lrsiem/7.19.0/create-alarm-rules-for-known-logs","children":[]},{"id":"ci_f168cee075edd339dff1ba6f2cf0cd6827ed3edeea9ff8078461739f3afa0504","title":"Enable and Disable Alarm Rules","path":"/lrsiem/7.19.0/enable-and-disable-alarm-rules","children":[]},{"id":"ci_7350247bf88741aa84e633321f3d47eaf2191044736def18f26dc51391643887","title":"Modify Alarm Rule Notifications in Batch","path":"/lrsiem/7.19.0/modify-alarm-rule-notifications-in-batch","children":[]},{"id":"ci_ec57d1760166aa0fe496513f494dd07d5327bf71334e675f326bf8979d4b65a1","title":"Modify Alarm Rules","path":"/lrsiem/7.19.0/modify-alarm-rules","children":[]},{"id":"ci_b4b968ee40cf4df08f5902ad352740f535b9c8c334e37095f4d8653197aec329","title":"Retire or Activate Alarm Rules","path":"/lrsiem/7.19.0/retire-or-activate-alarm-rules","children":[]}]},{"id":"ci_78984210720e73aac4350bbf6cb76095a6db8aaa7337fe3b4fd744c5c5120c26","title":"Automatic Host Contextualization","path":"/lrsiem/7.19.0/automatic-host-contextualization","children":[{"id":"ci_661256005723d07a7f127c04a455196e0c3ba003fc91e7cb508b8a31ffb9362a","title":"Disable Automatic Host Contextualization","path":"/lrsiem/7.19.0/disable-automatic-host-contextualization","children":[]},{"id":"ci_ea61d356069350199219f9a61ff6456ce77b93295c4b491266f8553b5e028cf8","title":"Map Ports","path":"/lrsiem/7.19.0/map-ports","children":[]}]},{"id":"ci_9c126a46777f1436f1c8d55d14ba9b354b5d2643c95a55971da58ec1e412738b","title":"Data Archives and Restoration","path":"/lrsiem/7.19.0/data-archives-and-restoration","children":[{"id":"ci_3b2bbd1f745b0532c112fe50da54901b92b34b213f47a5b8c91b6b3ca175364a","title":"Add a Data Processor to Restore Archives","path":"/lrsiem/7.19.0/add-a-data-processor-to-restore-archives","children":[]},{"id":"ci_0e9d7d076fb1ea62fdc89240296e9baca4ad8ae789cea052d468b0dda1442dc5","title":"Backup and Recovery Procedures","path":"/lrsiem/7.19.0/backup-and-recovery-procedures","children":[{"id":"ci_d641d6565f21c5fa3696c17e98db6c79151cc2d6d13cd18a9ab0bfca4420b13e","title":"Back Up LogRhythm Archives","path":"/lrsiem/7.19.0/back-up-logrhythm-archives","children":[]},{"id":"ci_d804217643c43820391f1dbb7c44e4e0b39867c6cca559f50381c6f4e87bf802","title":"Configure Automated Platform Manager Database Backups","path":"/lrsiem/7.19.0/configure-automated-platform-manager-database-backups","children":[]},{"id":"ci_7a0584bcdca6ee43a46201fe5454086286fdaf26193da5799fc847b0e60abd91","title":"Perform a Manual Platform Manager Backup","path":"/lrsiem/7.19.0/perform-a-manual-platform-manager-backup","children":[]},{"id":"ci_92f642285ffd7076cfe9f567e12e65b538c94f2a6979bec566cffcfe95a534ad","title":"Restore From a Database Backup","path":"/lrsiem/7.19.0/restore-from-a-database-backup","children":[]},{"id":"ci_f428a6f4d71a0b5a9e0cf349b499dd66fa4b673f83d2329c298ee4c1e8047285","title":"Restore Service State","path":"/lrsiem/7.19.0/restore-service-state","children":[]},{"id":"ci_83ed1672a1fc5b03034af4343cdc1f17a5c9a62e28e302bfdcba2c3ca18df571","title":"Use a Dark Spare Backup Appliance","path":"/lrsiem/7.19.0/use-a-dark-spare-backup-appliance","children":[]}]},{"id":"ci_b47276397a9f48ed846cfad74b2357a5b9575e59211a96efe4e295a95befa405","title":"Change Archive Location","path":"/lrsiem/7.19.0/change-archive-location","children":[]},{"id":"ci_98f340bf424ee64793d644ae73d3ff540dc8d754992619673d6f9769a6260128","title":"Configure Object Access Auditing for LogRhythm Archive Files","path":"/lrsiem/7.19.0/configure-object-access-auditing-for-logrhythm-archive-files","children":[]},{"id":"ci_4dafea86057cfb3a9c1ecb764d4affa56abb1c595a458e5bab09bf601158127b","title":"Restore Platform Managers","path":"/lrsiem/7.19.0/restore-platform-managers","children":[]},{"id":"ci_8417972e83488b000401402566c60632ccf03aa6a94c05a765e46f5f4298f4ee","title":"SecondLook","path":"/lrsiem/7.19.0/secondlook","children":[{"id":"ci_5906fd1f714b8d2e97570638c5f11e03d45845e510a39859b242d22bde644bdf","title":"Create a SecondLook Restore","path":"/lrsiem/7.19.0/create-a-secondlook-restore","children":[]},{"id":"ci_f9177d62cb496db241a488f35e6069f795683e4ba98b7508ea623f62025bcdc1","title":"Run a Saved SecondLook Restore","path":"/lrsiem/7.19.0/run-a-saved-secondlook-restore","children":[]}]},{"id":"ci_fceee3f9bfd8df6750345986ff715414fb9c818a992b9875d099cd92e23ff9a8","title":"Use Intelligent Indexing","path":"/lrsiem/7.19.0/use-intelligent-indexing","children":[]}]},{"id":"ci_23646241c01017a9bd4b8789bb36a18c1756e7070d797af829db149167cc0bb8","title":"Data Indexer","path":"/lrsiem/7.19.0/data-indexer","children":[{"id":"ci_e68160053836cae71565ba404fc18adc13a3620d0f90d4e12a6b7996b47784ff","title":"Add a Data Indexer Node","path":"/lrsiem/7.19.0/add-a-data-indexer-node","children":[]},{"id":"ci_ab9e8020f4936d75b51208bed0b5406d3f2828a11e2f7fbe5dc658c43bc7c21b","title":"Apply System Updates to a Data Indexer","path":"/lrsiem/7.19.0/apply-system-updates-to-a-data-indexer","children":[]},{"id":"ci_f2d82f55a7de230b8a3a9560adfa68b8c389eb6ae15ad730754a9252baed51fe","title":"Configure the Data Indexer","path":"/lrsiem/7.19.0/configure-the-data-indexer","children":[]}]},{"id":"ci_caebb5f2445876feca154142474cc11f19fb82ef8ae21587d678d3fc2575ec40","title":"Data Processor","path":"/lrsiem/7.19.0/data-processor","children":[{"id":"ci_2075e3149c1ecc850d64a7da4271c47694d5449554677cd75649bf122e45c592","title":"Add a Data Processor","path":"/lrsiem/7.19.0/add-a-data-processor","children":[]},{"id":"ci_3e4f95c32dea97b727d5294b99e0a1d7d264d9f88ed6e9774c5c8bb6ba3a9e5e","title":"Apply Recommended Data Processor Values","path":"/lrsiem/7.19.0/apply-recommended-data-processor-values","children":[]},{"id":"ci_5679dea91522cec396a6a5b48cd102960db447da66ffb2dd20302c7904e4b848","title":"Configure the Mediator for Automatic Startup","path":"/lrsiem/7.19.0/configure-the-mediator-for-automatic-startup","children":[]},{"id":"ci_ac960b400a88dfd429403550ddd32805a26cc70e17d8ff946534e40582cdf1c3","title":"Create a Custom Certificate for Communication Between the Data Processor and AI Engine","path":"/lrsiem/7.19.0/create-a-custom-certificate-for-communication-between-the-data-processor-and-ai-engine","children":[]},{"id":"ci_9c90f19293900d3b146e3381b43c7d58e586aae7db95f8af207128026c356991","title":"TrueIdentity Entity Segregation","path":"/lrsiem/7.19.0/trueidentity-entity-segregation","children":[]},{"id":"ci_14ebf0ecdbf30adc9f48a0b58bda27736e367150445eeddff92f7f26a8dd8bf7","title":"Filter LogRhythm Diagnostic Events","path":"/lrsiem/7.19.0/filter-logrhythm-diagnostic-events","children":[]},{"id":"ci_29190bc9642f0c1f7d61a6d08140103a57c1d1d4a2117ba4e4815d758d23f15c","title":"Modify Data Processor Advanced Properties","path":"/lrsiem/7.19.0/modify-data-processor-advanced-properties","children":[]},{"id":"ci_16fa1067c80709a7d4b55cef4608e290a2fb78f0cce892b92708d7eaa94e627f","title":"Modify Data Processor Basic Properties","path":"/lrsiem/7.19.0/modify-data-processor-basic-properties","children":[]},{"id":"ci_783fc6d073f2034dc55769c58fe7becb46f5156c3e5de9049c0787d8c2aff369","title":"Retire a Data Processor","path":"/lrsiem/7.19.0/retire-a-data-processor","children":[]},{"id":"ci_1ac7c2105f2fff9c66fe134ce775339ce7ac5823ecc8a35ac6677e31c4ff7f8e","title":"Revert to a Previous Data Processor Configuration","path":"/lrsiem/7.19.0/revert-to-a-previous-data-processor-configuration","children":[]},{"id":"ci_5ccffaf50575b102283035611961cbd9898846bfdc26b63f9f24434b111aee95","title":"Set Data Processor Messages Per Second Value","path":"/lrsiem/7.19.0/set-data-processor-messages-per-second-value","children":[]},{"id":"ci_a67e18a142c3c9c80dc59c1d74e428cd0fff7c4e8b70860ef7f1c505ed9c9e42","title":"Start, Stop, and Restart Data Processor Services","path":"/lrsiem/7.19.0/start-stop-and-restart-data-processor-services","children":[]},{"id":"ci_750ea4f4dcf7639a8772063c99f3db4fb8d339fa4acb7db98dee0109f67f4650","title":"Throttle the Mediator","path":"/lrsiem/7.19.0/throttle-the-mediator","children":[]},{"id":"ci_a39c1f7c53a90563cd754ca8adeb67fd06ce2db5527cf17f09184ae683c1fce3","title":"Update the IP Address of a Data Processor","path":"/lrsiem/7.19.0/update-the-ip-address-of-a-data-processor","children":[]},{"id":"ci_91f56ab11143a7717b5d3b1f5da710147790a3eed41322fd99f0a7f2a9f84af9","title":"Use the Data Processor Configuration Manager","path":"/lrsiem/7.19.0/use-the-data-processor-configuration-manager","children":[]}]},{"id":"ci_b28e08972a8c749e0d03ca08165a593328eb83deca1d9b5189c1f75d3b5353da","title":"Deployment Health","path":"/lrsiem/7.19.0/deployment-health","children":[{"id":"ci_e64bd30ae08c9ff91a56001f45f786a3a89333a187c39298685c5dffa3dff5f9","title":"Centralized Service Metrics","path":"/lrsiem/7.19.0/centralized-service-metrics","children":[{"id":"ci_02d7b7b9dbe7f0c599bfbcdc184a46d2c6c1acbd0b253f936a595baafd2f2885","title":"Install and Work With Centralized Service Metrics","path":"/lrsiem/7.19.0/install-and-work-with-centralized-service-metrics","children":[]},{"id":"ci_2601c165828cf820478e03c5dadc4210a2fae26140a248e3c5cf673a8ea64a50","title":"Troubleshoot Centralized Service Metrics","path":"/lrsiem/7.19.0/troubleshoot-centralized-service-metrics","children":[]}]},{"id":"ci_9e171b0a22d97dc535b9477738218a5589bc09f9925202e6e204e7e20ac4c3e1","title":"Deployment Monitor","path":"/lrsiem/7.19.0/deployment-monitor","children":[]},{"id":"ci_3acdd44ac06f1141d05ac4bdd4ef5aa92913392a130fa45e377a5c47ee980bd2","title":"Log Processing Reports","path":"/lrsiem/7.19.0/log-processing-reports","children":[{"id":"ci_00b6eaca1b36785df82bdbd11731b41280181723a9357338c2ed28a0883c16fa","title":"LPS Detail Report","path":"/lrsiem/7.19.0/lps-detail-report","children":[]},{"id":"ci_9b1feb812c71af94ec7903a6d1f8bb7b3b5fd68f71d6055413e30d2119dfb726","title":"LPS Policy Sorting Stats Report","path":"/lrsiem/7.19.0/lps-policy-sorting-stats-report","children":[]}]},{"id":"ci_acf2fa67fac954fd0c574567432fcea0a36c8da58d4709d35e60400503c8af37","title":"Performance Counters","path":"/lrsiem/7.19.0/performance-counters","children":[{"id":"ci_fa27067dd1d1a31a7e52eb64504bfbca61d786da4d59e5e9ae98c85518626458","title":"Performance Counters—LR AI Engine Communication Manager","path":"/lrsiem/7.19.0/performance-counterslr-ai-engine-communication-manager","children":[]},{"id":"ci_99c42270107508c7c0208172532c7d94ce1819362975ca345ba386828f7f6ab5","title":"Performance Counters—LR AI Engine Data Provider","path":"/lrsiem/7.19.0/performance-counterslr-ai-engine-data-provider","children":[]},{"id":"ci_445eaf1a27c0ccb640b2ce24e97ee02cad34725722f44189f175c4c12f53c53f","title":"Performance Counters—LR AI Engine Server","path":"/lrsiem/7.19.0/performance-counterslr-ai-engine-server","children":[]},{"id":"ci_a3d536233c81df26d9628139e7e98a7dcb23ded3296c33a499daa8dc6f6fb9d1","title":"Performance Counters—LR Alarming and Response Manager","path":"/lrsiem/7.19.0/performance-counterslr-alarming-and-response-manager","children":[]},{"id":"ci_335add2043eb3b26d006b8f398dc5857dbffa0a07ea395753e0725e5c9d5768d","title":"Performance Counters—LR Mediator, Log Distribution Services","path":"/lrsiem/7.19.0/performance-counterslr-mediator-log-distribution-services","children":[]},{"id":"ci_b5cc8989d5c134b32a2eca04d54e86be893df98bf70e34ed7714a2ca1ad1ea9a","title":"Performance Counters—LR Mediator, LDS, Sender","path":"/lrsiem/7.19.0/performance-counterslr-mediator-lds-sender","children":[]},{"id":"ci_21041bcdfaad0b0952fdf4d068e017501512b397d6ef3134b917a47c646f92f8","title":"Performance Counters—LR Mediator, LogMart","path":"/lrsiem/7.19.0/performance-counterslr-mediator-logmart","children":[]},{"id":"ci_c22a0ee64d219fa510aac0dd2c61ee7c4ce14a51856498355b8c1f5effd520ac","title":"Performance Counters—LR Mediator, Processing","path":"/lrsiem/7.19.0/performance-counterslr-mediator-processing","children":[]},{"id":"ci_47a0bb9013dde7b64888cf4291f59562c1fb5edc30c7e231be6f90734138f72e","title":"Performance Counters—LR Mediator, Stats","path":"/lrsiem/7.19.0/performance-counterslr-mediator-stats","children":[]},{"id":"ci_cd16f76d33a77b09753699f258dc028cfc97d4bdb0c8f733cfefe6e92e0b0dff","title":"Performance Counters—LR Mediator, True Source","path":"/lrsiem/7.19.0/performance-counterslr-mediator-true-source","children":[]},{"id":"ci_ef45386ce1d1ea484ec9f75615af68a4f89fef3f5c015203ad0634d9cbff343a","title":"Performance Counters—LR Messaging (DP to DX)","path":"/lrsiem/7.19.0/performance-counterslr-messaging-dp-to-dx","children":[]},{"id":"ci_078465e074970a5e4de8e3d8da5309332ff94e04c82f8810121afc9882656182","title":"Performance Counters—LR System Monitor","path":"/lrsiem/7.19.0/performance-counterslr-system-monitor","children":[]},{"id":"ci_7baa59973758f1f9e37934aca0c35980890aec9c38dbfc3ad69a34a924579414","title":"View and Add Performance Counters","path":"/lrsiem/7.19.0/view-and-add-performance-counters","children":[]}]}]},{"id":"ci_13fef15b6bcb91197055cbd7fe5351b1a9fab0764b9b122826b66afaa9e282f9","title":"Deployment Manager","path":"/lrsiem/7.19.0/deployment-manager","children":[]},{"id":"ci_09229142177f41e96fe38aa9ff1b3369a290825aa907197bb4bc8c63584ee671","title":"Deployment Security","path":"/lrsiem/7.19.0/deployment-security","children":[{"id":"ci_8f243b59fc35f3d2f4dc55dfae63cd7d6200cbef25c60e3312759da39b8d0c0d","title":"Common Criteria Audit Data Generation","path":"/lrsiem/7.19.0/common-criteria-audit-data-generation","children":[{"id":"ci_704cf93d6b89f70fe7fc497736567379cc3f0563edb532a2560fa1156eb9c67e","title":"Set Up the Audit Functionality","path":"/lrsiem/7.19.0/set-up-the-audit-functionality","children":[]},{"id":"ci_b510cdd8b0ef261e9b0092043d320ce47aa621df8ffb5eac0493f76e3aa98182","title":"Set up Discretionary Access Controls on the Trace Folder on an NTFS File System","path":"/lrsiem/7.19.0/set-up-discretionary-access-controls-on-the-trace-folder-on-an-ntfs-file-system","children":[]},{"id":"ci_3eb41ef688f2bfc4d1d3156dfc879b8b9ec189ccec1884afc529c7922f5f26ad","title":"Configure Windows Task to Alarm on Audit Trace Failure","path":"/lrsiem/7.19.0/configure-windows-task-to-alarm-on-audit-trace-failure","children":[]},{"id":"ci_14002542b96c3aae2568768e3fd1cfe91617f8e06b085e14732a43e5bf031234","title":"Configure SQL Server to Run Under Domain Account","path":"/lrsiem/7.19.0/configure-sql-server-to-run-under-domain-account","children":[]},{"id":"ci_5de394e32c41efaca461df6b80950b549c2db3b738a3a2231ea39c20bd682cc1","title":"SQL Server Trace File Converter (TFC) User Guide","path":"/lrsiem/7.19.0/sql-server-trace-file-converter-tfc-user-guide","children":[{"id":"ci_6eb998d0f75bb60f2f727d196b29094e371b1a1d07b3472736bdbc07b14261f5","title":"Download the SQL TFC Installer","path":"/lrsiem/7.19.0/download-the-sql-tfc-installer","children":[]},{"id":"ci_fa5490fca1907c3f96e14d1bc4db8ab76a507a850c5a843429f1d14af1472cf0","title":"Install the SQL Server TFC Server","path":"/lrsiem/7.19.0/install-the-sql-server-tfc-server","children":[]},{"id":"ci_7b78c2a138306f869e3031ff343e26fda5547a3479beab878a890dee7dc836e8","title":"Configure SQL Server TFC","path":"/lrsiem/7.19.0/configure-sql-server-tfc","children":[]},{"id":"ci_643181cdb7c7f9ffbc114f39cbd4f4fa8b3b17c886cf5c13d8fa18a6079b1723","title":"Add a SQL Server TFC Log Source","path":"/lrsiem/7.19.0/add-a-sql-server-tfc-log-source","children":[]}]}]},{"id":"ci_21c2ff877f4777f7f152a6af9e7bf037c331bd9176722581521e7886b00f2d95","title":"Common Criteria","path":"/lrsiem/7.19.0/common-criteria","children":[{"id":"ci_951520e139a0238dd97b9a8bb12ec69a9a9be209bbf63eeef66b59d38abf828d","title":"Web Console Compliance","path":"/lrsiem/7.19.0/web-console-compliance","children":[{"id":"ci_f358de5f919bdbc24ebd383dec5b8839e806527949d46ac06634d2ab21f77ffc","title":"Auto Logout for Idle Users (US9521)","path":"/lrsiem/7.19.0/auto-logout-for-idle-users-us9521","children":[]},{"id":"ci_b5067407d2115ec29d76c94a5fc6465e2e877da6fb3fbfaec34f5a3adcfdec1b","title":"Nginx File Configuration Updates (US9305)","path":"/lrsiem/7.19.0/nginx-file-configuration-updates-us9305","children":[]},{"id":"ci_fc67049aa75d30b414e25b5d0873d5b9026d01cd37c74ae88d81604f0a7c847b","title":"Requirements","path":"/lrsiem/7.19.0/requirements","children":[]},{"id":"ci_566aae9ddcfeef5e0d5935ad0d49a505386b327a94fcc0b19c2ee298767a94fa","title":"Warning Banner on Login Page (US9518)","path":"/lrsiem/7.19.0/warning-banner-on-login-page-us9518","children":[]},{"id":"ci_0e19b577bc9efd797cde48df19be10b342af40c3bdf8ecaa3857bb94566b33cb","title":"Web Console FIPS Compliance Configuration (US9525)","path":"/lrsiem/7.19.0/web-console-fips-compliance-configuration-us9525","children":[]},{"id":"ci_a25fd98453e1a15b0e20eea99a95aebbb8a8900284cd22460ee2de99e4679794","title":"Web Console Logout Button (US9519)","path":"/lrsiem/7.19.0/web-console-logout-button-us9519","children":[]}]}]},{"id":"ci_affb02c6047bbe03b39b5926a268c31a40d051c771f7b049ea353bcaee7948b4","title":"Federal Information Processing Standards (FIPS)","path":"/lrsiem/7.19.0/federal-information-processing-standards-fips","children":[{"id":"ci_6a097638a7f3d5171d82b393dc1a97a59e69261128c870e871cfff0186a110d8","title":"Configure User Access Control for FIPS Mode","path":"/lrsiem/7.19.0/configure-user-access-control-for-fips-mode","children":[]},{"id":"ci_f66d38863b88fe9af5bff5768c247bbfbac899ebf4d676894837b994ca11bfc6","title":"Configure LogRhythm XM for FIPS Mode","path":"/lrsiem/7.19.0/configure-logrhythm-xm-for-fips-mode","children":[]},{"id":"ci_285939285d18f814f5d90d8d0e79c685b941b657a76eadf0632c57add436bfe6","title":"Configure LogRhythm DPAWC + DX for FIPS Mode","path":"/lrsiem/7.19.0/configure-logrhythm-dpawc-dx-for-fips-mode","children":[{"id":"ci_643163a791197938fd634b061c61a978a16ec025af1e22701d87bf8910049423","title":"Configure LogRhythm DPAWC","path":"/lrsiem/7.19.0/configure-logrhythm-dpawc","children":[]},{"id":"ci_1bcfb5cc5e7ffa5871fec91c5f04fe85364b1a0c4b4c0a4ba2eac63a8fc1f0e2","title":"Configure LogRhythm DX","path":"/lrsiem/7.19.0/configure-logrhythm-dx","children":[]},{"id":"ci_f1199d4df2122f6b25d81882cad748bca048fdf485243a01ffaaacd3c8ac4bcb","title":"Establishing IPsec Communications between Windows & Linux OS","path":"/lrsiem/7.19.0/establishing-ipsec-communications-between-windows-linux-os","children":[{"id":"ci_08ef64758a932707cc7192c9c83b0641a5455fce9e2c834c9ff4af56ef7ce57a","title":"Windows OS IPsec Configuration","path":"/lrsiem/7.19.0/windows-os-ipsec-configuration","children":[{"id":"ci_8b402bb9ff6697cdc6b2da555cd36fe12ce1f62530a95d48e01e2155462f9635","title":"Create a Custom MMC Console","path":"/lrsiem/7.19.0/create-a-custom-mmc-console","children":[]},{"id":"ci_48b130f2331a0eb3052ea4e51665030a2fa7a853373806a47bff593f984c7c1a","title":"Enable Audit Policy for Your Computer","path":"/lrsiem/7.19.0/enable-audit-policy-for-your-computer","children":[]},{"id":"ci_28b66429df9fa4f2eb4775d177940ca3c65703728458872396b3244e31b808a7","title":"Build a Custom IPsec Policy","path":"/lrsiem/7.19.0/build-a-custom-ipsec-policy","children":[]},{"id":"ci_bc15fa40ba63f461058de24d47ec99692819720497f8f48f1496d6f2a499af1f","title":"Configure an IPsec Filter List","path":"/lrsiem/7.19.0/configure-an-ipsec-filter-list","children":[]},{"id":"ci_57caba8ff520b0aa259a342665d2aafd43aa8bd3b839db940ed547c6e551a501","title":"Configure an IKE Authentication Method","path":"/lrsiem/7.19.0/configure-an-ike-authentication-method","children":[]}]},{"id":"ci_0e4861578fac9c6f3365c9f18843258f49f2c33e98c7e9dd347b7cc799fd1f8d","title":"Linux/CentOS IPsec Configuration","path":"/lrsiem/7.19.0/linux-centos-ipsec-configuration","children":[{"id":"ci_679ae307b8999b8fcc279ce5ed014c9b2dacbec864775f92558157550d2e8d30","title":"Configure IPsec on Linux Machine","path":"/lrsiem/7.19.0/configure-ipsec-on-linux-machine","children":[]},{"id":"ci_9a1bc5dfd54378b834c58e0ae090bafe4384247fe833dee4a1864cf2fdf74618","title":"Put Linux/CentOS into FIPS Mode","path":"/lrsiem/7.19.0/put-linux-centos-into-fips-mode","children":[]}]},{"id":"ci_53779f32044b15d4fddfb9f3c215bfd3c14fd6c0992a2b52af2f220e77febc9b","title":"Test Your Custom IPsec Policy on both Computers","path":"/lrsiem/7.19.0/test-your-custom-ipsec-policy-on-both-computers","children":[]}]}]},{"id":"ci_28dde204d45755471d64064295bf3d6f555aa5a3d6ee4a49a8862fe669474e48","title":"Force Encrypted Connections for SQL (Recommended)","path":"/lrsiem/7.19.0/force-encrypted-connections-for-sql-recommended","children":[]},{"id":"ci_088562977b61a46093c63dd61c718b6ffa67bca94b5301f3934be847efffc4ad","title":"Deploy LogRhythm in a FIPS-Enabled Domain","path":"/lrsiem/7.19.0/deploy-logrhythm-in-a-fips-enabled-domain","children":[]},{"id":"ci_82298ca45cda43b2b0a429d5af88080b8ff53473a6b24a349053d1043a4d2359","title":"Put Windows into FIPS Mode","path":"/lrsiem/7.19.0/put-windows-into-fips-mode","children":[]},{"id":"ci_12998b3f3a7b11f4975bc30cc7de381c1c180ad0c2ba1737e29237ef9c4e6885","title":"Configure LogRhythm Services and the Windows Data Indexer for FIPS Mode","path":"/lrsiem/7.19.0/configure-logrhythm-services-and-the-windows-data-indexer-for-fips-mode","children":[]}]},{"id":"ci_722dee7920799f7de46ce25b30efa39030402b873e2f5f983277770ebe26bde9","title":"Integrated Security","path":"/lrsiem/7.19.0/integrated-security","children":[{"id":"ci_be39513c300b8625a3a374dbcf6177d3d0c9da7ffd4b09642ae6b315125710b9","title":"Create Accounts for LogRhythm Components","path":"/lrsiem/7.19.0/create-accounts-for-logrhythm-components","children":[]},{"id":"ci_5cc724019c233638c2ba231618f3481685ff4ca7aeb5c5aa15b439571383add8","title":"Configure Database Access","path":"/lrsiem/7.19.0/configure-database-access","children":[]},{"id":"ci_03243ca595c7e5dad23283fcc810c4379501f071aeab7d5ff4abe91fa2a74ae5","title":"Shut Down LogRhythm Services","path":"/lrsiem/7.19.0/shut-down-logrhythm-services","children":[]},{"id":"ci_227a425d00ee190da0615840bd20f527ebfd797d3161af1a16e910c18ca685ef","title":"Reconfigure LogRhythm Services to Use Integrated Security","path":"/lrsiem/7.19.0/reconfigure-logrhythm-services-to-use-integrated-security","children":[]},{"id":"ci_a8ddcbc64d6d3a372d1b88eeca548e31ebc5a01c5703899c6124aae38f549c99","title":"Enable Mixed Authentication Mode","path":"/lrsiem/7.19.0/enable-mixed-authentication-mode","children":[]},{"id":"ci_146757716c00b4707c712af5162fba3c0374de31ae9a7a2a15f22edd403f5d8a","title":"Restart LogRhythm Services","path":"/lrsiem/7.19.0/restart-logrhythm-services","children":[]}]},{"id":"ci_3cca62b11497d6407185c8cbe77b2a19b83f41dd5460d20a99faf951e9983564","title":"Least Privileged User","path":"/lrsiem/7.19.0/least-privileged-user","children":[{"id":"ci_26cc04126e3c5c71d671afe3bc4a041d9b659c9e1b6131cf8e579f7fea56e73d","title":"Configuring LogRhythm Permissions","path":"/lrsiem/7.19.0/configuring-logrhythm-permissions","children":[]},{"id":"ci_22c736679262724dc1c8f6bce92086ad00c206995c38f641ca11e4f0671b10f5","title":"Least Privileged User: DP, Mediator Server","path":"/lrsiem/7.19.0/least-privileged-user-dp-mediator-server","children":[]},{"id":"ci_418e06c9dfec49fc1611d6e2cc049abad0d72772a0c9c22c632b8b182f448e03","title":"Least Privileged User: DX, Linux","path":"/lrsiem/7.19.0/least-privileged-user-dx-linux","children":[]},{"id":"ci_5c276bc59358d0b2d396085bb7e1d633f43be66f5fd39990ce32f8d3ec8f5fcb","title":"Least Privileged User: DX, Windows","path":"/lrsiem/7.19.0/least-privileged-user-dx-windows","children":[]},{"id":"ci_8d16e9bf35d945d2f8464ae2827eeba6b4d00875ba4bd00373d605e008c9e7e8","title":"Least Privileged User: PM, Advanced Intelligence Engine","path":"/lrsiem/7.19.0/least-privileged-user-pm-advanced-intelligence-engine","children":[]},{"id":"ci_efa39f5ec610e5119b13ddd9b09cd3354bb709c6c4c93e3ab12c4dcc93fb34c1","title":"Least Privileged User: PM, AIE Communication Manager","path":"/lrsiem/7.19.0/least-privileged-user-pm-aie-communication-manager","children":[]},{"id":"ci_d80465d6d79bc35f4ada8c6d7d7305ed54fd31b6149b301fcefedfb79d74d756","title":"Least Privileged User: PM, Alarming and Response Manager","path":"/lrsiem/7.19.0/least-privileged-user-pm-alarming-and-response-manager","children":[]},{"id":"ci_2512713ffb9b00c80955a39c1356c8024c1addad95b6541f73eca0bce0c8171b","title":"Least Privileged User: PM, Disaster Recovery","path":"/lrsiem/7.19.0/least-privileged-user-pm-disaster-recovery","children":[]},{"id":"ci_767fd78931b90615b6d9a18a7570a4e86d8c5562e9fe5d5d899134ffce36d18c","title":"Least Privileged User: PM, High Availability","path":"/lrsiem/7.19.0/least-privileged-user-pm-high-availability","children":[]},{"id":"ci_e73bcb8de80ebc2a98598c599597d7fac45b7d76e1e555fde9f6bb66509971e2","title":"Least Privileged User: PM, Job Manager","path":"/lrsiem/7.19.0/least-privileged-user-pm-job-manager","children":[]},{"id":"ci_9b147cccfc83e6d6b6559f7eeca71b771a535d28854ab025379764d545e7a84e","title":"Least Privileged User: PM, Web Console","path":"/lrsiem/7.19.0/least-privileged-user-pm-web-console","children":[]},{"id":"ci_508c887e761e6dd752708a862d3a115aa9886f20f81dafde6d5d941bf1d7ee4d","title":"Least Privileged User: SysMon, Linux, Unix","path":"/lrsiem/7.19.0/least-privileged-user-sysmon-linux-unix","children":[]},{"id":"ci_63f59879f75c23a76f297b7921b5d85740064e5d7e102c8904384049438057bd","title":"Least Privileged User: SysMon, Windows","path":"/lrsiem/7.19.0/least-privileged-user-sysmon-windows","children":[]}]},{"id":"ci_5246c4a37663b3c11a3265349f055ab4250c961f532ec3c40d263bc2cc35327e","title":"Public Key Infrastructure (PKI) Support","path":"/lrsiem/7.19.0/public-key-infrastructure-pki-support","children":[{"id":"ci_eabd8fd9834da7d9f1e751188ba1111eb4d849831c5bb51df1ea1dce576a2d66","title":"Certificate Configuration for LogRhythm Component Connections","path":"/lrsiem/7.19.0/certificate-configuration-for-logrhythm-component-connections","children":[]},{"id":"ci_ba643a612142481afb77cdcee250d944df22014dfdb27fe880fab243acc48c02","title":"Create a Certificate for Microsoft SQL Server Connections","path":"/lrsiem/7.19.0/create-a-certificate-for-microsoft-sql-server-connections","children":[]},{"id":"ci_0a616ac61a18be80a7fc7d36bd4b1c7bf0e81334d5d2b55096c686a0293faedd","title":"Create Client and Server Certificates","path":"/lrsiem/7.19.0/create-client-and-server-certificates","children":[]},{"id":"ci_72988b5f6ca0855073334dd20769092a53db4663b4d548d5880c485ce7bd2bf9","title":"Verify Certificates","path":"/lrsiem/7.19.0/verify-certificates","children":[]},{"id":"ci_7c3689edd13ff0ceda30713222d4359c78e10f989bdfd774035b49b5b040c904","title":"View an Example of Configuring Mutual Authentication in LogRhythm","path":"/lrsiem/7.19.0/view-an-example-of-configuring-mutual-authentication-in-logrhythm","children":[]},{"id":"ci_334487fbe05a04efa7452c43c546fcd2e4d13c6da900eb81a832d587805fbff4","title":"View an Example of Configuring Certificates for AI Engine","path":"/lrsiem/7.19.0/view-an-example-of-configuring-certificates-for-ai-engine","children":[]}]},{"id":"ci_7b5a37fa63bbd734bcd349a84d01f12289f04524c4cf63ad0958d7be646c488a","title":"Security Banners","path":"/lrsiem/7.19.0/security-banners","children":[{"id":"ci_0d7277f4b395bdc2b98aad9b1cd6feacbd52b0680081a912f6c2fdf7852f2ba8","title":"Configure the Session-Timeout Error Message","path":"/lrsiem/7.19.0/configure-the-session-timeout-error-message","children":[]},{"id":"ci_2a5dc5d0cbdf25d275e4677263d84f95c9fec2b366342a89fa520ecbfeb2e56b","title":"Configure the Start-Up Warning","path":"/lrsiem/7.19.0/configure-the-start-up-warning","children":[]}]},{"id":"ci_3d6129456fefeeab49eb040e7911c33f0cfe7c15f43119da5f68faa5602f791d","title":"LogRhythm Default Passwords","path":"/lrsiem/7.19.0/logrhythm-default-passwords","children":[]},{"id":"ci_b9333749ddf719806f4a8911fac9ef252bc1668552caf7fef61607eef00c8d3e","title":"Enhanced Auditing","path":"/lrsiem/7.19.0/enhanced-auditing","children":[{"id":"ci_f522682ef6b002cb34e6532aec8da5f3ca1e636e99bb281bcb76334eccb7dee1","title":"Collect Enhanced Audit Logs","path":"/lrsiem/7.19.0/collect-enhanced-audit-logs","children":[]}]},{"id":"ci_ac3e016df7563a37352e24051c8bcacea502628af2e7f2e2684eb64abc5a0852","title":"Query Auditing","path":"/lrsiem/7.19.0/query-auditing","children":[]}]},{"id":"ci_9a65591d3dcd69ca2b91fd57f810fd92081a49d2b82ff863a3891542a5cde275","title":"Endpoint Monitoring","path":"/lrsiem/7.19.0/endpoint-monitoring","children":[{"id":"ci_40193eeef458a58826a656eecb5cb7442e4ac625bc8fa13f501d37d406e72615","title":"Data Loss Defender (DLD)","path":"/lrsiem/7.19.0/data-loss-defender-dld","children":[{"id":"ci_fdec0a7b3777521e7171e1ccd31da904771b861509433a2dd25de4cdc61f2f7a","title":"Create DLD Policies","path":"/lrsiem/7.19.0/create-dld-policies","children":[]},{"id":"ci_a78df53ccc758ec6e0bf1649a33dbd5674e0cccbf62483e63a19c90e476f3281","title":"Delete DLD Policies","path":"/lrsiem/7.19.0/delete-dld-policies","children":[]},{"id":"ci_7e1c16dc374fcd821acf8639cdfe35c8acd25e985a644d691662d74893d07260","title":"Enable DLD for an Agent","path":"/lrsiem/7.19.0/enable-dld-for-an-agent","children":[]},{"id":"ci_9d5017361321782132b26e60ce2c8b7e4b1eadb79590403985a1b11c675ed246","title":"Modify DLD Policies","path":"/lrsiem/7.19.0/modify-dld-policies","children":[]}]},{"id":"ci_7b31563601478e73f170173d27abb9d236214de5be0c5af1e34cc7794b6c70c5","title":"File Integrity Monitor (FIM)","path":"/lrsiem/7.19.0/file-integrity-monitor-fim","children":[{"id":"ci_a7565484445cc1953c5005be912f8cbda363edb2dc8ede68061e07e890fd859a","title":"Create File Integrity Monitor Policies","path":"/lrsiem/7.19.0/create-file-integrity-monitor-policies","children":[]},{"id":"ci_bc23403d8b44a6855f81355d129f3eb4abe1123f6b6249ad67e7a5feb4f175e6","title":"Create Inclusions and Exclusions for FIM","path":"/lrsiem/7.19.0/create-inclusions-and-exclusions-for-fim","children":[]},{"id":"ci_dfdff6b8da72d7374407d2d74ef2421888d604d8bb96959281628d2d45ba88f2","title":"Associate a File Integrity Monitor Policy With an Agent","path":"/lrsiem/7.19.0/associate-a-file-integrity-monitor-policy-with-an-agent","children":[]},{"id":"ci_c6fb22bc53f9a4e408e7f3e6b32d159fa589cd4373af7b074c78c731562a7990","title":"Modify File Integrity Monitor Policies","path":"/lrsiem/7.19.0/modify-file-integrity-monitor-policies","children":[]},{"id":"ci_2f9bca6f26c70c85ecebcbf54271691e60b13a666cdd6916a2a38c7adb73bdc4","title":"Clone File Integrity Monitor Policies","path":"/lrsiem/7.19.0/clone-file-integrity-monitor-policies","children":[]},{"id":"ci_6a264934a31947d0682e67d7e58f83f55c28384c1406d2e743c649b82aa09790","title":"Delete File Integrity Monitor Policies","path":"/lrsiem/7.19.0/delete-file-integrity-monitor-policies","children":[]}]},{"id":"ci_8de8791f5af37fb578580092fc767667d80e5d22fcae15ce4636270df355cd83","title":"Network Connection Monitor (NCM)","path":"/lrsiem/7.19.0/network-connection-monitor-ncm","children":[{"id":"ci_b5d585f28a55d9121f68104cc00af24ad499fb06535ff539b66f94391108df99","title":"Enable NCM for an Agent","path":"/lrsiem/7.19.0/enable-ncm-for-an-agent","children":[]}]},{"id":"ci_fc93f1196d3e9ef7a87e7b866e7e8d49b53a7245caa4bf04073d81e579e36c1d","title":"Process Monitor","path":"/lrsiem/7.19.0/process-monitor","children":[{"id":"ci_bd1fc2371676794c35e35ad6d3cbb2ddd1a521834b5bb96beb369a8f4cd5d785","title":"Enable Process Monitor for an Agent","path":"/lrsiem/7.19.0/enable-process-monitor-for-an-agent","children":[]}]},{"id":"ci_03e47535e41b7c89273ad5b573ab3f476320dc311f50766bca5284ed4e44a64d","title":"Registry Integrity Monitor (RIM)","path":"/lrsiem/7.19.0/registry-integrity-monitor-rim","children":[{"id":"ci_d5b2149df2fce21b32ee602780d975131e865f4aaa714391fb74c29b18594f3b","title":"Associate Items to RIM Policies","path":"/lrsiem/7.19.0/associate-items-to-rim-policies","children":[]},{"id":"ci_b55dc718d0b84bc93f6fb2b6a1d401d6809d39795fcbcaa6564dffacbaf0d301","title":"Associate RIM Policies to Windows System Monitor Agents","path":"/lrsiem/7.19.0/associate-rim-policies-to-windows-system-monitor-agents","children":[]},{"id":"ci_2e28a4a016d8006f3702ccab21f107d5bb28e1383097e94ec86a757ed4e45135","title":"Configure RIM Policy Items","path":"/lrsiem/7.19.0/configure-rim-policy-items","children":[]},{"id":"ci_28790d42f140c456471400b98211b4fbe5b01fe2eeff56fbeb48ebda35fa7e27","title":"Create RIM Policies","path":"/lrsiem/7.19.0/create-rim-policies","children":[]},{"id":"ci_710bd6ef0712c354298b8559ad86f6329e34d27f2b129440ed3affe4b37595ae","title":"Delete RIM Policies","path":"/lrsiem/7.19.0/delete-rim-policies","children":[]},{"id":"ci_e9280da484c8d52f0be8c10296344a61b977cdd1920c65a45e2c1560753efe44","title":"Delete RIM Policy Items","path":"/lrsiem/7.19.0/delete-rim-policy-items","children":[]},{"id":"ci_baac179a5781a74ad4b52dba2134547ba760468c72018b4dcc50ce7bdd0f58bc","title":"Modify RIM Policies","path":"/lrsiem/7.19.0/modify-rim-policies","children":[]},{"id":"ci_97977e82666b966b8d343a830a18011045887470ce7a430eb26e03b004df6544","title":"Modify RIM Policy Items","path":"/lrsiem/7.19.0/modify-rim-policy-items","children":[]}]},{"id":"ci_e49a3e3d184ea4c4ce6bff45211bb30d528368ed7545229a29ae747ff55d4f1c","title":"User Activity Monitor (UAM)","path":"/lrsiem/7.19.0/user-activity-monitor-uam","children":[{"id":"ci_21556c9452d5a2489c449c4455dace5e108fb0b2a630ec2a8658504c99aaff72","title":"Enable UAM for an Agent","path":"/lrsiem/7.19.0/enable-uam-for-an-agent","children":[]},{"id":"ci_99f6c2983fa1562f3d364d217f421f8d6abc428f0f1a6b3b4ece3c51fe0ae2eb","title":"Include UAM in File Integrity Monitor","path":"/lrsiem/7.19.0/include-uam-in-file-integrity-monitor","children":[]}]}]},{"id":"ci_16c56512e4247553703619a1c7ad1a01cd754967e672254e9ea01d15c765bbec","title":"Entities","path":"/lrsiem/7.19.0/entities","children":[{"id":"ci_800b1c230b9e8148612c0afb69d72068729a49740fee9666eac20066c0d77943","title":"Add a Single Entity","path":"/lrsiem/7.19.0/add-a-single-entity","children":[]},{"id":"ci_6b4cbb3ae503353a8133f66295e287f0a326f1d84666a91651f5422a8be02535","title":"Bulk Import Entities From a File","path":"/lrsiem/7.19.0/bulk-import-entities-from-a-file","children":[]},{"id":"ci_96825b08efc3cedde25c471df5c80f8f984ea59821d50af9abef389040eb6882","title":"Delete Entities","path":"/lrsiem/7.19.0/delete-entities","children":[]},{"id":"ci_9c9c3c4cde7c170be616722a5cb769a90740af072ab2376aa18c165b87b48093","title":"Modify Entities","path":"/lrsiem/7.19.0/modify-entities","children":[]},{"id":"ci_7450387c96e20dc9f04d975fb9014088592715dada44f31905c204cf99ad2c00","title":"Run the Entities Reorganization Wizard","path":"/lrsiem/7.19.0/run-the-entities-reorganization-wizard","children":[]}]},{"id":"ci_daace263fb7d062196ba86c3b7b4b07f617a3ef77cddc1106f91c8fa76a5a311","title":"Global Log Processing Rules","path":"/lrsiem/7.19.0/global-log-processing-rules","children":[{"id":"ci_471678886b25e49bbf80d91124e844d8834c653c683da3465be74e0fa5cb81ad","title":"Create Global Log Processing Rules","path":"/lrsiem/7.19.0/create-global-log-processing-rules","children":[]},{"id":"ci_700bbcb7c8133e9ebcd63db9d518ad6b51a9b420430713fe91566f2027e5b60d","title":"Modify Global Log Processing Rules","path":"/lrsiem/7.19.0/modify-global-log-processing-rules","children":[]}]},{"id":"ci_be02dc945e15863a32ba1b35e00ef179b55e4de253be2a405548f1248d7000ae","title":"Host Records","path":"/lrsiem/7.19.0/host-records","children":[{"id":"ci_742dd4b627259c90dccb3d892b4abc571f78bc04acb909c8cf34013f6b379982","title":"Add Host Records Manually","path":"/lrsiem/7.19.0/add-host-records-manually","children":[]},{"id":"ci_085e812d1172431505c6109a7e392db6e0af96dd528c44283c15f33190d7c54d","title":"Add Hosts From Clipboard","path":"/lrsiem/7.19.0/add-hosts-from-clipboard","children":[]},{"id":"ci_57c4596921db909587f79cbea0ea1ac58358f52dcd74f5cc60ae1bb76cb6baaf","title":"Add Hosts From File","path":"/lrsiem/7.19.0/add-hosts-from-file","children":[]},{"id":"ci_ed8a2aef30cf82ee6ee78cdcc726a835f4b5ea79f08a8f9a6293a6cbac8e4647","title":"Add Origin Hosts or Impacted Hosts as Known Hosts","path":"/lrsiem/7.19.0/add-origin-hosts-or-impacted-hosts-as-known-hosts","children":[]},{"id":"ci_25d63a8a858b5ed0c61296386c81bb7e0bb28ac7842eb06f1e17040bb6bebede","title":"Add or Remove Multiple Host Roles","path":"/lrsiem/7.19.0/add-or-remove-multiple-host-roles","children":[]},{"id":"ci_c78fe8eda78a7a5bbb0973de13136592bd253be6cc52ea43c1ebd989f4875888","title":"Export Multiple Host Roles to File","path":"/lrsiem/7.19.0/export-multiple-host-roles-to-file","children":[]},{"id":"ci_2ab5551a950b03661d19378ca1213b4e2a081573be513d1f8f961c6930dd8358","title":"Modify Properties for a Single Host Record","path":"/lrsiem/7.19.0/modify-properties-for-a-single-host-record","children":[]},{"id":"ci_2d8655759da9b7a37a1a0569979d784a5ace2d0304070c49507ea545aa3a837c","title":"Modify Properties for Multiple Host Records","path":"/lrsiem/7.19.0/modify-properties-for-multiple-host-records","children":[]},{"id":"ci_449075d2ef68dde146d9e90b1015c53ec46502ea548453f0816e612a04b95713","title":"Resolve Known Hosts","path":"/lrsiem/7.19.0/resolve-known-hosts","children":[]},{"id":"ci_73679dcb9c1795c765b0d7763f4dcf9ad0cfc49a1c9289fb9819f89c78caa024","title":"Retire Host Records","path":"/lrsiem/7.19.0/retire-host-records","children":[]},{"id":"ci_4107beb8e124e15d35d8336e2470d0758f454e05eef7354f6be892a4023dfc31","title":"Search for Hosts","path":"/lrsiem/7.19.0/search-for-hosts","children":[]},{"id":"ci_36da0462eff5796cc6478546f5190fd3e9b36b34ac30f167154df40b0e5bf65d","title":"Windows Host Wizard","path":"/lrsiem/7.19.0/windows-host-wizard","children":[{"id":"ci_d326dcdbfa04cdffc8baa831a84fbafa98d96b14f37ed451d66e4ff41f219c48","title":"Configure Initial Host Settings in Windows Host Wizard","path":"/lrsiem/7.19.0/configure-initial-host-settings-in-windows-host-wizard","children":[]},{"id":"ci_f5cf6cbf2178180a5c3f3e32f629766899885e57ceba811b5abce057e893288c","title":"Import Computers for Log Collection","path":"/lrsiem/7.19.0/import-computers-for-log-collection","children":[]},{"id":"ci_a0e39d43c4e57a1f834f55cf33c5e24acfa860403d435d34037a494dd337f8d3","title":"Perform Optional Configuration for Remote Log Collection","path":"/lrsiem/7.19.0/perform-optional-configuration-for-remote-log-collection","children":[]},{"id":"ci_b87b56f6c310d453aae1af3fe7155a45f11d76fbc585dd31eab750f01e79c823","title":"Query Computers with Windows Host Wizard","path":"/lrsiem/7.19.0/query-computers-with-windows-host-wizard","children":[]},{"id":"ci_289e42374e7ab3c1c0372a0fcc0848d73196a54a1cd1b6b3dcc82ec647d0dc4c","title":"Review Computers with Windows Host Wizard","path":"/lrsiem/7.19.0/review-computers-with-windows-host-wizard","children":[]},{"id":"ci_db1cf84622a9f4b3b88e157e02c0795438d2cb41f1512407413252100f7527a8","title":"Scan a Domain for Computers","path":"/lrsiem/7.19.0/scan-a-domain-for-computers","children":[]},{"id":"ci_309328ebbed518df38fb779c2e49d8cad596d55c5e907a3debce7be0bb6bb373","title":"Work with Hosts and Agents in Windows Host Wizard","path":"/lrsiem/7.19.0/work-with-hosts-and-agents-in-windows-host-wizard","children":[]}]}]},{"id":"ci_2689484146c40a070a73a7e19f5c1620c3e3888d6a6e2d88c194054b26de8a05","title":"Knowledge Base","path":"/lrsiem/7.19.0/knowledge-base","children":[{"id":"ci_327543353ccdb04b20b941b2241f22537d5e9b6d6f15469bc3dba490645fbdf1","title":"Back Up the EMDB","path":"/lrsiem/7.19.0/back-up-the-emdb","children":[]},{"id":"ci_86c87d3f5b7d4533313b0392eeadc175ef057541190485c4681e608c4c6745ae","title":"Configure Knowledge Base Synchronization Settings","path":"/lrsiem/7.19.0/configure-knowledge-base-synchronization-settings","children":[]},{"id":"ci_09c0035267f0e32a19d6c7c9a6ed444c3c36fb4d6513f8df8241d3e6e48979aa","title":"Download the Knowledge Base File","path":"/lrsiem/7.19.0/download-the-knowledge-base-file","children":[]},{"id":"ci_155cca03508146b2ef64c632d587ccecc2c5a4396335e1698fd5adb7bf60c0b9","title":"Import a Knowledge Base","path":"/lrsiem/7.19.0/import-a-knowledge-base","children":[]},{"id":"ci_50080ffdde0858c4d4c2bb17d0b3598799d2eeefb96f8762c4ab65211bdd3975","title":"Knowledge Base Manager","path":"/lrsiem/7.19.0/knowledge-base-manager","children":[{"id":"ci_4e00305a7867d42f3dd7a1d0cb32c11811d24f5c0631d1e11cbd1ff191812ebf","title":"Disable Knowledge Base Modules","path":"/lrsiem/7.19.0/disable-knowledge-base-modules","children":[]},{"id":"ci_e976fd17f7a86fb520b8ed0594a55219a595c752e38b6a0865273ca823728f0f","title":"Enable Knowledge Base Modules","path":"/lrsiem/7.19.0/enable-knowledge-base-modules","children":[]},{"id":"ci_af0bf262ab495261c3f11e4f6c0d422505f5f1ddb0c7d057bba1c01483dd6223","title":"Export Knowledge Base Module Information to a File","path":"/lrsiem/7.19.0/export-knowledge-base-module-information-to-a-file","children":[]},{"id":"ci_7c0d58d9cd6c0bdf45187b36bd91fea1faab217c0bfd8be4d89ee6e1bfaab0d8","title":"Migrate Common Events","path":"/lrsiem/7.19.0/migrate-common-events","children":[]},{"id":"ci_0fa28e5452e3f1e48d6fa9dbc3ad78f01273ee5a5a5a1dc2ec164f3ed40c09a9","title":"Modify the Properties of Knowledge Base Modules","path":"/lrsiem/7.19.0/modify-the-properties-of-knowledge-base-modules","children":[]},{"id":"ci_41d63380010f01deecaaf0c93ab62de6eba6f984cc42c8a463116eb740488c78","title":"View Knowledge Base Module Dependent Objects","path":"/lrsiem/7.19.0/view-knowledge-base-module-dependent-objects","children":[]}]}]},{"id":"ci_9606f69de04430da654fa9b8568b2e4a2a584cf87a5b878fad2306dba87d75b0","title":"Log Distribution Services","path":"/lrsiem/7.19.0/log-distribution-services","children":[{"id":"ci_1e49835f8067ac39cd1caa1d289329e3dfa3465f9a2b4b59110afb142609afcd","title":"Log Distribution Receiver Manager","path":"/lrsiem/7.19.0/log-distribution-receiver-manager","children":[{"id":"ci_6fd4e5c92b7ce4d8ee1585c8ad374853bce543e98ee84405f45c8d99fe84e74b","title":"Create Log Distribution Receivers","path":"/lrsiem/7.19.0/create-log-distribution-receivers","children":[]},{"id":"ci_625ce4601b2bbafb7b482fb89f109bf873996f4e067489499b27407a469d7240","title":"Enable Log Distribution Receivers","path":"/lrsiem/7.19.0/enable-log-distribution-receivers","children":[]},{"id":"ci_7ee368c3041a9c10e45058887e32b00810f3ab25b1327146185ffd9d86e2266a","title":"Modify Log Distribution Receivers","path":"/lrsiem/7.19.0/modify-log-distribution-receivers","children":[]}]},{"id":"ci_f92de6815c38f2d107fc5da033951fc92d76036f88bb8906267496f25832496a","title":"Log Distribution Policy Manager","path":"/lrsiem/7.19.0/log-distribution-policy-manager","children":[{"id":"ci_9085c53a298f46c5236b6113128a727073acb84b1fb48d0d4ca1c94236b141f4","title":"Create Log Distribution Service Policies","path":"/lrsiem/7.19.0/create-log-distribution-service-policies","children":[]},{"id":"ci_493f31d01d6265820b076cf6c20f3926f21da298434e0a534ec5bb5d20d4fc46","title":"Enable or Disable Log Distribution Service Policies","path":"/lrsiem/7.19.0/enable-or-disable-log-distribution-service-policies","children":[]},{"id":"ci_80cd1cc70b1a67ac857aa051e7864ac5cddfb2ee543511f6a07b9dd50ec6d5b3","title":"Modify Log Distribution Service Policies","path":"/lrsiem/7.19.0/modify-log-distribution-service-policies","children":[]}]},{"id":"ci_52b20ff5f1710254c1a77079718f280abac1049153913630a86793b577b6b4cc","title":"LogRhythm Log Distribution Services Version 2","path":"/lrsiem/7.19.0/logrhythm-log-distribution-services-version-2","children":[{"id":"ci_9576bad928c039449dea7fc01f0f7bf0d3ff8aa364257d2c92ebe225dae4929a","title":"Determine When to Switch to Log Distribution Services v2","path":"/lrsiem/7.19.0/determine-when-to-switch-to-log-distribution-services-v2","children":[]},{"id":"ci_6c61dd189d1949ef0b2adc32ea42822e10a432d3949b8f74c2babb174eda1ba4","title":"Enable Log Distribution Services v2","path":"/lrsiem/7.19.0/enable-log-distribution-services-v2","children":[]},{"id":"ci_53e0d20c0681c217eb69f546ef9e91ec18b606c3f49112f291b9317fbede0e5a","title":"Troubleshoot Log Distribution Services v2","path":"/lrsiem/7.19.0/troubleshoot-log-distribution-services-v2","children":[]}]},{"id":"ci_3b57eaf35b0e3f4a9847c2a8a2333046677f20b4d212cca940e2e97dfab21553","title":"Modify Log Distribution Service Properties in Data Processors","path":"/lrsiem/7.19.0/modify-log-distribution-service-properties-in-data-processors","children":[]}]},{"id":"ci_1f7fda9f29850e598f6999c6eac8f6bfe5d50a1ef07aca481a88df1e37294931","title":"Log Processing Policies","path":"/lrsiem/7.19.0/log-processing-policies","children":[{"id":"ci_ab52377e577c25ef7629d6ec0c269620f1b9e19c6ba84589fc93ce2c0651cc75","title":"Create Log Processing Policies","path":"/lrsiem/7.19.0/create-log-processing-policies","children":[]},{"id":"ci_545a53ca801d3f368d715a3615a5b70664289ed96645558960b5a410db24a023","title":"Assign Log Processing Policies","path":"/lrsiem/7.19.0/assign-log-processing-policies","children":[]},{"id":"ci_45bb79bf9d93af58bed4394016c5954f5a4a0a8da764fc5e64b3f837305ecc63","title":"Modify Log Processing Policies","path":"/lrsiem/7.19.0/modify-log-processing-policies","children":[]},{"id":"ci_e7cad9a28e2dfb420a5cc7270ce0aaf26f5996ac28a53f85d880c5f63fa4a5f5","title":"Delete Log Processing Policies","path":"/lrsiem/7.19.0/delete-log-processing-policies","children":[]},{"id":"ci_c18603f78a3b564336a1de150977ae89612059b2ba9171fcf62b8ebfa1f02694","title":"Troubleshoot MPE Rule Performance","path":"/lrsiem/7.19.0/troubleshoot-mpe-rule-performance","children":[]}]},{"id":"ci_04876d445d5255cc922038b36bfccd0258ff0cc5a3c95e32bc4b7e1794159b08","title":"Log Sources","path":"/lrsiem/7.19.0/log-sources","children":[{"id":"ci_1de2aea3762d2131fc0a490b57c1b8e9d1e05ecc807832eda9cd3defa8d5f59a","title":"Work With Log Sources","path":"/lrsiem/7.19.0/work-with-log-sources","children":[{"id":"ci_26372e0d421d5cbb6d54767009902297a7f31cf6239beb7b598ed2e13929d5d2","title":"Add a Single Log Source","path":"/lrsiem/7.19.0/add-a-single-log-source","children":[]},{"id":"ci_c807bff20fb178ccca17244ca9c8334eac677347348097551e665415908ed20d","title":"Add Multiple Log Sources","path":"/lrsiem/7.19.0/add-multiple-log-sources","children":[]},{"id":"ci_c1bd5323b12753b40e747440406439527d53391b3235f821f255df7d4a301cd1","title":"Associate New Log Sources","path":"/lrsiem/7.19.0/associate-new-log-sources","children":[]},{"id":"ci_fb98bb4dd3ebf60d8af906bfd9bff3f2c2e10d7d28bfad5289ce2344b36ef62f","title":"Collect Local Event Logs with the Server Service Disabled","path":"/lrsiem/7.19.0/collect-local-event-logs-with-the-server-service-disabled","children":[]},{"id":"ci_94cd0c66f5f12e559885c5bfd2dc3b7935ad41a45cffa7c7ffddb95570b3b242","title":"Configure Log Sources Automatically","path":"/lrsiem/7.19.0/configure-log-sources-automatically","children":[{"id":"ci_5c5c4481ce2f603575e7d44b70232ddacf3da046d71824aa85205c346552d0fd","title":"Add and Delete SNMP Connections","path":"/lrsiem/7.19.0/add-and-delete-snmp-connections","children":[]},{"id":"ci_6cd33ed873fd946dfc757bea2b0f8a7ad8504b9e1bc3b4350a2b35a93d51275f","title":"Enable Automatic Log Source Configuration","path":"/lrsiem/7.19.0/enable-automatic-log-source-configuration","children":[]},{"id":"ci_0249b556f3a3e26d8e907e9ff35a6bf6d025cf70ff0c7c5754527fa76c865075","title":"Use the Advanced Criteria Manager","path":"/lrsiem/7.19.0/use-the-advanced-criteria-manager","children":[]}]},{"id":"ci_fa3708cfe00099e1f51f2d59069b19237c69d85747fecbfabf9432143b32250e","title":"Configure Support for Multi-Line Logs","path":"/lrsiem/7.19.0/configure-support-for-multi-line-logs","children":[]},{"id":"ci_386b78f0b353c56d22e70ca0d21f046bdc8b9bfadfbbf9da39d825902d86ebe3","title":"Export Log Sources","path":"/lrsiem/7.19.0/export-log-sources","children":[]},{"id":"ci_1e9a75541c73b6a8af2ff743899278113d9d458f1da6ff0e258136466db76d0e","title":"Modify a Single Log Source","path":"/lrsiem/7.19.0/modify-a-single-log-source","children":[]},{"id":"ci_72b8d0bbfff4d985f211373c6877c90f84ead26ffc4555f6178eb3e01ce9735b","title":"Modify Event Settings","path":"/lrsiem/7.19.0/modify-event-settings","children":[]},{"id":"ci_45e83ded6ad623d389990b64c783a24081542251e3e6b6e39b10a94929a05cb7","title":"Modify Multiple Log Sources","path":"/lrsiem/7.19.0/modify-multiple-log-sources","children":[]},{"id":"ci_0a433140125f1666fa00ba1d1a621d64a48ca03ed87f6c165edad5e21c68dd5d","title":"Move Log Sources to New Hosts","path":"/lrsiem/7.19.0/move-log-sources-to-new-hosts","children":[]},{"id":"ci_6f1b17755731b3ceb50c67ca54d3428b0484453e76e18bad4ae9273667c191ef","title":"Preregister Log Sources","path":"/lrsiem/7.19.0/preregister-log-sources","children":[]},{"id":"ci_7e67a73715c6aab96fd5992fc52529853d4f87f8c5dfaa26ee483e0e2a45b593","title":"Resolve Log Source Hosts","path":"/lrsiem/7.19.0/resolve-log-source-hosts","children":[]},{"id":"ci_5a67fc9192581f631b5c603f00ff93e0a3541d03cfbfca96b10e822a899a1748","title":"Retire or Activate Log Sources","path":"/lrsiem/7.19.0/retire-or-activate-log-sources","children":[]}]},{"id":"ci_ee92aa27c6a0cdcc2e820b5131fae94992a5e227203a16c9ed14b5d563677ca8","title":"Log Source Types","path":"/lrsiem/7.19.0/log-source-types","children":[{"id":"ci_e392b1de81200897c76d0ccf50760e08fc3719b8c1dce5e07976e9f3d443d560","title":"Create Custom Log Source Types","path":"/lrsiem/7.19.0/create-custom-log-source-types","children":[]},{"id":"ci_f879342750c7d89bd69f11d457eafec0bede285f48ebac2e1031017c93fe9a17","title":"Delete Custom Log Source Types","path":"/lrsiem/7.19.0/delete-custom-log-source-types","children":[]},{"id":"ci_d68e170de390b661a95f7f2fdc42f7cf8300927eed76ba0c0a7ca48012be40d7","title":"Modify Custom Log Source Type","path":"/lrsiem/7.19.0/modify-custom-log-source-type","children":[]},{"id":"ci_ddb431d32af945b53db3cf5cba079cb95e995c69be412ff12f8404a271cdf5e5","title":"Modify Type for Pending Log Source","path":"/lrsiem/7.19.0/modify-type-for-pending-log-source","children":[]}]},{"id":"ci_3eed9133e108cc6a53c6b16b100efdb625096cd06e9b93f57b8e8ab5b0aa6848","title":"Data Masking","path":"/lrsiem/7.19.0/data-masking","children":[{"id":"ci_766b37d7c9efcf551c050c503d82352a0510df19b9234d929d3183ff91d5e70b","title":"Add New Data Masking Rules","path":"/lrsiem/7.19.0/add-new-data-masking-rules","children":[]},{"id":"ci_460b1bd8dc775b55d72b4a8b7e06455663898e2a1f54ff8b978b95413301ee23","title":"Import and Export Data Masking Rules","path":"/lrsiem/7.19.0/import-and-export-data-masking-rules","children":[]},{"id":"ci_829a3288a4d394caf80bfb0d5ead59470740f662855b6060563d450946554402","title":"Enable and Disable Data Masking Rules","path":"/lrsiem/7.19.0/enable-and-disable-data-masking-rules","children":[]},{"id":"ci_5daf10cbfd8c03488d8e6c368713292e14227d8a40eff643640d94d4f66600ae","title":"Reorder Data Masking Rules","path":"/lrsiem/7.19.0/reorder-data-masking-rules","children":[]},{"id":"ci_150857b77ff821baf33780a453dce65194ae946c2cf3d9d95b586351ffe322f5","title":"Delete Data Masking Rules","path":"/lrsiem/7.19.0/delete-data-masking-rules","children":[]}]},{"id":"ci_cfb6ecb6dfba0d8d1c90e8a63b4ce1edaefe7882b3ff33c2c0a0ec9c43573e45","title":"Log Source Identification and Acceptance","path":"/lrsiem/7.19.0/log-source-identification-and-acceptance","children":[{"id":"ci_467f6685dacac43e41fbb37e71859560b5863b124243af9b22db89c7b6a23642","title":"Accept New Log Sources","path":"/lrsiem/7.19.0/accept-new-log-sources","children":[]},{"id":"ci_7125c9337254a6cc24e6cc7c042de513e6bb80e6bd4e66c857776f07700002bc","title":"Accept New Log Sources Automatically","path":"/lrsiem/7.19.0/accept-new-log-sources-automatically","children":[{"id":"ci_d46cd9dd51e7a9083f16f32a74de35dce005d040e03beae4c1ad1fcf28496071","title":"Create IP Range Log Source Acceptance Rules","path":"/lrsiem/7.19.0/create-ip-range-log-source-acceptance-rules","children":[]},{"id":"ci_cc1ba1456ffcf34a946bdec96a3ca51fb780a03061207a525222d339974fbea3","title":"Create Pattern Match Log Source Acceptance Rules","path":"/lrsiem/7.19.0/create-pattern-match-log-source-acceptance-rules","children":[]},{"id":"ci_8e72e4c0215905d482a8f4dde2bb5d1fe5c8c214ecfd62e815237841b96338c3","title":"Manage Automatic Log Source Acceptance Rules","path":"/lrsiem/7.19.0/manage-automatic-log-source-acceptance-rules","children":[]}]},{"id":"ci_3f0f95a5f0d465e93f4128cf23cbd102775080b7c163e9531371dcbf27700b0e","title":"Set the Log Source Identification Search Scope","path":"/lrsiem/7.19.0/set-the-log-source-identification-search-scope","children":[]},{"id":"ci_3d0cf6bde34dc31dac3a9b86448fc727d0def08b47c49e85db5f001c3f572414","title":"View Log Source Acceptance Properties","path":"/lrsiem/7.19.0/view-log-source-acceptance-properties","children":[]}]},{"id":"ci_8222db6787a3fe2dd577cc55ac7e706f363b96aa545a257412534e32e1936beb","title":"Log Sources and Agents","path":"/lrsiem/7.19.0/log-sources-and-agents","children":[{"id":"ci_0ba9132db4606332020dc3ae744b328dc69c17e2bb74b9f9645f9d7f33fa8524","title":"Limit the Number of Agents Available for Batch Updates","path":"/lrsiem/7.19.0/limit-the-number-of-agents-available-for-batch-updates","children":[]},{"id":"ci_3e3d2c049719cc8fbe4328f9da00d83b0a28b4ebe79186ca285c814fce43bc37","title":"Move Log Sources Between Agents","path":"/lrsiem/7.19.0/move-log-sources-between-agents","children":[]}]},{"id":"ci_f3aea740feabc6a820d7188e9546b7664ccaebb0909961007a4ca56b22d7b63c","title":"Flat File Collection","path":"/lrsiem/7.19.0/flat-file-collection","children":[{"id":"ci_b849810985cbf6a7e987ef0a217a829f850bc7ec13530ca2de58165537fc95db","title":"Configure a Host for Local Flat File Collection","path":"/lrsiem/7.19.0/configure-a-host-for-local-flat-file-collection","children":[]},{"id":"ci_59bee298ca8b4dd2b7410dab6bb4f9c3abe595aa87fc6585084d2c355f1acf74","title":"Configure an Agent for IIS Log Collection","path":"/lrsiem/7.19.0/configure-an-agent-for-iis-log-collection","children":[]},{"id":"ci_816a219eee27af685abc0ca80fea7ef28a827bd01709168b322ccc09d8561a6b","title":"Convert Flat File to Epoch Time","path":"/lrsiem/7.19.0/convert-flat-file-to-epoch-time","children":[]},{"id":"ci_2e090863519360ead864c56fbcc03d7fc8627baab15dcc4fec3cdee86ae33477","title":"Supported Date Parsing Formats","path":"/lrsiem/7.19.0/supported-date-parsing-formats","children":[]}]},{"id":"ci_9cea2ae7b43ce2084ab6bab4c7fdde0cb5407f3f920a06747d676739c1c011b1","title":"UDLA Collection","path":"/lrsiem/7.19.0/udla-collection","children":[{"id":"ci_425c4d9f44a419214e319918afee82fc9add6567fbfbcb304da14bd74c351b6b","title":"Configure UDLA Log Collection","path":"/lrsiem/7.19.0/configure-udla-log-collection","children":[]},{"id":"ci_4e04ea7196073a389c29b88c9cf9f7e7fa7e05005cdb6641d774b4ad2362517f","title":"Create a Sample McAfee ePolicy Orchestrator (ePO) Event Log Source","path":"/lrsiem/7.19.0/create-a-sample-mcafee-epolicy-orchestrator-epo-event-log-source","children":[]},{"id":"ci_c1cd5f4770126f08d4329465a5bb723794c4c8a0d45007345eb0de0097dcb10c","title":"Create a Sample Oracle 10g Audit Trail UDLA Log Source","path":"/lrsiem/7.19.0/create-a-sample-oracle-10g-audit-trail-udla-log-source","children":[]},{"id":"ci_a9b64a9aaecda460408aae2ae6495b807590c32ec6e80922d4b5245b2fa60036","title":"Export and Import UDLA Log Source Configurations","path":"/lrsiem/7.19.0/export-and-import-udla-log-source-configurations","children":[]},{"id":"ci_85800ae34c0f639a9b8a73db9a9bc6e5b5c3f80da963515b1590d7277deddd5c","title":"Override UDLA SQL","path":"/lrsiem/7.19.0/override-udla-sql","children":[]}]},{"id":"ci_942bd11464fca994822e6f5d076f42a939acf2fbfb851badb02a360992aea6d8","title":"Log Source Virtualization","path":"/lrsiem/7.19.0/log-source-virtualization","children":[{"id":"ci_a0752dd0397f92066f7047b40e40cba6aaab657058e2719e42f59d31e505b0d4","title":"Create Log Source Virtualization Templates","path":"/lrsiem/7.19.0/create-log-source-virtualization-templates","children":[]},{"id":"ci_c2e300a6bff082783eac1be496e72672a15fef880cc02cd865df5b514ec10793","title":"Create Virtual Log Sources","path":"/lrsiem/7.19.0/create-virtual-log-sources","children":[]},{"id":"ci_3e9cb17c4908b5d0707b1ce846277f1fcfdfa4b73a1223ad59c63d9331b76921","title":"Delete Log Source Virtualization Templates","path":"/lrsiem/7.19.0/delete-log-source-virtualization-templates","children":[]},{"id":"ci_40d23b94d6d3913220e160997fbc8ca4ee687f7a6e39e0bbfedcf484ed83a83d","title":"Delete Virtual Log Sources","path":"/lrsiem/7.19.0/delete-virtual-log-sources","children":[]},{"id":"ci_1cd5d79db7b9e18eb9ac05ea322abcd73605baedc93bbcc7ecb1bce49025aae7","title":"Enable Virtualization on a Single Log Source","path":"/lrsiem/7.19.0/enable-virtualization-on-a-single-log-source","children":[]},{"id":"ci_ec1f10be462d823b339970f00c9c5a1e7ac7495762980bd8d332087db97fecda","title":"Enable Virtualization on Multiple Log Sources","path":"/lrsiem/7.19.0/enable-virtualization-on-multiple-log-sources","children":[]},{"id":"ci_92bbe6553c0e41cf1b9dde465e5eec6b5b84d158266cd8b5fe42b8020dae372a","title":"Export Log Source Virtualization Templates","path":"/lrsiem/7.19.0/export-log-source-virtualization-templates","children":[]},{"id":"ci_4aad8eaa148e5603f396c3de3d2cdc818f34da99ee9c4f2665cd306143f9de7b","title":"Filter Virtual Logs at the Agent","path":"/lrsiem/7.19.0/filter-virtual-logs-at-the-agent","children":[]},{"id":"ci_06410f1b1461c8e68ad26ce893b0b88cb2ceb8fd70c24cc437bfd4a854b24fe2","title":"Import Log Source Virtualization Templates","path":"/lrsiem/7.19.0/import-log-source-virtualization-templates","children":[]},{"id":"ci_abc6a4ec902e50615b5721e597c7930abba7e0116e2e1b0a627cfa03994e7756","title":"Modify Catch-All Sources on a Batch of Parent Log Sources","path":"/lrsiem/7.19.0/modify-catch-all-sources-on-a-batch-of-parent-log-sources","children":[]},{"id":"ci_d7526708b03f2a3cb35e6c8d3cc5158624fb099303fa956a22028e26a1e86d05","title":"Modify Log Source Virtualization Templates","path":"/lrsiem/7.19.0/modify-log-source-virtualization-templates","children":[]},{"id":"ci_df5741274a89fe7ac30a98b36cba9bb7c97cc5e95e8210e191feb26808e7ea28","title":"Modify Virtual Log Sources","path":"/lrsiem/7.19.0/modify-virtual-log-sources","children":[]}]}]},{"id":"ci_6d1a883978f2171d4c6152aded9c421bdecfb014e5c067a0fddb4ffb532c9485","title":"Network Monitor","path":"/lrsiem/7.19.0/network-monitor","children":[{"id":"ci_d4656eeef9f97a294c53eaca8889c5015c5f7405c9fd24eed1564169a08f3b1e","title":"Add NetMon in the Client Console","path":"/lrsiem/7.19.0/add-netmon-in-the-client-console","children":[]},{"id":"ci_382d15a52b73694641a9940ba6b654e2ae1f70674ba854498b9484d1c2392760","title":"Configure NetMon in the Client Console","path":"/lrsiem/7.19.0/configure-netmon-in-the-client-console","children":[]},{"id":"ci_8adc2dcc68bef4540d768aa23971f405462cce85e5bb0354abb74640df6f2526","title":"Delete NetMon in the Client Console","path":"/lrsiem/7.19.0/delete-netmon-in-the-client-console","children":[]},{"id":"ci_2cf87ea0f9260d03e8da2b00f78926324c466fc81bef9be6602bf5fc83205b45","title":"Modify NetMon in the Client Console","path":"/lrsiem/7.19.0/modify-netmon-in-the-client-console","children":[]},{"id":"ci_ca009971050bd68968c0bca6621cb1c61e9e7e10c04fa4495d8ffa7da933b263","title":"Monitor NetMon in the Client Console","path":"/lrsiem/7.19.0/monitor-netmon-in-the-client-console","children":[]}]},{"id":"ci_20f5f067aef380c5bfe4c98a021a9d84ca2ae61183185f7cac9759a4a0378b34","title":"Network Records","path":"/lrsiem/7.19.0/network-records","children":[{"id":"ci_787ce7bfaee17406fc4d976bfbecf06a35d38117cd812e9385b8d77466be0913","title":"Add Network Records from File","path":"/lrsiem/7.19.0/add-network-records-from-file","children":[]},{"id":"ci_a3f7858eedd92c08b8a4aaea7d5f37acbf8acbf98352b03dcf1c44f4a1082680","title":"Manually Add Network Records","path":"/lrsiem/7.19.0/manually-add-network-records","children":[]},{"id":"ci_f4321b8f26554607e90d4a11e2eeed7fe294faaae64237344153ad4958c4b902","title":"Modify Properties for a Single Network","path":"/lrsiem/7.19.0/modify-properties-for-a-single-network","children":[]},{"id":"ci_98cd4aa9aa3aebf1038bc7c3ffe9615c8ea711e7461a853d586d7b1df6565302","title":"Modify Properties for Multiple Network Records","path":"/lrsiem/7.19.0/modify-properties-for-multiple-network-records","children":[]},{"id":"ci_46d1b0ba3684d62a1cbb0ced43403cf164fd95e9c17536c4399da9c923d0a044","title":"Resolve Known Networks","path":"/lrsiem/7.19.0/resolve-known-networks","children":[]},{"id":"ci_fccffb3cc93b15b7a6287a482c7c4ec8e8ad1c57f7d6d568d78f15a804011584","title":"Retire Network Records","path":"/lrsiem/7.19.0/retire-network-records","children":[]},{"id":"ci_8ccb9c3d3a9bdd03129c87a306159552a0ef68e434c3930ebe2d9ce24bc9fcce","title":"Search for Networks","path":"/lrsiem/7.19.0/search-for-networks","children":[]}]},{"id":"ci_eac4480d1bb12579f6b6b4efc6d4a93a1df963b31abc35c25ca80fdb1207cedf","title":"Object Permissions Manager","path":"/lrsiem/7.19.0/object-permissions-manager","children":[{"id":"ci_12ac8954debc74a5e309ca1064d4a092a07f855dc8a475e98232db5e77314bb0","title":"Modify Objects' Security Settings","path":"/lrsiem/7.19.0/modify-objects-security-settings","children":[]}]},{"id":"ci_0ac4d0a5038e65d35ba408c53fa921bd9261062740d58a3e3e9e7bcbb22d301f","title":"People and Users","path":"/lrsiem/7.19.0/people-and-users","children":[{"id":"ci_3adb396c82e125cee4449bf778b942157bbadb757ee24d81d4fb6a96a61937eb","title":"Add Person Records or Roles","path":"/lrsiem/7.19.0/add-person-records-or-roles","children":[]},{"id":"ci_0a81b495626fcec8cae0cbfa854b11f371774a2bd7c4271a876d62df8ecdaf0b","title":"Assign Active Directory Credentials to Local Users","path":"/lrsiem/7.19.0/assign-active-directory-credentials-to-local-users","children":[]},{"id":"ci_ac5fd4bb5872104787c1dfe1ff64bff099b33511b7b669952f1cc050737a0db4","title":"Create User Accounts for Person Records or Roles","path":"/lrsiem/7.19.0/create-user-accounts-for-person-records-or-roles","children":[]},{"id":"ci_856d24c755c3d59f17a4fbcb6b1ab58fbd766646671f972a120869ab4f25d58d","title":"Direct Requests to the Case API URL","path":"/lrsiem/7.19.0/direct-requests-to-the-case-api-url","children":[]},{"id":"ci_d8a50c3a4a5ecbc705eebe254bdb44c5a8d1d7e2e8c4941c6c254212898d6c58","title":"Disable Person Records or Roles","path":"/lrsiem/7.19.0/disable-person-records-or-roles","children":[]},{"id":"ci_ccb8d2d02e4e59d6b5c0a50c0df164b0db0126c19bcd43b7721998d0a9b7ef12","title":"Modify Logins for Person Records or Roles","path":"/lrsiem/7.19.0/modify-logins-for-person-records-or-roles","children":[]},{"id":"ci_0afb962a2ac78b20c613d29e7cfede9b8994e5bad61726cdbecdde4cdbc0f56c","title":"Modify Person Records or Roles","path":"/lrsiem/7.19.0/modify-person-records-or-roles","children":[]},{"id":"ci_6e7450c2a288bf8c9cfc63f95402e5c47c94342b3f459d3cafe6908403e3f2ff","title":"Rename LogRhythm Users","path":"/lrsiem/7.19.0/rename-logrhythm-users","children":[]},{"id":"ci_1d7838f13410130fd89ba7145843873666e68a64a0c4e9b68ceb92aacda9bc98","title":"Reset Multi-Factor Authentication Access to the Web Console","path":"/lrsiem/7.19.0/reset-multi-factor-authentication-access-to-the-web-console","children":[]},{"id":"ci_5b0fa8af7e2fd1a53471862a7a2aa623a6596b91c218fb63f14a94c35564ba7f","title":"User Profile Manager","path":"/lrsiem/7.19.0/user-profile-manager","children":[{"id":"ci_cf00f9b1a6825091c72b0f0e32d9eb7ea0c1849bca249b32f3d16b3476d49f22","title":"Create a New User Profile","path":"/lrsiem/7.19.0/create-a-new-user-profile","children":[]},{"id":"ci_5f97a88d98e5bb5c0844356b2ac73717155a0efa1386a0f1edbc6651b9d69e01","title":"Manage User Profile SmartResponse Access Rights","path":"/lrsiem/7.19.0/manage-user-profile-smartresponse-access-rights","children":[]},{"id":"ci_3ae154338fcea265b3a83bf7832add19325cf6bb266dd7cfcb43b4c820f268fc","title":"Modify User Profile Data Processor Access Rights","path":"/lrsiem/7.19.0/modify-user-profile-data-processor-access-rights","children":[]},{"id":"ci_015249259abde2628f8cd819d9faf0ec53d268b5ac55cfcbbbe3763bd4a97c6d","title":"Modify User Profile Effective Log Sources Settings","path":"/lrsiem/7.19.0/modify-user-profile-effective-log-sources-settings","children":[]},{"id":"ci_12ecf85d55cd5170ff2389b0bf66f0ced1acbe235fe9d7bf0bac6259f06f151c","title":"Modify User Profile Entities Settings","path":"/lrsiem/7.19.0/modify-user-profile-entities-settings","children":[]},{"id":"ci_92bbaba61b8080d4056931669c4ea5ff29f9a2862aeac466bacbd9880add7946","title":"Modify User Profile General Settings","path":"/lrsiem/7.19.0/modify-user-profile-general-settings","children":[]},{"id":"ci_6099dade6e611186fda3c4839050f32b518fcb9c75b7f33a25396c403e91df33","title":"Modify User Profile Log Sources Access Rights","path":"/lrsiem/7.19.0/modify-user-profile-log-sources-access-rights","children":[]},{"id":"ci_0248b7f94e1764aeee01e863daa1f8f0985002b12d5b37aba20ef5f24473a3a4","title":"Manage User Profile Notification Group Access Rights","path":"/lrsiem/7.19.0/manage-user-profile-notification-group-access-rights","children":[]},{"id":"ci_6a880f53738027f9f4660d3d757fc7cc768a84432d9794bc7702305bdca7d703","title":"Modify User Profile Management Permissions","path":"/lrsiem/7.19.0/modify-user-profile-management-permissions","children":[]}]}]},{"id":"ci_111d3a04b5a371edd0338d7cc65cb084a597592b434d1ad812f81f089b03be41","title":"Platform Manager","path":"/lrsiem/7.19.0/platform-manager","children":[{"id":"ci_3fd405eb899162e8b3f1e26ca22727350be51b788679910a270ce971a72fa056","title":"Alarming, Reporting, and Response Manager Services","path":"/lrsiem/7.19.0/alarming-reporting-and-response-manager-services","children":[{"id":"ci_7e7d65daf16484be332987972b1e0e3f05f5133bdac211e0d16a8f732b4a5de2","title":"Apply Recommended Platform Manager Values","path":"/lrsiem/7.19.0/apply-recommended-platform-manager-values","children":[]},{"id":"ci_2d9a8031fd3085b840930a37e3902040f00c6d3bde15f75067b14cf2d72fb7a3","title":"Integrate LogRhythm and McAfee ePolicy Orchestrator","path":"/lrsiem/7.19.0/integrate-logrhythm-and-mcafee-epolicy-orchestrator","children":[]},{"id":"ci_e50a088559320f5c40b543bdd545078e78157a29dafa137f1ed8e3e162e4e9ed","title":"Modify Platform Manager Advanced Properties","path":"/lrsiem/7.19.0/modify-platform-manager-advanced-properties","children":[]},{"id":"ci_129b724b09e549493e58bd06a020e83089bea8ecdc5fbd76b63904a93faca3a5","title":"Modify Platform Manager Basic Properties","path":"/lrsiem/7.19.0/modify-platform-manager-basic-properties","children":[]},{"id":"ci_044cc5303b40802ddfc7e7048cd05240035ba950abef5d372556a80a94232872","title":"Revert to a Previous Platform Manager Configuration","path":"/lrsiem/7.19.0/revert-to-a-previous-platform-manager-configuration","children":[]},{"id":"ci_fbb5db973516b0afef96af5e33c82bc3098d1fef1153c686ed42ba6d1b804986","title":"Specific SMTP Servers to Allow for Failover","path":"/lrsiem/7.19.0/specific-smtp-servers-to-allow-for-failover","children":[]},{"id":"ci_9c2d2e8e37415239f8dd7e609518ca049f0e728beb32cb9916df36f089d2e3b7","title":"Start, Stop, and Restart Platform Manager Services","path":"/lrsiem/7.19.0/start-stop-and-restart-platform-manager-services","children":[]}]},{"id":"ci_34bf07ae86544075e9bd41611c068c87cd65af487e9422496db1fa21207e1c3f","title":"Global Risk Based Priority","path":"/lrsiem/7.19.0/global-risk-based-priority","children":[{"id":"ci_d6a9806c70ca59c232ae508daa75a20053ed027ed10b10f880ff87b160dd3550","title":"Determine the MPE RBP Manually","path":"/lrsiem/7.19.0/determine-the-mpe-rbp-manually","children":[]},{"id":"ci_81ec91c089b636d668178c0df7d11fc736c9340202dbf328467ab194b7d9baeb","title":"Modify AIE Risk Based Priority Settings","path":"/lrsiem/7.19.0/modify-aie-risk-based-priority-settings","children":[]},{"id":"ci_10389238357491fc292a317b8417e08faa567a2acc766e6bd1dcee8d0750f5da","title":"Modify the Default Destination Risk Level","path":"/lrsiem/7.19.0/modify-the-default-destination-risk-level","children":[]},{"id":"ci_406f83cdebbbe5c87b4eeb2431fdb3ee2f12aa001f1a774e2a409e70fe13a29d","title":"Modify the Default Source Threat Level","path":"/lrsiem/7.19.0/modify-the-default-source-threat-level","children":[]},{"id":"ci_01543c4ddb767da283372a699daf4646500d18edc63169a78a00c40df22337d6","title":"Modify the MPE Risk Based Priority Settings","path":"/lrsiem/7.19.0/modify-the-mpe-risk-based-priority-settings","children":[]},{"id":"ci_9329c7e8b7af9f1d60cc081514047b393422f7294ba61fb1d13743c1d07c4386","title":"Risk Based Priority Calculator","path":"/lrsiem/7.19.0/risk-based-priority-calculator","children":[{"id":"ci_b57a9a5d886b98ff2821c4c1c8babadba6152b4cefc53c05024bacc38035fe1a","title":"Install the RBP Calculator","path":"/lrsiem/7.19.0/install-the-rbp-calculator","children":[]},{"id":"ci_04047881f6f47e24f378ac52259f6437eb0b01e110b5915c472279791bf74968","title":"Determine MPE or AIE Risk Based Priority With The RBP Calculator","path":"/lrsiem/7.19.0/determine-mpe-or-aie-risk-based-priority-with-the-rbp-calculator","children":[]},{"id":"ci_810d93ea777ead5f1b19f01eb7372c240676b1118317d699274346924dc24fd9","title":"Transfer AIE RBP Calculator Values to a LogRhythm Deployment","path":"/lrsiem/7.19.0/transfer-aie-rbp-calculator-values-to-a-logrhythm-deployment","children":[]},{"id":"ci_db5f89fad36769324fc5d2c2a6aa878b651026cf766ced94da6d71556936a691","title":"Host, Network, and Default DRL and STL Settings","path":"/lrsiem/7.19.0/host-network-and-default-drl-and-stl-settings","children":[{"id":"ci_733cb9521334a0a71acde65c8817e7788ebd653db3e91bdb8d03085fc63e60f2","title":"Known Host and Network Search Algorithm","path":"/lrsiem/7.19.0/known-host-and-network-search-algorithm","children":[]}]},{"id":"ci_ed2d3905b86b1ce2b001bd0a762e03e84a7c7027ccca861a818e1ec3c887c3f8","title":"Message Processing Engine RBP Algorithm","path":"/lrsiem/7.19.0/message-processing-engine-rbp-algorithm","children":[]},{"id":"ci_871332dc88a33334e6248d2c885551258883a5157289fcd6cea4243f3b8f2714","title":"AI Engine RBP Algorithms","path":"/lrsiem/7.19.0/ai-engine-rbp-algorithms","children":[]}]}]},{"id":"ci_f17d6e7c8abd2fa0495493fceb62f25476da6550bb9718d357224ce4b4bae80d","title":"Job Manager Services","path":"/lrsiem/7.19.0/job-manager-services","children":[{"id":"ci_e7554207a88501dd6533ab08806a0b5131d28afc4c289e8aefe4c1b8c45c2fd4","title":"Modify Job Manager Advanced Properties","path":"/lrsiem/7.19.0/modify-job-manager-advanced-properties","children":[]},{"id":"ci_9f625d8160d496bf464484dcee16c4852d0c7f73e0730e737ae0305ec9f0a763","title":"Modify Job Manager Basic Properties","path":"/lrsiem/7.19.0/modify-job-manager-basic-properties","children":[]},{"id":"ci_7f58483353d326f42369012849ac331d559895ee12c4d32c91f7f487ee0b93b5","title":"Start, Stop, and Restart Job Manager Services","path":"/lrsiem/7.19.0/start-stop-and-restart-job-manager-services","children":[]},{"id":"ci_df2905828d5b7a1ab963d8cff0961bfa2f368fb477ba8f0610dd7c110981ede3","title":"Use the Job Manager Configuration Manager","path":"/lrsiem/7.19.0/use-the-job-manager-configuration-manager","children":[]}]},{"id":"ci_d9781f72b214d7c92736cb0bd3a0798965baaffc022a4b0840d09f74400cfcfe","title":"System Management Settings","path":"/lrsiem/7.19.0/system-management-settings","children":[{"id":"ci_6bcd80defabaccd197beeff9ef4358573c75ccedf3411c35457bc89c04361ce1","title":"Active Directory Domain Manager","path":"/lrsiem/7.19.0/active-directory-domain-manager","children":[{"id":"ci_03dc374946ac9c27824683705fafc6c9dfe2de0efafc5aa0ba62255eb0d545e6","title":"Add Active Directory Groups as Filters","path":"/lrsiem/7.19.0/add-active-directory-groups-as-filters","children":[]},{"id":"ci_54b3d78015eb55c8accf7a7f76690dcaebb1fabd1d075f472f3866cac96825e9","title":"Add New Active Directory Domains","path":"/lrsiem/7.19.0/add-new-active-directory-domains","children":[]},{"id":"ci_5e9b7506f9d5a9afc345da7eac0239d65b53d09cc578f1d8fee310b779975807","title":"Check the Active Directory Synchronization Status","path":"/lrsiem/7.19.0/check-the-active-directory-synchronization-status","children":[]},{"id":"ci_2109049fc7c516b1de1cfa671eee5cba7713870baa164d987aeb1e521c1679bb","title":"Modify Active Directory Domains","path":"/lrsiem/7.19.0/modify-active-directory-domains","children":[]},{"id":"ci_5043250642235bf3d067c8b66395e7f8fa4d4e966d23d7e0dc0e29690a1dd2f5","title":"Retire or Activate Active Directory Domains","path":"/lrsiem/7.19.0/retire-or-activate-active-directory-domains","children":[]},{"id":"ci_01d24cb17afd335fc1f39e6bc37e8013e42b2d40111d60a1ce4c69dacdfb678a","title":"Run Active Directory Browser Investigations","path":"/lrsiem/7.19.0/run-active-directory-browser-investigations","children":[]}]},{"id":"ci_06e6b142393b23bcdf3f9e08578c7f57c6bed9bea2364959dccacc7e0351d2e4","title":"Configure Global Maintenance Settings","path":"/lrsiem/7.19.0/configure-global-maintenance-settings","children":[]},{"id":"ci_f33d7636dee5b022f86c48407fb953b8ba71b9962b67c26a0fadc0b13d77fb20","title":"Set or Modify Data Management Settings","path":"/lrsiem/7.19.0/set-or-modify-data-management-settings","children":[]},{"id":"ci_f857910e4d02437c61b1e133465bc32253cf1866c7ad403fd82a14b3c28416f3","title":"Enable Intelligent Indexing Globally","path":"/lrsiem/7.19.0/enable-intelligent-indexing-globally","children":[]}]},{"id":"ci_8c1dcdcb52af51afcc4bebec2283527986170449078e67a024bf7383114248be","title":"Update the IP Address of the Platform Manager","path":"/lrsiem/7.19.0/update-the-ip-address-of-the-platform-manager","children":[]},{"id":"ci_bd706f7c4ab6593584832ac2024c25ad15fcebcd700d4a85265731ff51ea469b","title":"Use the Platform Manager Configuration Manager","path":"/lrsiem/7.19.0/use-the-platform-manager-configuration-manager","children":[]}]},{"id":"ci_85f67dab4ea83a258e9013fb18e6209b113944fd4b177dcc23be286f70bb242d","title":"SmartResponse","path":"/lrsiem/7.19.0/smartresponse","children":[{"id":"ci_5d52997586464584702e6b16f1f74b91c0d35282f2fddb0e1cf160803b478f74","title":"Approve or Deny SmartResponse Actions in the Client Console","path":"/lrsiem/7.19.0/approve-or-deny-smartresponse-actions-in-the-client-console","children":[]},{"id":"ci_848b58a9d7ffec1cef9c01d520efe9a7366f7d0b02a795dc2460f0f7c9a3165d","title":"Develop SmartResponse Plugins","path":"/lrsiem/7.19.0/develop-smartresponse-plugins","children":[{"id":"ci_90da6a76d3a90a95e474a376b9f5a6572664b604a4d2707c4c5eac3079ca0dab","title":"Create the Payload","path":"/lrsiem/7.19.0/create-the-payload","children":[]},{"id":"ci_6d1943748c26d5a8843bf89929cde9a55eb5d2827f5d5b93b345e28d9611df97","title":"Create the Configuration File","path":"/lrsiem/7.19.0/create-the-configuration-file","children":[]},{"id":"ci_c475e7cca740e2b0e3b3236564aa9624466bbbb6a6b3fd9cb2778d274a1669ee","title":"Package and Test the SmartResponse","path":"/lrsiem/7.19.0/package-and-test-the-smartresponse","children":[]},{"id":"ci_b402ad4d44325a1403be35c0e50ae3292a6f3036eb066bd9730a9c0d341c9ff8","title":"Deploy Custom SmartResponse Plugins","path":"/lrsiem/7.19.0/deploy-custom-smartresponse-plugins","children":[]}]},{"id":"ci_bc1162176db03be74604505abde28ca703fdfb7e35307540620bc76edcdaa2ed","title":"Import SmartResponse Plugins","path":"/lrsiem/7.19.0/import-smartresponse-plugins","children":[]},{"id":"ci_a407f551b7817315a7ef03c803f3a7fe3e78e979a21392022afd884ab2fc59a5","title":"Initiate SmartResponse","path":"/lrsiem/7.19.0/initiate-smartresponse","children":[]},{"id":"ci_3746f89c8f323751e0df681d715265c2a130f151a52e4dff8be2271c4fdc199c","title":"Preview SmartResponse Command Execution","path":"/lrsiem/7.19.0/preview-smartresponse-command-execution","children":[]},{"id":"ci_c765228f1deb9695d02ee90e55029d348901136e1dbb127b2491d08761480dd1","title":"Test SmartResponse Plugin Actions","path":"/lrsiem/7.19.0/test-smartresponse-plugin-actions","children":[]},{"id":"ci_c346762bb4a076ae0685d0e5d5fe4112612eb1f4d2beed1f186de7d9404965a5","title":"Troubleshoot SmartResponse Action Testing","path":"/lrsiem/7.19.0/troubleshoot-smartresponse-action-testing","children":[]},{"id":"ci_7eb07fc80848f4d19519b313cc0ad99a2df87b2f62a333b32900ae80d4ac9fe1","title":"Validate SmartResponse Plugins","path":"/lrsiem/7.19.0/validate-smartresponse-plugins","children":[]}]},{"id":"ci_a209e1aa339001d1880d7227334e966fd0ae43e1757f0bce0a459f337e5c303a","title":"System Monitor","path":"/lrsiem/7.19.0/system-monitor","children":[{"id":"ci_9bdb59afaa49cd894b95f6de37bef3199f1e39b0bf904d8fc0a9553ecd50c698","title":"Agent Identification and Acceptance","path":"/lrsiem/7.19.0/agent-identification-and-acceptance","children":[{"id":"ci_8ccea4c95352a561a68dac7bc8e793dd3c5c128190244229d88eb8bddfb1557b","title":"Accept a New System Monitor","path":"/lrsiem/7.19.0/accept-a-new-system-monitor","children":[]},{"id":"ci_c620a3538fae1e69c184a0f766402b5e0c1073272e60b1c5926771e14040653f","title":"Associate a System Monitor Agent","path":"/lrsiem/7.19.0/associate-a-system-monitor-agent","children":[]},{"id":"ci_ec0524983e96ef752349dbd724e6ac234566d559fe47702aca861a289f3194bf","title":"Work With New System Monitors","path":"/lrsiem/7.19.0/work-with-new-system-monitors","children":[]}]},{"id":"ci_e2b868bbc3cf2aa268b49ccdbe447070e76a22ef1ced8da66882a4603e690f11","title":"NetFlow, IPFIX, and J-Flow Collection","path":"/lrsiem/7.19.0/netflow-ipfix-and-j-flow-collection","children":[{"id":"ci_5b882e03b10754ae953bd1dd06938b155c74c0eaf8334bbf75a0abbe767d6805","title":"Configure a Device or Host for NetFlow, IPFIX, or J-Flow Collection","path":"/lrsiem/7.19.0/configure-a-device-or-host-for-netflow-ipfix-or-j-flow-collection","children":[]},{"id":"ci_f173c2fed0726e72edd046ab22c41d6b03e8de1ddd8a4b81d0b871d4f4eb6b1f","title":"Customize IPFIX Logs","path":"/lrsiem/7.19.0/customize-ipfix-logs","children":[]}]},{"id":"ci_f40d5c8a4b62572d4618456890455e3d65ee62adfbf43b6d7880ea62ebb5dc80","title":"Work With System Monitor Agents","path":"/lrsiem/7.19.0/work-with-system-monitor-agents","children":[{"id":"ci_352c1538998bde80d55427e5f5bb11785876621c86205c026d5ea9517e023451","title":"Add System Monitors","path":"/lrsiem/7.19.0/add-system-monitors","children":[]},{"id":"ci_626c3d832ac2f3f937aa8de3c3419757bdb4796b9ff4ad591233269589ecc822","title":"Configure the scsm Service","path":"/lrsiem/7.19.0/configure-the-scsm-service","children":[]},{"id":"ci_5f5d98a6a1507d7fa1c871cb4287933eec58fd486c1e030889311e48108a9ea4","title":"Connect System Monitor Agents to Different Entities","path":"/lrsiem/7.19.0/connect-system-monitor-agents-to-different-entities","children":[]},{"id":"ci_c850bca7cb21d033684fa6e743a418e3ec05c5701aafd4d7d7c9441d7c5118e9","title":"Connect System Monitor Agents to New Data Processors","path":"/lrsiem/7.19.0/connect-system-monitor-agents-to-new-data-processors","children":[]},{"id":"ci_a562824b98b4e1cf6db6421a45db06ac635ce3883e2bcfe0152f2ffe22e3f541","title":"Connect System Monitor Agents to Existing Data Processors","path":"/lrsiem/7.19.0/connect-system-monitor-agents-to-existing-data-processors","children":[]},{"id":"ci_849ecfc5616c756d812ad0d37988f879075d5423cb54d10ef8a06d0d7d9b3268","title":"Data Processor Pooling","path":"/lrsiem/7.19.0/data-processor-pooling","children":[{"id":"ci_ec948b48a745f0eb0a705f829b85421de1fc8ca5bfba92b2201ca8f3896c7d4f","title":"Data Processor Pool Manager","path":"/lrsiem/7.19.0/data-processor-pool-manager","children":[]},{"id":"ci_54683f7c3683167e9984bd5f8780d8edf7e2c310f5a7531ffa82f6878bba99b1","title":"Assign a Data Processor to a DP Pool","path":"/lrsiem/7.19.0/assign-a-data-processor-to-a-dp-pool","children":[]},{"id":"ci_1816d40c887d74905c42e00890085eec58da23f27bb9121e7df0b96b6d16b1a0","title":"Remove a Data Processor from a DP Pool","path":"/lrsiem/7.19.0/remove-a-data-processor-from-a-dp-pool","children":[]},{"id":"ci_a972c104f7207758d007efcfc8ff2b547193af0007f614e910ec4556b6f31ff8","title":"Configure a System Monitor Agent into DP Pool Mode","path":"/lrsiem/7.19.0/configure-a-system-monitor-agent-into-dp-pool-mode","children":[]},{"id":"ci_3745342e3c2278268c95ab473ac4843141f30574a0dfedfb9c7b720e555b217e","title":"Edit System Monitor Data Processor Settings","path":"/lrsiem/7.19.0/edit-system-monitor-data-processor-settings","children":[]},{"id":"ci_d9d2f14c4975e933c986dcf44b191f6480a5a8dc3948ee1446bbb616d7d662a4","title":"Assign a DP Pool to a System Monitor Configuration Policy","path":"/lrsiem/7.19.0/assign-a-dp-pool-to-a-system-monitor-configuration-policy","children":[]}]},{"id":"ci_54bbbac5b20ea678b915078a7a9c4b87971764e9fa901bd71ec35023b5f48fd8","title":"License System Monitors","path":"/lrsiem/7.19.0/license-system-monitors","children":[]},{"id":"ci_160d930c347395ee8bc8b202f640eb5af36bea8e117f42f27ab7e0a6f819a17f","title":"Load Balanced Agent Groups","path":"/lrsiem/7.19.0/load-balanced-agent-groups","children":[{"id":"ci_58493d63ef2ac798f4143774dc5ae9a9701c16ca590511f965eca813ab33805d","title":"Load Balanced Group Manager","path":"/lrsiem/7.19.0/load-balanced-group-manager","children":[]},{"id":"ci_62f62d7721c18cc91c6870ab349e5eecb4b9e6602bdb1a72ffb4f2932f9b409f","title":"Assign Agents to a Load Balanced Group","path":"/lrsiem/7.19.0/assign-agents-to-a-load-balanced-group","children":[]}]},{"id":"ci_a08dcf0526405ed139dc689a7c80d9d1e3174d46108adf80c5117836b113434b","title":"Modify System Monitor Basic Properties","path":"/lrsiem/7.19.0/modify-system-monitor-basic-properties","children":[]},{"id":"ci_5809fdbf72006e2f502982d7ecde67bc3e24a1f5fb608713a59c75b052147fd8","title":"Modify System Monitor Advanced Properties","path":"/lrsiem/7.19.0/modify-system-monitor-advanced-properties","children":[]},{"id":"ci_1ffa1e0faf9dee3d822bec51abc7f6fb73184c7bf92f3d25676505b4cf6ee7bc","title":"Modify Properties of Multiple System Monitor Agents","path":"/lrsiem/7.19.0/modify-properties-of-multiple-system-monitor-agents","children":[]},{"id":"ci_6914935bf6c250561c8273881feb7cee8952aa59360470434e3d18b3d391bd9f","title":"Modify System Monitors","path":"/lrsiem/7.19.0/modify-system-monitors","children":[]},{"id":"ci_a06354608349b89dac8dc4e0f79e12168df945a4982b48756cc1687dc0c2414c","title":"Configure a Secure Syslog Agent","path":"/lrsiem/7.19.0/configure-a-secure-syslog-agent","children":[]},{"id":"ci_5ad2572f9252b57857ec97bfb70cb74f66085a735fa6d6421603563b1423b11c","title":"Retire or Activate System Monitor Agents","path":"/lrsiem/7.19.0/retire-or-activate-system-monitor-agents","children":[]},{"id":"ci_eda70d93dd31b08d0941d559dad3214a2b7927d7d42f05954c6e9d1c9f7936f6","title":"Revert System Monitor Agents to Previous Configurations","path":"/lrsiem/7.19.0/revert-system-monitor-agents-to-previous-configurations","children":[]},{"id":"ci_f16824abd1c2702639ce6296a53f5147ea0ad296392cfa2bea22e71a5a331f48","title":"Startup and Shutdown System Monitors on Linux","path":"/lrsiem/7.19.0/startup-and-shutdown-system-monitors-on-linux","children":[]},{"id":"ci_2fe85f99db81311427cee5f6e56b3d649989a82d80511112509549049317a553","title":"Stop, Start, and Restart Agent Services on Windows","path":"/lrsiem/7.19.0/stop-start-and-restart-agent-services-on-windows","children":[]}]},{"id":"ci_155b05f1b46b9df0d23078464a9c5f1909258e1e4ba16ff37249e84988a5cf47","title":"Register Agent to Host with Duplicate Name","path":"/lrsiem/7.19.0/register-agent-to-host-with-duplicate-name","children":[]},{"id":"ci_98ddcf60dc109400d1cad1acaa06dd6cae79ace3b3be8771a59f64a8dd76e4a8","title":"sFlow Collection","path":"/lrsiem/7.19.0/sflow-collection","children":[{"id":"ci_8d656da668a04e5f984ad57b967746a8dc4f4412bf2d5289c9e66b35904e2b9a","title":"Configure a Device or Host for sFlow Collection","path":"/lrsiem/7.19.0/configure-a-device-or-host-for-sflow-collection","children":[]}]},{"id":"ci_03917172ba8807d7db8a3b52e7f4a6e46d2fa8d7f46fea3ba628493bf442308f","title":"SNMP Trap Receivers","path":"/lrsiem/7.19.0/snmp-trap-receivers","children":[{"id":"ci_068458f275fac8ada73db74049460a28499795f58df9b3b817dd43e2bc36aefc","title":"Configure a System Monitor for SNMP Trap Receiver","path":"/lrsiem/7.19.0/configure-a-system-monitor-for-snmp-trap-receiver","children":[]}]},{"id":"ci_e18dfa8a08600f4ec3176d18a755733d1eecc735a99a27c4adef1764da54d371","title":"Syslog Collection","path":"/lrsiem/7.19.0/syslog-collection","children":[{"id":"ci_2b795fc62119a032b1a1cf3e567532bd320273aeee69fedc9badf58c20ffd46a","title":"Configure a Device or Host for Syslog Collection","path":"/lrsiem/7.19.0/configure-a-device-or-host-for-syslog-collection","children":[]}]},{"id":"ci_c46d8a840549a65c6fe9bb47430dafce3e44e50a27d6701a0089248c06bc3e4d","title":"System Monitor Configuration Policy Manager","path":"/lrsiem/7.19.0/system-monitor-configuration-policy-manager","children":[{"id":"ci_1603e480545e035fa8f1a5331e41a0bfe6eaa5731003f585fe0f77e7b209489c","title":"Apply System Monitor Configuration Policies","path":"/lrsiem/7.19.0/apply-system-monitor-configuration-policies","children":[]},{"id":"ci_a982abfe9e4c712df07cad7b3072602fbd760335643b97299bc526331f784cf9","title":"Assign Configuration Policies to Multiple System Monitor Agents","path":"/lrsiem/7.19.0/assign-configuration-policies-to-multiple-system-monitor-agents","children":[]},{"id":"ci_2543727ca28ebef300b8467809e5654edc0b26eb3bd6d97884136401388355ad","title":"Create New System Monitor Configuration Policies","path":"/lrsiem/7.19.0/create-new-system-monitor-configuration-policies","children":[]},{"id":"ci_e8720c0443204d9ae0c0a4ecce615609ee1675685c7357cc8deabbeff1630672","title":"Delete System Monitor Configuration Policies","path":"/lrsiem/7.19.0/delete-system-monitor-configuration-policies","children":[]},{"id":"ci_95423e2bda3b6565570717b89adf3a1fa5020deeb5b7252a644d2779ca3a6e61","title":"Modify Configuration Policies on System Monitor Agents","path":"/lrsiem/7.19.0/modify-configuration-policies-on-system-monitor-agents","children":[]},{"id":"ci_be648edc55de4f618dcb2a076705c4c165a0aa0303e6f31ad22026b71213502a","title":"Modify System Monitor Configuration Policies","path":"/lrsiem/7.19.0/modify-system-monitor-configuration-policies","children":[]}]},{"id":"ci_c699e56a324c856e935a311c0607dd6c555f686a7643c525b3c9ea5624285e1e","title":"Unidirectional Windows Agent Settings","path":"/lrsiem/7.19.0/unidirectional-windows-agent-settings","children":[{"id":"ci_0585f38701ea4dd4815282273d6b3a0fef8184b356bee66511be6da32d8bc786","title":"Confirm a SysMon Agent is Sending Logs","path":"/lrsiem/7.19.0/confirm-a-sysmon-agent-is-sending-logs","children":[]},{"id":"ci_71cb39ce049f8bddde6b78f69157b12fddea4895862ee033a7f9d9a5e63e6179","title":"Copy the System Monitor Agent Configuration File to the Agent Machine","path":"/lrsiem/7.19.0/copy-the-system-monitor-agent-configuration-file-to-the-agent-machine","children":[]},{"id":"ci_66025dfcf60e536855c24e34bd70f74b33c9d98915c7151b786df59f4d386866","title":"Enable the Unidirectional Feature on the Data Processor","path":"/lrsiem/7.19.0/enable-the-unidirectional-feature-on-the-data-processor","children":[]},{"id":"ci_edb292ff503be613941e1d9576e41198156703df5739aaa7a2ae5c6ba4dfb94f","title":"Enable the Unidirectional Feature on the System Monitor Agent","path":"/lrsiem/7.19.0/enable-the-unidirectional-feature-on-the-system-monitor-agent","children":[]},{"id":"ci_830bd37813a59a4221f2668cba2ee66f990ce319179d3a4030adbcfeaf410a59","title":"Export the System Monitor Agent's Local Configuration File","path":"/lrsiem/7.19.0/export-the-system-monitor-agent-s-local-configuration-file","children":[]}]},{"id":"ci_630fa8874669d9826862d7b753cb89a25387ce8f08a3f438ed76957211bae53a","title":"Windows Event Log Collection","path":"/lrsiem/7.19.0/windows-event-log-collection","children":[{"id":"ci_fdf02741b04b684bfe11593fd22f7e69cf37d74cfd6e279dd277f81a02724153","title":"Collect Non-Domain Logs Remotely","path":"/lrsiem/7.19.0/collect-non-domain-logs-remotely","children":[]},{"id":"ci_b9deda4c07c71dad73cac0ad5b638cae1ca1b8af1f3d3a7c37646c398a063e47","title":"Create a Least-Privileged Domain User Account for Remote Log Collection","path":"/lrsiem/7.19.0/create-a-least-privileged-domain-user-account-for-remote-log-collection","children":[]},{"id":"ci_4249be0c065352e4d2089b382f8cd6fddf247429c5ba1ce5a6fc3578f116e07d","title":"Set Up Remote Log Collection","path":"/lrsiem/7.19.0/set-up-remote-log-collection","children":[]}]}]}]},{"id":"ci_18f4b1ac60beece37f6e426d7b023309c5f25c17db333fa388d9c29f63a8e7f6","title":"Client Console Analyst Guide","path":"/lrsiem/7.19.0/client-console-analyst-guide","children":[{"id":"ci_0982f1cb4d167c2d9f7c539d19acd30f1764a747e0f6fab4842b93f57e02670d","title":"Filters and Wizards","path":"/lrsiem/7.19.0/filters-and-wizards","children":[{"id":"ci_5c80b62f18a201fc60270edd6234569b4bcff49e684187ffa96f828f139e59c4","title":"Use Filter Modes","path":"/lrsiem/7.19.0/use-filter-modes","children":[]},{"id":"ci_2e81a37e2894357bae8e063d6b336be85e4e6dd9bb1f82ac2259eecb90fd3e53","title":"Use Lists with Filters","path":"/lrsiem/7.19.0/use-lists-with-filters","children":[]},{"id":"ci_f5ab9022997f268f420ea39ca99aa4fdc13574e7942405e35eec76edf9c56e06","title":"Use Multiple Filters","path":"/lrsiem/7.19.0/use-multiple-filters","children":[]},{"id":"ci_992be7e8be595d13e74e9e8a5fac0e2333ed89bd65d5cb4aecec9c7cc21d9ea8","title":"Use Multi-Type Filters","path":"/lrsiem/7.19.0/use-multi-type-filters","children":[]},{"id":"ci_fad18fcdafd6fa8f3166f5af219212e35598a84921e4fb832fbad81fbe7eeb34","title":"Use Search Strings with Filters","path":"/lrsiem/7.19.0/use-search-strings-with-filters","children":[]},{"id":"ci_80e8fdc41308e38efc7576946fe17166e2b49ca31353248c841170c6aff49e71","title":"Use SQL Pattern Match with Filters","path":"/lrsiem/7.19.0/use-sql-pattern-match-with-filters","children":[]},{"id":"ci_a971dda91543e1ca31a8bc872b2deff10fc1bd3045aad6cda97d6f0cef8d6f25","title":"Use the Filter Editor","path":"/lrsiem/7.19.0/use-the-filter-editor","children":[{"id":"ci_209c6220d5dd24d6f6e54c1768501a237439c5c8690ab58b5cd62571c789c78c","title":"Filters—Action","path":"/lrsiem/7.19.0/filtersaction","children":[]},{"id":"ci_9040781672bbb3e50aab4a71334d93b2640b9f7356cd20fbcbc53ee2c49a804f","title":"Filters—Aggregation","path":"/lrsiem/7.19.0/filtersaggregation","children":[]},{"id":"ci_348f96bac6e9313b38b211700cb56abf16f0412095b9eb64ae2f46a6ab96d878","title":"Filters—AIE Summary Fields","path":"/lrsiem/7.19.0/filtersaie-summary-fields","children":[]},{"id":"ci_9246f4540d518e11995289f3f7f45519e9f7ddc283a2ea7a6b7f961726f5f590","title":"Filters—Data Fields","path":"/lrsiem/7.19.0/filtersdata-fields","children":[]},{"id":"ci_60e750f7bfff9bf29ed22c90243c6492b58c54a6a74e2e23cb3ad2b1f431b4b3","title":"Filters—Day and Time Criteria","path":"/lrsiem/7.19.0/filtersday-and-time-criteria","children":[]},{"id":"ci_5dedc2b30b8710371e79a1f9b0df579d5ba4359343766430c6711d64a6aa6025","title":"Filters—Distinct","path":"/lrsiem/7.19.0/filtersdistinct","children":[]},{"id":"ci_7ca0761734c16a51a9f112049e752fc28dad0922193f8fb1fd92eccd6cde12fa","title":"Filters—Exclude Filter","path":"/lrsiem/7.19.0/filtersexclude-filter","children":[]},{"id":"ci_73f653d81b3fef6e4d564fa13009aa2b159355996995a840966b3fa0272aefb9","title":"Filters—Expressions","path":"/lrsiem/7.19.0/filtersexpressions","children":[]},{"id":"ci_017a6cb820bd7579a14fca12e7d410f73f2ead95ae5f12dac8078e1dfc14e2fa","title":"Filters—Group By","path":"/lrsiem/7.19.0/filtersgroup-by","children":[]},{"id":"ci_f146347fe0729a5472e59acd2323dbf5a9e2be95239a1e3aa11f7ab38b4b5d80","title":"Filters—Include Filter","path":"/lrsiem/7.19.0/filtersinclude-filter","children":[]},{"id":"ci_78d4719a4ebc7fca54973c33f99546b69aa03323e63ef6887354c104910a5ef5","title":"Filters—Information","path":"/lrsiem/7.19.0/filtersinformation","children":[]},{"id":"ci_2ca396b0f353108b48f74cc03e7a5a3fc45a3aed95975009e7112f0d9f98d204","title":"Filters—Log Source Criteria","path":"/lrsiem/7.19.0/filterslog-source-criteria","children":[]},{"id":"ci_f1c7fbca1c3aa3b28631fdea03627c4460a0a2de09bacde03ae9d2d542d4e359","title":"Filters—Notify","path":"/lrsiem/7.19.0/filtersnotify","children":[]},{"id":"ci_a354e1e1ba6fa02cb87db36f68d7683fe8b1e1bb723c04d2564a0d86fc3b221b","title":"Filters—Primary Criteria","path":"/lrsiem/7.19.0/filtersprimary-criteria","children":[]},{"id":"ci_674422ca5448621ad84800b50361ec4f967d70ac8d2226f80dde62beca32a7e9","title":"Filters—Profile","path":"/lrsiem/7.19.0/filtersprofile","children":[]},{"id":"ci_eb6e53a4c83db2e0428fff6493b2c463ca95ffd4f6e92acd20db9d4bb8301568","title":"Filters—Schedule","path":"/lrsiem/7.19.0/filtersschedule","children":[]},{"id":"ci_2951b068a4dc046bc0b4332ece847a61e0ce36ec2e88fabee11d2c940ae65bd9","title":"Filters—Settings","path":"/lrsiem/7.19.0/filterssettings","children":[]},{"id":"ci_5308bea01ad77c8e1108fc7f2bf59ddcb6a3ca91e7b177c668ed51823648a0ff","title":"Filters—Thresholds","path":"/lrsiem/7.19.0/filtersthresholds","children":[]},{"id":"ci_5bf3426ff22e9b385ab8e79ec9d08d979b3c5627b81d3d73060eff9731f9098e","title":"Filters—Time and Schedule","path":"/lrsiem/7.19.0/filterstime-and-schedule","children":[]},{"id":"ci_2a4f890ed4bf7b07e4f05ef598a410037e62f101626f87f99f2b96e0d4b592b1","title":"Filters—Unique Values","path":"/lrsiem/7.19.0/filtersunique-values","children":[]}]}]},{"id":"ci_8cf0274e55d3d9f40d7322d09498c93716c7e1c27e255fd81040ed9ace1d55ea","title":"General Console Features","path":"/lrsiem/7.19.0/general-console-features","children":[{"id":"ci_5322552ad92fe43631db428ed4bf7b7fa3384551081958663f81a67c45f83c29","title":"Export Grid to File","path":"/lrsiem/7.19.0/export-grid-to-file","children":[]}]},{"id":"ci_88946bbfb8bc39f7b9cb44f02218baf3e3e09a5c12968b94a0f9b57e90a09c26","title":"Layouts","path":"/lrsiem/7.19.0/layouts","children":[{"id":"ci_4ba9a6129b5fca06f69338ee49443c07db3f1c38ac11a4bfb1615ac1b89e3016","title":"Clone Existing Layouts","path":"/lrsiem/7.19.0/clone-existing-layouts","children":[]},{"id":"ci_154c1c3752cc2a9ea177cd2bbea51533a0008f40f3010849e5ddafd8c895c429","title":"Create New Layouts","path":"/lrsiem/7.19.0/create-new-layouts","children":[]},{"id":"ci_b4efc9c90fcab23f7d629f36b004be99a1243ade47432be030205b740ce3a6b2","title":"Delete Layouts","path":"/lrsiem/7.19.0/delete-layouts","children":[]},{"id":"ci_567bea13e1124bf65ad4ccc7f42bbd2ab122456134170858bf94dc509138a09f","title":"Import and Export Layouts","path":"/lrsiem/7.19.0/import-and-export-layouts","children":[]},{"id":"ci_6e25846a6d4acfe33abb33d3fe34cc622eff5b820904b4cefdae8e224c8e9b14","title":"Make or Clear Default Layouts","path":"/lrsiem/7.19.0/make-or-clear-default-layouts","children":[]},{"id":"ci_faf1d8da17e8414d1b21b9cc19d020b59eaddbc3cfa393e18f2b7024460b4174","title":"Modify Layout Properties","path":"/lrsiem/7.19.0/modify-layout-properties","children":[]},{"id":"ci_2fb5cd4bf523ae493c16159aaec0493ac5f900fcd257a8d62a15ba9425a302ec","title":"Reset Layouts","path":"/lrsiem/7.19.0/reset-layouts","children":[]},{"id":"ci_9890183f08bf59c1650652cf482c75d64ca4d5cd746be5c724ceccbcf824a3f5","title":"Save Layouts","path":"/lrsiem/7.19.0/save-layouts","children":[]},{"id":"ci_52d5464d67b5b9e27b0ffd19d5b421fb46602f2642a25f177b451fe4f2b4b735","title":"Set Color Themes in Layouts","path":"/lrsiem/7.19.0/set-color-themes-in-layouts","children":[]}]},{"id":"ci_54ee430e61ca37b2d547b13369a488b05de6296df5dab356a532b1b9bccc16d2","title":"Lists in the Client Console","path":"/lrsiem/7.19.0/lists-in-the-client-console","children":[{"id":"ci_7468b2fd05e455e72e8f2b5782d837c6f7152dc9c04f8cf640ecc064fad30b54","title":"Add Expiring Items to a List","path":"/lrsiem/7.19.0/add-expiring-items-to-a-list","children":[]},{"id":"ci_395545ce486715757dc2b1bfbccd8f3ae0e6d87abbf813d592637fa31fae5942","title":"Add Values to a List","path":"/lrsiem/7.19.0/add-values-to-a-list","children":[]},{"id":"ci_e9976fe9e814b3d3da3ffda96c4fa0ee6421592ef2f2b8aad8bd0e0ce0a303a5","title":"Clone Lists","path":"/lrsiem/7.19.0/clone-lists","children":[]},{"id":"ci_f18ab22b91c9a7731514a17c91bd72a1b2f7557b45adae3cdd18139aeac31159","title":"Create Lists in the Client Console","path":"/lrsiem/7.19.0/create-lists-in-the-client-console","children":[]},{"id":"ci_df0bc75e88cceb4892cc14657d7c1fc9ca79f35b7cc53438c5096908512816c0","title":"Modify the Properties of Lists","path":"/lrsiem/7.19.0/modify-the-properties-of-lists","children":[]},{"id":"ci_66517a7b73a7b29184dcc307cab45276b35b9c97dccb9f2ea0a7455170abc940","title":"Remove List Items","path":"/lrsiem/7.19.0/remove-list-items","children":[]},{"id":"ci_678ce85a8a65b38c7c44831276857347df0e2ccc355fb12dec4840a87f24645f","title":"Reset Expiration Date for List Items","path":"/lrsiem/7.19.0/reset-expiration-date-for-list-items","children":[]}]},{"id":"ci_b06a4df9c4ef6d98bf4b805f7f81b9a89f0e78e1d8cc49a5d30c441351306184","title":"Message Processing Engine Rule Builder","path":"/lrsiem/7.19.0/message-processing-engine-rule-builder","children":[{"id":"ci_9c57d4e1ad0dd9290227b1b8295ce72a44d598315d9efa8403aeec077f551d57","title":"Application Manager","path":"/lrsiem/7.19.0/application-manager","children":[{"id":"ci_7a34ca9a0ead666ec94747c0e824edecfffd2ecf4bd11a51908613d5646ccf7e","title":"Create New Application Records","path":"/lrsiem/7.19.0/create-new-application-records","children":[]},{"id":"ci_cd91f799720c52adcc99f3c873845fcd590f7a23d1bd76bb85cf6e805492fd7a","title":"Modify Application Record Properties","path":"/lrsiem/7.19.0/modify-application-record-properties","children":[]},{"id":"ci_b2f46efb9bdfbeee3681ef93a6a220b8bfedde101c4d0712da326d25b39cde22","title":"Refresh the Application Manager","path":"/lrsiem/7.19.0/refresh-the-application-manager","children":[]},{"id":"ci_9ac2696c9d4c5c7bf4a1c4464eb746ff9ac22b860a0449926ffcd17a29c67f3b","title":"Retire or Activate Application Records","path":"/lrsiem/7.19.0/retire-or-activate-application-records","children":[]}]},{"id":"ci_89db750cdc8d33294a7d6e692f32e1b34c6a59333c9d606229733085f4677528","title":"Common Event Manager","path":"/lrsiem/7.19.0/common-event-manager","children":[{"id":"ci_b21ccb4d84421028b6f1ccc065923f8cce4edc84d7af4984cae5f38d86948267","title":"Create Common Events","path":"/lrsiem/7.19.0/create-common-events","children":[]},{"id":"ci_cb0e378bc7d496143f47ed7aecc3ff8dbbbe791c8edadacce1f67b38afdd5264","title":"Delete Common Events","path":"/lrsiem/7.19.0/delete-common-events","children":[]},{"id":"ci_745cb5ddd6332e47863703ebbf2c90742672535af041236feba537c366cbfc19","title":"Modify Common Events","path":"/lrsiem/7.19.0/modify-common-events","children":[]},{"id":"ci_2be4bc8c31a5e563363dd3ce0189ad8cbef5db666e404378033c78522df844c6","title":"Search for Common Events","path":"/lrsiem/7.19.0/search-for-common-events","children":[]}]},{"id":"ci_861946ae2283165832d839eb28df6538c20c2d2ccaabe91c08fae8592d8cb132","title":"Create Custom MPE Sub-Rules","path":"/lrsiem/7.19.0/create-custom-mpe-sub-rules","children":[]},{"id":"ci_ea30940074434738b1e94dccfeb764f8c571452559387b16b2833c47762ef229","title":"Create MPE Policies","path":"/lrsiem/7.19.0/create-mpe-policies","children":[]},{"id":"ci_806d5e21766af292eaa265b3ed2c8afba2ab752757979b363ebed66eca509f8f","title":"Create New Base MPE Rules","path":"/lrsiem/7.19.0/create-new-base-mpe-rules","children":[]},{"id":"ci_a469e67ee25b3bc29ea845db39b5b1666be1ea90515c5dc7477cea74c6483268","title":"Edit MPE Rules","path":"/lrsiem/7.19.0/edit-mpe-rules","children":[]},{"id":"ci_15cf915c6669cb6f6cc39b05a3b64f4fc5cdbc0f10450787b08ae5439da1f02f","title":"Edit Sorting Properties for System Base MPE Rules","path":"/lrsiem/7.19.0/edit-sorting-properties-for-system-base-mpe-rules","children":[]},{"id":"ci_c0b167861c860af2387c2c103737dee4281541fe65586c5f0f637363d6097ad5","title":"Import and Export MPE Rules","path":"/lrsiem/7.19.0/import-and-export-mpe-rules","children":[]},{"id":"ci_9908596da7890dca047aacfdf2af57fe621743a98059cb459e638534ec16c36a","title":"Regular Expression Characters and Practices","path":"/lrsiem/7.19.0/regular-expression-characters-and-practices","children":[]}]},{"id":"ci_949f2175b1896a7d5b6da5ec005295d14970c933cc8cc2426dd825d0cdd952dc","title":"Monitor, Search, and Analysis","path":"/lrsiem/7.19.0/monitor-search-and-analysis","children":[{"id":"ci_ce49954b08641b9e9319f0733fe2952bc5e7f878112015bf680855ea11101039","title":"Alarm Viewer","path":"/lrsiem/7.19.0/alarm-viewer","children":[{"id":"ci_08dfbafdb36058628b87b7a36b9627c1b9a0650c2c2318459a71852549731b9a","title":"Change the Status of a Single Alarm","path":"/lrsiem/7.19.0/change-the-status-of-a-single-alarm","children":[]},{"id":"ci_a9a412f056307602e3536bf57485069c9f4568b72dceb29a0b75ed0280c62a8d","title":"Change the Status of Multiple Alarms","path":"/lrsiem/7.19.0/change-the-status-of-multiple-alarms","children":[]},{"id":"ci_927e1b72ad7f94bc2cd89a700c00a98aa7f29ba936531ae52bacc228f391b520","title":"Create Alarm Lists","path":"/lrsiem/7.19.0/create-alarm-lists","children":[]}]},{"id":"ci_c4fe202ef27c434b5dbc629357d90b38a981a3d21ec95c966cced4d1ce23570a","title":"Investigator","path":"/lrsiem/7.19.0/investigator","children":[{"id":"ci_3b53d3a72bca535df97f7d194d806f25a16690123ddbbda919e0539b30659d2f","title":"Change Share Permissions on a Saved Investigation","path":"/lrsiem/7.19.0/change-share-permissions-on-a-saved-investigation","children":[]},{"id":"ci_096a2f7991b9c483d9caf6bcb5fea6b7e0edef53ece8178dbc6468789b37087b","title":"Create Investigations","path":"/lrsiem/7.19.0/create-investigations","children":[]},{"id":"ci_f6d1c8560c8b1046eb9740f4199cf70e34c0b3115312e9fef7672ab44e99793a","title":"Drill Down on a Single Item in Investigation Results","path":"/lrsiem/7.19.0/drill-down-on-a-single-item-in-investigation-results","children":[]},{"id":"ci_9b9ba8b4e0ac14a1ffce8851768f30f55f8de8c8eb7865e171bb093542993ba8","title":"Drill Down on Multiple Items in Investigation Results","path":"/lrsiem/7.19.0/drill-down-on-multiple-items-in-investigation-results","children":[]},{"id":"ci_c834d7c444a15f98b03305a80b0056d2097bc4341c3db4868fc71767386d90f1","title":"Import and Export Investigations","path":"/lrsiem/7.19.0/import-and-export-investigations","children":[]},{"id":"ci_e25aa3cb40eacc30c0e4f17cc7e6492c84b9837f30c369084b720ac8d87a4aec","title":"Run Saved Investigations","path":"/lrsiem/7.19.0/run-saved-investigations","children":[]},{"id":"ci_ac63e967a98ea783a90914116cfc609f8ecc05ad3260df4c7033d679e37f31e3","title":"Save Investigations with Report Packages","path":"/lrsiem/7.19.0/save-investigations-with-report-packages","children":[]},{"id":"ci_aad398a20b07014ca6701d0d019a9ca3effd2a05eaf78b2eda5327a707f7a4b2","title":"Save Investigations with Report Templates","path":"/lrsiem/7.19.0/save-investigations-with-report-templates","children":[]},{"id":"ci_ea9fbae50d9b271eb7318a5a621d08b32b1d42fce3401519eb020f6a814a44e0","title":"Search for Most Frequent Common Events","path":"/lrsiem/7.19.0/search-for-most-frequent-common-events","children":[]},{"id":"ci_11c0d191f352ddcb2763c6103786e3b55c14ea036c650a58ddef7631666fd174","title":"View Metadata in the Log Viewer Tab","path":"/lrsiem/7.19.0/view-metadata-in-the-log-viewer-tab","children":[]},{"id":"ci_96a42213437ca05b4d030ae1e9ac817c8c8f8fa9758f94caf8f49e44f2ddc259","title":"Work With Investigation Result Graphs","path":"/lrsiem/7.19.0/work-with-investigation-result-graphs","children":[]},{"id":"ci_19ded7189db3468ba079f2842b4856dc9e1f9035c78cce0533b4e6753fe63e43","title":"Work with Log Miner","path":"/lrsiem/7.19.0/work-with-log-miner","children":[]},{"id":"ci_4951569d13141967489e65cfd1c779b5a0a2b51370e29b9e47a79749ade65416","title":"Work With Network Visualization Diagrams","path":"/lrsiem/7.19.0/work-with-network-visualization-diagrams","children":[]}]},{"id":"ci_6707983b23f2fdced0920a774415b633d11c970649d8d3a69ebc703419f3a161","title":"Personal Dashboard","path":"/lrsiem/7.19.0/personal-dashboard","children":[{"id":"ci_0e86110eaf7fef42e4e29c886cdcf4318e0c4844f887defcb68620bed992a01a","title":"Add Personal Dashboard Filters","path":"/lrsiem/7.19.0/add-personal-dashboard-filters","children":[]},{"id":"ci_42f3127e32dd3af0e9354e32c5ce95b802733929043da4e9c64a42468c325baf","title":"Apply Personal Dashboard Filters","path":"/lrsiem/7.19.0/apply-personal-dashboard-filters","children":[]},{"id":"ci_c522e25f2f43b0e0fd42a1aaa0851299e4361fceca384c5cea38efeb4041b63f","title":"Clone Personal Dashboard Filters","path":"/lrsiem/7.19.0/clone-personal-dashboard-filters","children":[]},{"id":"ci_660304b0d5e02c9ab1a4509d978612e9611a161dfae75418dca0362cd0f03f60","title":"Configure the Personal Dashboard Display","path":"/lrsiem/7.19.0/configure-the-personal-dashboard-display","children":[]},{"id":"ci_9fb222741c266d3f6d47fe99685a698eb0ea0d044b53db321efd54e52115cb35","title":"Delete Personal Dashboard Filters","path":"/lrsiem/7.19.0/delete-personal-dashboard-filters","children":[]},{"id":"ci_64547708fe4d1b8219d300fae1fd996f03a48bfdb4b7f8fffc6f455b1effc909","title":"Drill Down on Dashboard Data","path":"/lrsiem/7.19.0/drill-down-on-dashboard-data","children":[]},{"id":"ci_5915f263133fdd445a543859a5fd606d54ce617818f98154fe75ab88c0f0bfd2","title":"Modify the Properties of Personal Dashboard Filters","path":"/lrsiem/7.19.0/modify-the-properties-of-personal-dashboard-filters","children":[]}]},{"id":"ci_0285057650049755d6663b6c7b66d9f202c5963fc957289ea2e24f054a6431cd","title":"Quick Search Toolbar","path":"/lrsiem/7.19.0/quick-search-toolbar","children":[{"id":"ci_21d98e97a8856cc69924936733a66be31f5ddecbaa44a6c843b2fcb3af528259","title":"Use the Quick Search Toolbar","path":"/lrsiem/7.19.0/use-the-quick-search-toolbar","children":[]}]},{"id":"ci_2b7cb2d6eeb075d980fd91780657f5a34bfe91c6fe2aaed355b8f05a19166335","title":"Run Contextualize","path":"/lrsiem/7.19.0/run-contextualize","children":[]},{"id":"ci_ca992d5beb06c3e801df8d029a1d0c972fbb2bad7b85e9a6d79e0b67a2170b91","title":"Run Correlate","path":"/lrsiem/7.19.0/run-correlate","children":[]},{"id":"ci_efde479aeb8aaf1d3fb10fe2cfd50592d41c8cd1f384d118792c4bda41844ba5","title":"Tail","path":"/lrsiem/7.19.0/tail","children":[{"id":"ci_72c379b2d1978fd2bd481261d763ed8a68f788f8ca300de1019a18feaf8b2dfc","title":"Create New Tails","path":"/lrsiem/7.19.0/create-new-tails","children":[]},{"id":"ci_5460ba036af151ccb92b407afb916e52497ec0ee65fd534b7cf038e386ba15a4","title":"Run Saved Tails","path":"/lrsiem/7.19.0/run-saved-tails","children":[]},{"id":"ci_48f5f5915eae8686d18552a0e87e94e6bf70ea6320a37ad661260f912cfe6462","title":"Tail Log Sources","path":"/lrsiem/7.19.0/tail-log-sources","children":[]}]},{"id":"ci_7d0b57bc27f5577d8d93e2dd49651a133442dce0175703ee393bb631945f95b2","title":"TopX Analysis","path":"/lrsiem/7.19.0/topx-analysis","children":[{"id":"ci_04f028778aa751c4bf1c5b6d7adc52d3ad729f8883cac7b641b35e2e7ec93264","title":"Analyze TopX Results","path":"/lrsiem/7.19.0/analyze-topx-results","children":[]},{"id":"ci_a08cae030c1844b4f0c62665ab25c481e50a3f99e8a99eab1a3bb9adad3fa46f","title":"Configure TopX Widgets","path":"/lrsiem/7.19.0/configure-topx-widgets","children":[]}]}]},{"id":"ci_99f1b832417dbd0701543f74e4f0eefca46563cf8a45dd7d26fb9e7f24c582cb","title":"My LogRhythm","path":"/lrsiem/7.19.0/my-logrhythm","children":[{"id":"ci_9133112860f512a9d371423798d3460c7c4c10c602210ab4da8c9e5de30e4cb1","title":"Add or Modify a Person Record","path":"/lrsiem/7.19.0/add-or-modify-a-person-record","children":[]},{"id":"ci_150b17f4b8e5f8bd1fe87fe47c2131de89d77d0e009738680b6dcc1330b151d1","title":"Change Your Password","path":"/lrsiem/7.19.0/change-your-password","children":[]},{"id":"ci_7cf063e27a09c9c665d61045bfb48d4c42d0ce7cce78588d591d486ad3b89f54","title":"Create Email Notification Policies","path":"/lrsiem/7.19.0/create-email-notification-policies","children":[]},{"id":"ci_ef2a03f962871a4904f4ff9cc8b22a62885f39df545e6b1f9d2a5caf48ea097d","title":"Manage Your Preferences","path":"/lrsiem/7.19.0/manage-your-preferences","children":[]}]},{"id":"ci_d14ba80d2a3d3a6bfbf3841ea5b63090c43109234101f6e1f3e02920e57b0e5b","title":"Report Center","path":"/lrsiem/7.19.0/report-center","children":[{"id":"ci_6f3448bb078799f08cb5b6d7acf5e64a7dcbc2f53b3b042b2d85f0a268f22494","title":"Add Custom Logos to Reports","path":"/lrsiem/7.19.0/add-custom-logos-to-reports","children":[]},{"id":"ci_29d7fb7b0e904cf538724d010270b98ef9507ab674e649a12e20c9c1317b1288","title":"Clone Reports or Report Packages","path":"/lrsiem/7.19.0/clone-reports-or-report-packages","children":[]},{"id":"ci_b96ea7da1ee43cb758ef2a2159020df3814999f0d3cb69fb571b5d70bf82fdf0","title":"Create Custom Log Detail Report Templates","path":"/lrsiem/7.19.0/create-custom-log-detail-report-templates","children":[]},{"id":"ci_1a3d52729ebf6b9e7255b055977eacb879ec6510f26df3f1f08cb560ac14920a","title":"Create Custom Log Summary Report Templates","path":"/lrsiem/7.19.0/create-custom-log-summary-report-templates","children":[]},{"id":"ci_91c24a536da85d68bdb78a1c431b531eff6984ea2e33d399173bd36a95dfdb29","title":"Create Report Packages","path":"/lrsiem/7.19.0/create-report-packages","children":[]},{"id":"ci_7b238ab157c2b11a42d56f2e21f28f14f29a112ef21ff79651824da3b5211e74","title":"Create Reports","path":"/lrsiem/7.19.0/create-reports","children":[]},{"id":"ci_b0beaf34fa650b2e64cb527a2f0726729576e7d827b2fe3dd8adb27c69c0842c","title":"Create Scheduled Reports","path":"/lrsiem/7.19.0/create-scheduled-reports","children":[]},{"id":"ci_877e6712604a7d22e63e9c73af3918317d24d5f5ea91d79fa5c16752202f2129","title":"Import or Export Reports or Report Packages","path":"/lrsiem/7.19.0/import-or-export-reports-or-report-packages","children":[]},{"id":"ci_51d7093756ffa61366e2f8445e7098b72e240dac3497f18eaa781ba574d75696","title":"Manage Scheduled Reports","path":"/lrsiem/7.19.0/manage-scheduled-reports","children":[]},{"id":"ci_b97c4ccd0a71666c0fdd3abcd684842f8dd03d7c01f892783a1d84c15b6fb1e7","title":"Modify Custom Report Templates","path":"/lrsiem/7.19.0/modify-custom-report-templates","children":[]},{"id":"ci_9163c0685922306ce9c721ec9672449045a23e9c33bbcf9b54d4b11acc069044","title":"Restore Default Logo to a Report","path":"/lrsiem/7.19.0/restore-default-logo-to-a-report","children":[]},{"id":"ci_69a7bf960ee171d084f1ff99e72a42fd1f1d103cafd45735fbd8917ac383c9fd","title":"Run Reports","path":"/lrsiem/7.19.0/run-reports","children":[]},{"id":"ci_2a64765cc0c54ed6a3859c027dfbc77f1f8aa25d998e8c8a7f27a700163adecb","title":"Run Reports as Investigations","path":"/lrsiem/7.19.0/run-reports-as-investigations","children":[]},{"id":"ci_e2c76de20cf1974afc633aee7cb2f6d1b21936e281f306d0af03306c270e6ed4","title":"Troubleshoot Empty Reports","path":"/lrsiem/7.19.0/troubleshoot-empty-reports","children":[]},{"id":"ci_11db31cc8dc6403505f0f0028c96c8eabc3082d506dff4b31050a56652ca48f7","title":"View Report Center Job Status","path":"/lrsiem/7.19.0/view-report-center-job-status","children":[]},{"id":"ci_f31ad437177427a17b9add2bd6af0068e82c3e1f3be95fc9b423c765b2ff08c6","title":"View Reports in the Client Console","path":"/lrsiem/7.19.0/view-reports-in-the-client-console","children":[]}]}]},{"id":"ci_98f56fb82e021ca67dbc5dad31d969c4d2913d8d0dffeac77860f632ab10538a","title":"Web Console User Guide","path":"/lrsiem/7.19.0/web-console-user-guide","children":[{"id":"ci_af2fd6b21fe3315ff1e6687d1bc2eaa4bfffc2b013c1065831371ca826019925","title":"Alarms","path":"/lrsiem/7.19.0/alarms","children":[{"id":"ci_fef6d34499919e96d4c24bae9fe505621b2c9e287f8febc49e9146e4fd8a0b58","title":"Alarms Page Overview","path":"/lrsiem/7.19.0/alarms-page-overview","children":[{"id":"ci_627ec6cc827ef6f420c9be29119c7c136dca91661329c50a3918144046592407","title":"Alarm Cards","path":"/lrsiem/7.19.0/alarm-cards","children":[{"id":"ci_20a08a98f35e9218379e8c00406db6df2b31c378798c163ec65026a2d171d46c","title":"Sort Alarm Cards","path":"/lrsiem/7.19.0/sort-alarm-cards","children":[]}]},{"id":"ci_388c4de1d166dbe9c98c726e4de222dbaa1dd40947a556e715cff7700aa40287","title":"Alarm Grid","path":"/lrsiem/7.19.0/alarm-grid","children":[{"id":"ci_e681cfcfbad30eb75d02bc26e373afa98a529106981bf97c2fd500a1ae997e68","title":"Pin and Resize Alarm Grid Columns","path":"/lrsiem/7.19.0/pin-and-resize-alarm-grid-columns","children":[]}]},{"id":"ci_96c4252d887a517c0005dc3600fd33e72790a33f191c7e34bb00cac737d31bf1","title":"Alarm Status Trends","path":"/lrsiem/7.19.0/alarm-status-trends","children":[]}]},{"id":"ci_b77fdb59b5b71d89e743f379dff0dff0a7171a293bbc685fbab5dfd7d2cc9ccf","title":"Alarm Filters","path":"/lrsiem/7.19.0/alarm-filters","children":[{"id":"ci_d6bc2e9b445606d7dc4f066fb7cec19b63f1f8985bc87190a011d2c44d5b24b3","title":"Remove Alarm Filters","path":"/lrsiem/7.19.0/remove-alarm-filters","children":[]},{"id":"ci_2167604053be00d5885c480baaadd736649387af668be1d115a2d82531a9c87e","title":"Use Status, Entity, Risk, Notification List, and Alarm ID Filters","path":"/lrsiem/7.19.0/use-status-entity-risk-notification-list-and-alarm-id-filters","children":[]},{"id":"ci_d5ff98da88c175e139bdb35e20868d75e4adfb8b0731540dcb9577b8fb433381","title":"Use the Time Frame Filter","path":"/lrsiem/7.19.0/use-the-time-frame-filter","children":[]}]},{"id":"ci_d647851024fd7bfa44a34b062872d90600aa2f96294581fd6e7dc414b6319700","title":"Add Comments to Alarms","path":"/lrsiem/7.19.0/add-comments-to-alarms","children":[]},{"id":"ci_456591d2e30f443027dc4371cfe8a2e4c0b1312e11c1363a62faec74d8b080e3","title":"Approve or Deny SmartResponse Actions in the Web Console","path":"/lrsiem/7.19.0/approve-or-deny-smartresponse-actions-in-the-web-console","children":[]},{"id":"ci_32662043b3f58f0dac467e478d5541023c86e67a1163ea1f893e54ef80ef7bca","title":"Drill into Log Data Associated with an Alarm","path":"/lrsiem/7.19.0/drill-into-log-data-associated-with-an-alarm","children":[]},{"id":"ci_cf9b59989d84d8c68f8497aad43c6b60b478f0098afae410552bbbf0f0636215","title":"Update the Alarm Status","path":"/lrsiem/7.19.0/update-the-alarm-status","children":[]},{"id":"ci_55c1973ab02187b548708012e4d6626d9700926fb9718faa95665e38ae2e0c83","title":"View Alarms in Your Browser","path":"/lrsiem/7.19.0/view-alarms-in-your-browser","children":[]},{"id":"ci_31fa3352572281548e521fdf3cd21f6e9ef01338f3c31e48d132fcfa0485e4af","title":"View Additional Alarm Information","path":"/lrsiem/7.19.0/view-additional-alarm-information","children":[]}]},{"id":"ci_2e6e55223cc5c7e972a46ff828a0ec942cd6a6e80a588394a1947e3598b5981a","title":"Analyzer Grid","path":"/lrsiem/7.19.0/analyzer-grid","children":[{"id":"ci_c79e67a210bbcc6044811ad75ab26bb0104c0876d0e225c52030ced11f721dea","title":"Use the Analyzer Grid","path":"/lrsiem/7.19.0/use-the-analyzer-grid","children":[]},{"id":"ci_b2254dde58def02cd5472c70262b8376fd9dc0d8e67b22ceb53251e2652a6976","title":"Configure the Analyzer Grid","path":"/lrsiem/7.19.0/configure-the-analyzer-grid","children":[]},{"id":"ci_a22d7b41d21f19d2642178c99e07a549eafe16d6a0e27180bfaf333e5ac993f7","title":"Details & Actions Panel","path":"/lrsiem/7.19.0/details-actions-panel","children":[]},{"id":"ci_1ef7f4055330254da390f88996ce7c2061cf53a58e1f6cc4f033f6ce27b17ec4","title":"Export Log Data into a CSV File","path":"/lrsiem/7.19.0/export-log-data-into-a-csv-file","children":[]},{"id":"ci_4ac544375e77c43368a1e13f26dd690504b0630a73d88a427400ec9f3ca7b0c5","title":"Inspector Panel","path":"/lrsiem/7.19.0/inspector-panel","children":[{"id":"ci_d63f68bec1de433aeff498554b32df3ea0a92ec0a8b8cb97b9e7c5721b39faf8","title":"Integrate with LogRhythm UEBA (formerly CloudAI)","path":"/lrsiem/7.19.0/integrate-with-logrhythm-ueba-formerly-cloudai","children":[]},{"id":"ci_49f4e17d7e557645213fc1683e3c0f1401eea24737112b9c46d42561e7273063","title":"Use Contextualize","path":"/lrsiem/7.19.0/use-contextualize","children":[]},{"id":"ci_f4476cc555bcb9f3ddf8fcd13da52ee3396a78b68c950539a5da740bf364545d","title":"Configure Third-Party Contextualize Actions","path":"/lrsiem/7.19.0/configure-third-party-contextualize-actions","children":[]},{"id":"ci_d498fd31031ed6c1a62a4331bc0f3c0db08df2d13888813a4733f7134f0d1781","title":"Use SmartResponse","path":"/lrsiem/7.19.0/use-smartresponse","children":[]},{"id":"ci_1ed8e46240a54641ec8ab23349dd74399b53b03df41f3a23c51d39fa10aa8d67","title":"Use the AI Engine Rule Viewer","path":"/lrsiem/7.19.0/use-the-ai-engine-rule-viewer","children":[]},{"id":"ci_1f86e1b1ca1d78c41d629c7eef5ad635ca6302066284a644f39d71308e2f38d2","title":"Use Threat Intelligence Service Integration","path":"/lrsiem/7.19.0/use-threat-intelligence-service-integration","children":[]}]}]},{"id":"ci_10f3a999ec1aca0bf3e4d442132aecb83685dc44e621d0ae0817af1c7654e22b","title":"Case Management","path":"/lrsiem/7.19.0/case-management","children":[{"id":"ci_f53681514b55bf8b19f09503da700f9f0820e94cae00e3f6945f5348c2fed6be","title":"Case Cards","path":"/lrsiem/7.19.0/case-cards","children":[]},{"id":"ci_3b282b131dd5d24a2be3c2d89112c5992a7c27275cfd5b23c4e6f8381bc6c830","title":"Case History Widgets","path":"/lrsiem/7.19.0/case-history-widgets","children":[]},{"id":"ci_cc0ddda9de853f3df0721992d905fc3687309f23ded6d23fda23228cffbc29f0","title":"Case List Widgets","path":"/lrsiem/7.19.0/case-list-widgets","children":[{"id":"ci_f7698c66dc557618c6b4ec68c5bcfa6c77f779efe400d4163e896a3bd50a0b31","title":"Configure Case List Widget Settings","path":"/lrsiem/7.19.0/configure-case-list-widget-settings","children":[]}]},{"id":"ci_858dab85f2bb56d1d5b16a8b526adbe5a5ae045be6a9f5db48d2c1d5e7c5a174","title":"Case Owners vs. Collaborators","path":"/lrsiem/7.19.0/case-owners-vs-collaborators","children":[]},{"id":"ci_0721088e0d8579da955307703ad43acca2cfdb728f7776d06f285e3593c5affc","title":"Case Status and Workflow","path":"/lrsiem/7.19.0/case-status-and-workflow","children":[]},{"id":"ci_2bbf0d2f744cf4b5018909f25df93cbe2489331094632568ae70d26ff28097a2","title":"Case Trend Widgets","path":"/lrsiem/7.19.0/case-trend-widgets","children":[{"id":"ci_fa46e41dbed5780dd44f247f0c8bf9290efe3ceaee91500dbf8307abe62c2a5d","title":"Configure Case Trend Widget Settings","path":"/lrsiem/7.19.0/configure-case-trend-widget-settings","children":[]},{"id":"ci_b8604dca417e9b68b12ce874d3346d3433f32418a51caaba427a1d0eed28f424","title":"Read Case Trend by Priority Charts","path":"/lrsiem/7.19.0/read-case-trend-by-priority-charts","children":[]},{"id":"ci_be0f13dae93e7e0969a0dd6034f03f75596e4e7ba8b4d4eb3961049b2f6369e2","title":"Read Case Trend by Status Charts","path":"/lrsiem/7.19.0/read-case-trend-by-status-charts","children":[]}]},{"id":"ci_043d715fa42a929f54d1623235a83efdfd42fffe62daf88f71f3144c6e5239c3","title":"Open the Case Details View","path":"/lrsiem/7.19.0/open-the-case-details-view","children":[]},{"id":"ci_0e7d080695deb7a6664b01ba337a677d4a1b83283c05254caadb2d8518256a45","title":"Separate Entities in Cases","path":"/lrsiem/7.19.0/separate-entities-in-cases","children":[]},{"id":"ci_01fd2738ab74788277bac91ec5b691910a27568dc23643a048024be75c6fd78b","title":"Work with Cases","path":"/lrsiem/7.19.0/work-with-cases","children":[{"id":"ci_aa56fc4059e2570e9333bd839e1892c4970ce82035e6a338d73942be1a4aa1ea","title":"Add Alarms to a Case","path":"/lrsiem/7.19.0/add-alarms-to-a-case","children":[{"id":"ci_7bc1e0802aae3c7e6fb5850d2df0d0dcba5e2900dbe78e0872de2f0a8dece16e","title":"Update the Status of Alarms Associated with a Case","path":"/lrsiem/7.19.0/update-the-status-of-alarms-associated-with-a-case","children":[]}]},{"id":"ci_f046c9242460acaa45d4c343e3701f0a27661bce44f50d6a025f315d295bf290","title":"Add Files to a Case","path":"/lrsiem/7.19.0/add-files-to-a-case","children":[]},{"id":"ci_f62b20e69c6bd49683a1c76d05ba2d0c9b405eae0353489c45ad7182d40d8531","title":"Add Logs to a Case","path":"/lrsiem/7.19.0/add-logs-to-a-case","children":[]},{"id":"ci_43601c8b336d04713e9e580f251d6936817021cdf4cd7e14041f23595246cd1a","title":"Add Notes to a Case","path":"/lrsiem/7.19.0/add-notes-to-a-case","children":[]},{"id":"ci_82543a305bb901750e8d54f6864aa2d0ea63d1f77560918efd733e850546bf25","title":"Case Associations","path":"/lrsiem/7.19.0/case-associations","children":[{"id":"ci_e957df186bdd8dcac155ca38f5ff35107119f434635ab93b042cca46dea311d5","title":"Add Case Associations","path":"/lrsiem/7.19.0/add-case-associations","children":[]},{"id":"ci_ae1e471d89e29bb852152241d108c6e5fe33d2f26ca3c026a069cfade3f7b511","title":"Remove Case Associations","path":"/lrsiem/7.19.0/remove-case-associations","children":[]}]},{"id":"ci_381d699c340327dd0542c14bc9ab8db266d75070acdded421dcaeab8e51b8ccb","title":"Case Collaborators","path":"/lrsiem/7.19.0/case-collaborators","children":[{"id":"ci_3c02069e5307170d91ea1fb653d2a574c915a458c58cc484be978b168e08a8a9","title":"Assign Collaborators to a Case","path":"/lrsiem/7.19.0/assign-collaborators-to-a-case","children":[]},{"id":"ci_56961599f65aa5d25a640a4dd91724112539e0ff61c7203ad337c370d0a4fdec","title":"Remove Collaborators from a Case","path":"/lrsiem/7.19.0/remove-collaborators-from-a-case","children":[]},{"id":"ci_33c9abf476b34495a7a0f726616f91f167a515c26b29f6ee99ca7b0f833e3edf","title":"Transfer Case Ownership","path":"/lrsiem/7.19.0/transfer-case-ownership","children":[]}]},{"id":"ci_d1f4814ff313168a08ddd4ec5dd0fe3c6913476c25f543b4883c7a4f1f12bc70","title":"Case Tags","path":"/lrsiem/7.19.0/case-tags","children":[{"id":"ci_212fe0f57808c9f2917feced9feff418b09573d977d05cb567d8547afd1b593b","title":"Add Case Tags to a Case","path":"/lrsiem/7.19.0/add-case-tags-to-a-case","children":[]},{"id":"ci_eab99e15e34108c1694b27d1c7c8aa5da57337f74525e0765df549f79d138879","title":"Remove Case Tags from a Case","path":"/lrsiem/7.19.0/remove-case-tags-from-a-case","children":[]},{"id":"ci_43ad14ad281a60d607b1437df28c5eb7e1ab1cca2d1b3b70928461893ee638bc","title":"Use Case Tags to Filter Cases in Case Widgets","path":"/lrsiem/7.19.0/use-case-tags-to-filter-cases-in-case-widgets","children":[]},{"id":"ci_357af2f2cf200d727f2e68e8619d86e3f586dbee9c60d2ed1b4cbdd32bcb2612","title":"Use the Case Tag Library","path":"/lrsiem/7.19.0/use-the-case-tag-library","children":[]}]},{"id":"ci_a5a191c460d1e86c2675d8f83d7fb02036456c40d28f55578f2a54ecbef329b3","title":"Close Cases","path":"/lrsiem/7.19.0/close-cases","children":[]},{"id":"ci_747a086b9d15c63b9f4f4836eb4ed149fd2b5ade4bbf3d0f77e8c93ef9aa40c6","title":"Create New Cases","path":"/lrsiem/7.19.0/create-new-cases","children":[]},{"id":"ci_818784cdd49ad65e2daf928b76342103128244423cf274c9059c5bb1a9ca9aae","title":"Delete Logs, Alarms, and Files from Case Evidence","path":"/lrsiem/7.19.0/delete-logs-alarms-and-files-from-case-evidence","children":[]},{"id":"ci_014e0528bc9e210a2d97a90203b7fbeaeaab9e2c5b40b8399f1a650296a89a58","title":"Edit and Delete Notes in Case Evidence","path":"/lrsiem/7.19.0/edit-and-delete-notes-in-case-evidence","children":[]},{"id":"ci_a4908e9a7e88028ff607052636082fb7c3617cd12c17b788d6e309df2c7fb5bd","title":"Edit Case Names, Priorities, Due Dates, and Summaries","path":"/lrsiem/7.19.0/edit-case-names-priorities-due-dates-and-summaries","children":[]},{"id":"ci_d185b1322d67363ff11be805797525e5c4a2f971324109eb06a6236c966e053d","title":"Filter Cases","path":"/lrsiem/7.19.0/filter-cases","children":[]},{"id":"ci_bb02be92c9468575c5e60cca3637d68d8571147721bc6038cf915a89db175e10","title":"Pin Important Evidence","path":"/lrsiem/7.19.0/pin-important-evidence","children":[]},{"id":"ci_14657cdde2c5645c6483eb62f6091e4b9b31fd91e9576eeb7ccf1452512fd068","title":"Reopen Cases","path":"/lrsiem/7.19.0/reopen-cases","children":[]},{"id":"ci_712d7dc6fb22c1161f22d517236e89324b8f9b94eb65dd06a1deb1cdaf030e6c","title":"Unpin Evidence","path":"/lrsiem/7.19.0/unpin-evidence","children":[]}]},{"id":"ci_53534960ace6b1d36525437b01bf16db4ac4a27990e1a66c2aded1924db1f5af","title":"Work with the Current Case Panel","path":"/lrsiem/7.19.0/work-with-the-current-case-panel","children":[]}]},{"id":"ci_0f3d4f79cdb0050f30bbdbb3d407ae9654d8811179c757fb6583fb2a85064931","title":"Cloud to Cloud Log Collection","path":"/lrsiem/7.19.0/cloud-to-cloud-log-collection","children":[{"id":"ci_d1b201afdfd812ea403cfe0f3a445cc3e519e20303abcc80604c9268107927d9","title":"Configure an Open Collector Log Source","path":"/lrsiem/7.19.0/configure-an-open-collector-log-source","children":[]},{"id":"ci_fe44d0563999f267a780f83c1cd4baf793e61a8b144b53df9401624289ba1cc2","title":"Add a Log Source Configuration","path":"/lrsiem/7.19.0/add-a-log-source-configuration","children":[]},{"id":"ci_2b041a723be9b164b72f62fe6c1a19540462cef8349ca4ccbc483df92a195b30","title":"Use the Log Source Configuration Grid","path":"/lrsiem/7.19.0/use-the-log-source-configuration-grid","children":[]},{"id":"ci_e12492121b2e1e661f0697c0e09390e7c337807f7d887375bc48a137018db228","title":"Edit a Log Source Configuration","path":"/lrsiem/7.19.0/edit-a-log-source-configuration","children":[]},{"id":"ci_05ed93c9bbfc2278834d5e41baa375477d28a48f34ed8b81aa283e203609aaed","title":"Delete a Log Source Configuration","path":"/lrsiem/7.19.0/delete-a-log-source-configuration","children":[]}]},{"id":"ci_fcd31b72f542f6ef79c98e4f7cc507995e0c80b0219fea7b0c844fec45f3b3f7","title":"Dashboards","path":"/lrsiem/7.19.0/dashboards","children":[{"id":"ci_72106afbe9712d9481d6cd88a3eea8a12e7e8b5664271d4f8e7d97d010b29a56","title":"Create New Dashboards","path":"/lrsiem/7.19.0/create-new-dashboards","children":[]},{"id":"ci_6f98142ff6004b1ba2f3fe0c6cd08a6c0d7240d2d3cc2dde067bfc76038abd3f","title":"Clone Dashboards","path":"/lrsiem/7.19.0/clone-dashboards","children":[]},{"id":"ci_75c9ea04703a288dbde05b49b9662aef8096898c2fb2d2c3142a26c6568f80d6","title":"Import and Export Dashboards","path":"/lrsiem/7.19.0/import-and-export-dashboards","children":[]},{"id":"ci_2de368a6d4689fb0f1bbb5571c4bde573c633b7936ea5d9c42d1da729674198d","title":"Change Dashboards","path":"/lrsiem/7.19.0/change-dashboards","children":[]},{"id":"ci_90dc1da04fd505618d773a1186b4f330bc0d722c2a310d7a21ec4c22fd465234","title":"Revert Changes","path":"/lrsiem/7.19.0/revert-changes","children":[]},{"id":"ci_c92ed768056e3d89dd2b3d9e6e61e08a56a4792cc95cf591169fc6e808a81ad1","title":"Print Dashboards","path":"/lrsiem/7.19.0/print-dashboards","children":[]},{"id":"ci_7441f58b5da669e3890a06efae6c382e5a1e428502f8304bb47adfc346f96aa5","title":"Save Dashboard Changes","path":"/lrsiem/7.19.0/save-dashboard-changes","children":[]},{"id":"ci_1256564115a38d04366facfa268622c1880aa9e2501c7aedae47f42ce5980d48","title":"Filter Data with Lucene Searches","path":"/lrsiem/7.19.0/filter-data-with-lucene-searches","children":[{"id":"ci_1f0ac1ac92b78f20ee0186f9177c7b0a586f6235c510eb9c6dcc8bcc16cd1cc1","title":"Lucene Search Syntax","path":"/lrsiem/7.19.0/lucene-search-syntax","children":[{"id":"ci_927ec12359b9b03002045868ee27a9b73d5ea98ff25b578812998903bf90d631","title":"Basic Queries","path":"/lrsiem/7.19.0/basic-queries","children":[]},{"id":"ci_5cc43919f25129e37f2ef8179b4957a3d353d84a928a04fbdd2e44d8cc43801f","title":"Complex Queries","path":"/lrsiem/7.19.0/complex-queries","children":[]},{"id":"ci_bbe0ceaf2a8bc1ae0a00f8297587fa23a1ad3301d2183d5b554f244583acab6f","title":"Troubleshoot the Lucene Search","path":"/lrsiem/7.19.0/troubleshoot-the-lucene-search","children":[]},{"id":"ci_462001bdb4ba14c97641ef80db2ee2b969b624163caeb8b0fb6f73dd964d6ba7","title":"Wildcard Queries and Fuzzy Matches","path":"/lrsiem/7.19.0/wildcard-queries-and-fuzzy-matches","children":[]},{"id":"ci_4af525e89e20a2a2077c6801a8a6625280dbdfa363823e8b0c81710d27cac25a","title":"Metadata Fields","path":"/lrsiem/7.19.0/metadata-fields","children":[{"id":"ci_e7e7b5813c7c5dec817222139d8e067a3d1da138be500e1ec32f835b659eb84d","title":"Applications","path":"/lrsiem/7.19.0/applications","children":[]},{"id":"ci_5f1dbe0cf3d5a315b98b54d77e1f23e0aa83eb3639d9d70f3cb40cd9376a62fe","title":"Classification","path":"/lrsiem/7.19.0/classification","children":[]},{"id":"ci_30d121593fa3d5262d24cb70fcef3596f19dfd69808b437330ebd430c58f0b6d","title":"Host","path":"/lrsiem/7.19.0/host","children":[]},{"id":"ci_450c25bedf631df4e3430ada9ce9d63b3ac1951826a85ca9c898f8c78aeb740c","title":"Identity","path":"/lrsiem/7.19.0/identity","children":[]},{"id":"ci_67281109c38c4bbd466087f5b7de2efee326609247e83bbfb084ef7769ff7218","title":"KBytes and Packets","path":"/lrsiem/7.19.0/kbytes-and-packets","children":[]},{"id":"ci_c5a2cc74bb90e23bad6d791e6b154b2aa280a0542a01369126213ad8d323d5b4","title":"Location","path":"/lrsiem/7.19.0/location","children":[]},{"id":"ci_ee8dfb2671c3721eb8216d9f88fa157e8282d4614100c05c7286729bfd40f127","title":"Log","path":"/lrsiem/7.19.0/log","children":[]},{"id":"ci_9bdef1f62d9d5d2ab0dcf4503fafd17a0ec70db14f08c9615beb8949a9844b08","title":"Network","path":"/lrsiem/7.19.0/network","children":[]}]}]}]}]},{"id":"ci_505e39ad60b2432d05900dd9a731480a7df143f0c6a8cd58ceaff0a7887d6161","title":"Lists in Web Console","path":"/lrsiem/7.19.0/lists-in-web-console","children":[{"id":"ci_727f8a1814c1e451485e085c883516faf9cf3823b9b306f624424d7f4ddf63b4","title":"Add List Items in the Web Console","path":"/lrsiem/7.19.0/add-list-items-in-the-web-console","children":[]},{"id":"ci_b7aeb114367ba82109f5c6ea325e6da4521622a314f21a1448af009ec4474437","title":"Add Related Lists","path":"/lrsiem/7.19.0/add-related-lists","children":[]},{"id":"ci_da793d0fbaf03f9f3789fa7c9d6a3b6c31828af1ca3a0fdc491c0882204105ba","title":"Create a List in the Web Console","path":"/lrsiem/7.19.0/create-a-list-in-the-web-console","children":[]},{"id":"ci_b596a3451b2e5f8ae1f19986e845dc6d6cce3296fbb21fdd98177395d4396945","title":"Filter and Sort Lists","path":"/lrsiem/7.19.0/filter-and-sort-lists","children":[]},{"id":"ci_eb7775c154ff029ecbb8f2300a793ad86a8b2a354481d6f0bba93e620c4d6d59","title":"Remove List Items in the Web Console","path":"/lrsiem/7.19.0/remove-list-items-in-the-web-console","children":[]},{"id":"ci_1b5d061ebc989f2f8875f78fddfc2837142ec950bb19b874d660fe36ab2c28f0","title":"Select and View a List","path":"/lrsiem/7.19.0/select-and-view-a-list","children":[]},{"id":"ci_410173611f658ed6d415a8c7f6e9baa578560fd3363fa3342a7e60dda2f67059","title":"View Retired Lists","path":"/lrsiem/7.19.0/view-retired-lists","children":[]}]},{"id":"ci_9e81f8f450a4af010f1bfa6364d71bbce60b43b655811326399c8f51220c5d22","title":"Log Collection in Web Console","path":"/lrsiem/7.19.0/log-collection-in-web-console","children":[{"id":"ci_a6a9e7ed77af3516ff5926cf39a8bc99445f832ac1ea7abb9863103271b3788a","title":"Agents Grid","path":"/lrsiem/7.19.0/agents-grid","children":[]},{"id":"ci_f4b57d22a8852313c39456c8ec5b3482d0adc489709aed23562db514351279ab","title":"Beats Grid","path":"/lrsiem/7.19.0/beats-grid","children":[]},{"id":"ci_0302f0bb5c4b2986bc83b26f97ceb034f689e8b50d8b8706a872ccebc01b15bb","title":"Log Sources Grid","path":"/lrsiem/7.19.0/log-sources-grid","children":[]},{"id":"ci_a7ac893080708d992fa56382733221bc387c47bf5194a32d2ae42a3ef99cf76d","title":"Open Collectors Grid","path":"/lrsiem/7.19.0/open-collectors-grid","children":[]},{"id":"ci_aeff85513550068fc17dd107b94bbb9f008feb2eb4de15fcb37bd02ccd033bfb","title":"Add a New Beat in Web Console","path":"/lrsiem/7.19.0/add-a-new-beat-in-web-console","children":[]},{"id":"ci_19f43a727c6808427356985ae3620baad9b5509d0655e3f9e0257d3ed8291672","title":"Add a New Log Source in Web Console","path":"/lrsiem/7.19.0/add-a-new-log-source-in-web-console","children":[]},{"id":"ci_923efc91f36b70a962b6cb3dd50e489f0cfa943d903ecc8e0f928bedf80544ef","title":"Manage Pending Log Sources","path":"/lrsiem/7.19.0/manage-pending-log-sources","children":[]},{"id":"ci_b0e0be0375d8b6ee3c1c8308213958f11834506e61ba89f9addb086901d9fb64","title":"Retire Beats","path":"/lrsiem/7.19.0/retire-beats","children":[]},{"id":"ci_54f3cb20599bdfb53aa56e6aa96e3f7cfde3834a0c1c35b8d9a6522027cba4d5","title":"Retire Open Collectors","path":"/lrsiem/7.19.0/retire-open-collectors","children":[]}]},{"id":"ci_29aef3ab493f46d649f746f4af5e49472b0af8673f22055b421459a1e4dad924","title":"Playbooks","path":"/lrsiem/7.19.0/playbooks","children":[{"id":"ci_74c3c7ad1e21b3b2990a3edc54946192b5e86cc527c76a2edd297665cbe99e72","title":"Create Playbooks","path":"/lrsiem/7.19.0/create-playbooks","children":[]},{"id":"ci_b7933dd182c92648fc34d33331398e56560275846add210fc7b1d7d1072904e0","title":"Import Playbooks","path":"/lrsiem/7.19.0/import-playbooks","children":[]},{"id":"ci_67f9b2a87e0d3cf8e25c3f64fa573db816e90ad0225d49cc0e0f2b121a653d97","title":"Work with Playbooks","path":"/lrsiem/7.19.0/work-with-playbooks","children":[]},{"id":"ci_6e71da2dd74758f7d3e69ee7a9f731b61bb42552ea377e297791044dd78731fc","title":"Add Playbooks to a Case","path":"/lrsiem/7.19.0/add-playbooks-to-a-case","children":[]},{"id":"ci_920af0e862b1d43d0568a218bf1a4a0eb41e878b504a727519e07716f3cc6296","title":"Work with Playbooks in a Case","path":"/lrsiem/7.19.0/work-with-playbooks-in-a-case","children":[]},{"id":"ci_eba160355630a80b53b9995be8346e067aed302dc29f13116483f313e0b8214d","title":"Procedures List Widget","path":"/lrsiem/7.19.0/procedures-list-widget","children":[]}]},{"id":"ci_b6a115bcefc81faf259d6b17122b769230560d752cd0f4a6112c829f2ea91873","title":"Reports","path":"/lrsiem/7.19.0/reports","children":[{"id":"ci_dc0d1dd0e53ceb40eca452e0ae847a8ce4437648ce401524141ca54bb1426836","title":"Completed Reports Widget","path":"/lrsiem/7.19.0/completed-reports-widget","children":[{"id":"ci_a0ef8325274e142f866c7ed6880ce304ebe13be47d9339b67e0cf2667ee082fe","title":"Configure Completed Reports Widgets","path":"/lrsiem/7.19.0/configure-completed-reports-widgets","children":[]}]},{"id":"ci_fa9919101fa7e126335f43fb7243f32eba612a0d2258d2ab001901e850002fa2","title":"Download Reports from the Web Console","path":"/lrsiem/7.19.0/download-reports-from-the-web-console","children":[]},{"id":"ci_b346b2515e8d1e880645ee9ea5758fe80d435edb8800cc3aad75b07495a774e9","title":"Filter Report Packages on the Reports Grid","path":"/lrsiem/7.19.0/filter-report-packages-on-the-reports-grid","children":[]},{"id":"ci_181de2a5b37246d81903d3c3b33abbddcb52ec65597508e6d50b682602fc2ce7","title":"Pin and Resize Reports Grid Columns","path":"/lrsiem/7.19.0/pin-and-resize-reports-grid-columns","children":[]},{"id":"ci_bb98ec9c4bd07c6d60e2a32ff14c7e0da023be23f71dc364b72103fb27753d3e","title":"Run Searches from Report Filter Criteria","path":"/lrsiem/7.19.0/run-searches-from-report-filter-criteria","children":[]},{"id":"ci_a438d5e06c6cfd09c74782648f453812f952ff83b21a15c624f28c3959219bfb","title":"Sort Content on the Reports Grid","path":"/lrsiem/7.19.0/sort-content-on-the-reports-grid","children":[]},{"id":"ci_7ee434bc04ebe3a4d02b573c0711a63cda6b2252ec5aaccb3afc787a32213d51","title":"View Package and Reports Details in the Inspector","path":"/lrsiem/7.19.0/view-package-and-reports-details-in-the-inspector","children":[]}]},{"id":"ci_6d0c7896ed28ca5e0caa0ff38e22aa0cca67adfc7813bdd1585458b66ec12a7a","title":"Search","path":"/lrsiem/7.19.0/search","children":[{"id":"ci_ac6c657d2035f73c59efd4913621d4a96b57a6296c4d85f0b2f59bf74eceab64","title":"Manage the Searches Page","path":"/lrsiem/7.19.0/manage-the-searches-page","children":[]},{"id":"ci_1433cd6c1373efacdec31fbfbb7b4fed20aa949a79580d0b9bc64747b26312e1","title":"Run Searches from the Searches Page","path":"/lrsiem/7.19.0/run-searches-from-the-searches-page","children":[]},{"id":"ci_c357d98b1d678a5faf6b8caa749e2688a7e33ce1be36c12bb46fbec678f6086d","title":"Use Search","path":"/lrsiem/7.19.0/use-search","children":[]},{"id":"ci_efce3b646db411d94ea44c67f90549f83b1b228ed8754f9ddf35fb42b4b13e58","title":"Save Searches","path":"/lrsiem/7.19.0/save-searches","children":[]},{"id":"ci_30ea08ae38cc3d52c87601acf3e77da11a60ed2d219dd47605761bea7f0ed4ce","title":"Perform Details Searches (User/Host)","path":"/lrsiem/7.19.0/perform-details-searches-user-host","children":[]},{"id":"ci_3d6326f8ae083c2b6eb46f74f27d3522fa56bef1a4a199d7b3be22672a536984","title":"Perform Pivot Searches","path":"/lrsiem/7.19.0/perform-pivot-searches","children":[]},{"id":"ci_bb7f1f4af7c2bb1dc1bedf276a8d78d3c1e7724cfd4eb76f8be9a8429416ff5e","title":"Search Tiers (Hot/Ultra-Warm/Warm/Cold)","path":"/lrsiem/7.19.0/search-tiers-hot-ultra-warm-warm-cold","children":[]}]},{"id":"ci_a56a23bbc6748c778dda0b281c10cc6fde20a76ea7bc718deb8e1535b8d5ffba","title":"SecondLook - Web Console","path":"/lrsiem/7.19.0/secondlook-web-console","children":[]},{"id":"ci_2e62009e9e7be8093f8169513b038701051fbdd546fd80a91d4356ca2552a981","title":"Single Sign-On","path":"/lrsiem/7.19.0/single-sign-on","children":[{"id":"ci_0464881da904d584bec65ebbb031eb023b4aa2d27859cb6292d989a99f3135b9","title":"SSO Known Issues and Recommendations","path":"/lrsiem/7.19.0/sso-known-issues-and-recommendations","children":[]},{"id":"ci_746647a8d92d32ae16d10278f5cb08ab0f4b870aa9eedfa694a30c25efbf362f","title":"SSO User Auto-Provisioning","path":"/lrsiem/7.19.0/sso-user-auto-provisioning","children":[]},{"id":"ci_4d1455ba234bd802bbd278bf089a60278912000aaba222815d34cce3e0574016","title":"SSO Configuration","path":"/lrsiem/7.19.0/sso-configuration","children":[{"id":"ci_e62914358db74f781a1ef892002968c575d6feb6b4b7a35557c38a95f2e2f240","title":"Supported Identity Providers","path":"/lrsiem/7.19.0/supported-identity-providers","children":[{"id":"ci_f18478331a0402742484afffc5cdb608c249d8aa37e3dcda95895f6ba0e3ff8e","title":"Configure SSO with Okta","path":"/lrsiem/7.19.0/configure-sso-with-okta","children":[]},{"id":"ci_3788a67a4684d561196255d89af577ad0f26602d894d7c95b0cf735fc6fa44a0","title":"Configure SSO with Azure AD","path":"/lrsiem/7.19.0/configure-sso-with-azure-ad","children":[]},{"id":"ci_4b9ccc8ccfaf955b8ea0ced7e9d2b62d06491962334f2c0e2f18cfeff5e2377a","title":"Configure SSO with PingOne for Customers","path":"/lrsiem/7.19.0/configure-sso-with-pingone-for-customers","children":[]},{"id":"ci_d59a37c4c83764d46e3bbe8279c32cfe002224086341a817ea2a09f5ca3e98c3","title":"Configure SSO with PingOne for Enterprise","path":"/lrsiem/7.19.0/configure-sso-with-pingone-for-enterprise","children":[]}]}]}]},{"id":"ci_05946715549d252105fad46dc321a20f6ac62aa8dfd40dc8b80a0cb618ffd80a","title":"TrueIdentity","path":"/lrsiem/7.19.0/trueidentity","children":[{"id":"ci_003ecd2c0ae4dfc4f7e7af8edd03690f301b0f27c2e135dd107a17c59f6ca14b","title":"Work with TrueIdentities","path":"/lrsiem/7.19.0/work-with-trueidentities","children":[]}]},{"id":"ci_12d05d749fd506c0c146fe30319b4ba0d5ea146cf2871bc92c381dd9eff93404","title":"User Interface","path":"/lrsiem/7.19.0/user-interface","children":[{"id":"ci_74ae9c9c75ac39429b58f7034d226efed0e15317b66402d636ecc6c1aed70e71","title":"Resource Center","path":"/lrsiem/7.19.0/resource-center","children":[]},{"id":"ci_85a5dda10536aba539821cdd9b044c73badd43bf6401997c3bbaf0d110b759e3","title":"Pages","path":"/lrsiem/7.19.0/pages","children":[{"id":"ci_b2a77144170f9f9c9592d81a4a18dc183dd28827610d3e247a60e7d7ed3675ee","title":"Alarms Page","path":"/lrsiem/7.19.0/alarms-page","children":[]},{"id":"ci_74b016b5bf06f86a83ba362438d3078e6ebbbf9f9945f3bf1d4d3da2d6127ca6","title":"Analyze Page","path":"/lrsiem/7.19.0/analyze-page","children":[]},{"id":"ci_d62f16a48eb727ca9e7b0731515f7a98b978f4ec13e4d89abcab243541975306","title":"Cases Page","path":"/lrsiem/7.19.0/cases-page","children":[]},{"id":"ci_3f09a03f6e3b85a5409a7a1f403eb296fcc1882793d15f52d3f2362ff16f9b35","title":"Dashboards Page","path":"/lrsiem/7.19.0/dashboards-page","children":[]},{"id":"ci_873a264a6ae56567db87bf8d28a3def9833314186dc77939774adda9bf97cca9","title":"Host/User Detail Page","path":"/lrsiem/7.19.0/host-user-detail-page","children":[]},{"id":"ci_307f93684856bf74cb0620425365a75560f411271078673ba17ddf2402953811","title":"Lists Page","path":"/lrsiem/7.19.0/lists-page","children":[]},{"id":"ci_8c60b39490cce29247a556be221df12f0271c39dca1266943074f9a4058673b2","title":"Reports Page","path":"/lrsiem/7.19.0/reports-page","children":[]},{"id":"ci_3589335a54c30fd50097b104bf24e7ac40695db15b1d29a82781b6b1bc8efecc","title":"Searches Page","path":"/lrsiem/7.19.0/searches-page","children":[]},{"id":"ci_1a1b73bad643a3037619ad3632590b936e3ad403d4cff7339a9719aec178537e","title":"TrueIdentity Page","path":"/lrsiem/7.19.0/trueidentity-page","children":[]}]},{"id":"ci_8a1575fca6620552218472d0d422bc20f0f769f1f642ff36473efd025d28df10","title":"Panels","path":"/lrsiem/7.19.0/panels","children":[{"id":"ci_e111b86215a429c64609df8180949c2d55675f3f4280423fbf1573b3ed4bcc70","title":"About the Analyzer Grid","path":"/lrsiem/7.19.0/about-the-analyzer-grid","children":[]},{"id":"ci_4ccc5200cb84322fea1b4dd41d3d132d84ae5042c6c63f130622dfd06f3706c6","title":"Current Case Panel","path":"/lrsiem/7.19.0/current-case-panel","children":[]},{"id":"ci_5b4e14b6b744de699ae4f9ba1cd0b541e215206164ee9ccd7368eef6e1bf1029","title":"Inspector","path":"/lrsiem/7.19.0/inspector","children":[]}]},{"id":"ci_7eb44295b64ede450fb56c48aaa818a42a11ab3f781015ad1c55fcd0f6a08b6d","title":"Tools","path":"/lrsiem/7.19.0/tools","children":[{"id":"ci_9edd50aa0c93b8eb09ca0954277ef21a07df61a059aa01315fd4136a7c2e44c2","title":"About Widgets","path":"/lrsiem/7.19.0/about-widgets","children":[]},{"id":"ci_7e25ad8ec49d65e716c44f8c984c54a5d8bd38c1c551251d7f231c9ce2fbada6","title":"Breadcrumbs","path":"/lrsiem/7.19.0/breadcrumbs","children":[]},{"id":"ci_2544e926c13d67754b0d106c78a5e61bbdc0170c7784eac97f9e0ee889e59dd9","title":"Hotkeys","path":"/lrsiem/7.19.0/hotkeys","children":[]},{"id":"ci_fbb26b3809dd26532bdc0801759fe11a7506f76d74416e8edb2b6d8766b3a29e","title":"Icons","path":"/lrsiem/7.19.0/icons","children":[]},{"id":"ci_96a577f4c80f6c80f4bb3254fe6792b0209a0cf3dc7b93611397bec222689006","title":"Search Tools","path":"/lrsiem/7.19.0/search-tools","children":[]},{"id":"ci_5da2577f6cb08183c7f52243c021f86a4f61c0c52647339854ace8598ba7df2d","title":"Taskbar","path":"/lrsiem/7.19.0/taskbar","children":[]},{"id":"ci_5b4b72530eef24b04a849566acc6abf93efb8ad8342432e4b2e293615acba838","title":"Typeahead Filters","path":"/lrsiem/7.19.0/typeahead-filters","children":[]}]}]},{"id":"ci_69ee23705c2583a220e72037fd41525d2a6a0da4b53a482cf655fe0db932c5f7","title":"User Settings","path":"/lrsiem/7.19.0/user-settings","children":[{"id":"ci_7e00713353252323a56d87b51a04f43c25e4aa8d0b4a8cc22d0ad87e49973ac8","title":"Access Web Console Help","path":"/lrsiem/7.19.0/access-web-console-help","children":[]},{"id":"ci_90b676e5e29f54b7a457546c1275bfa3d66f82f990a04481694481188b4040e4","title":"Change the Default Web Console Search Timeout Period","path":"/lrsiem/7.19.0/change-the-default-web-console-search-timeout-period","children":[]},{"id":"ci_77f5da90dd3ca2d2c804302131bc901f9c37b1fc5ba0a1540c0073cf52ed48f8","title":"Change the Web Console NGINX Configuration to Modify Available Ciphers","path":"/lrsiem/7.19.0/change-the-web-console-nginx-configuration-to-modify-available-ciphers","children":[]},{"id":"ci_fc6969044104d67f457d424321d4f75aa2e8abc744944c75e610917fa44af321","title":"Change Web Console Password","path":"/lrsiem/7.19.0/change-web-console-password","children":[]},{"id":"ci_70d86b78979c9dc4b818b266e203d69bc47a4ccab54a12ca015da050e2458b69","title":"Configure Navigation Warning","path":"/lrsiem/7.19.0/configure-navigation-warning","children":[]},{"id":"ci_1956f2c2885c2ae0f33cebf8c934025e51f703609f6d80a48f5bb0257ed1d285","title":"Configure Search Results","path":"/lrsiem/7.19.0/configure-search-results","children":[]},{"id":"ci_32e62931c3705ca677290937a6bd115e9d4c7f751b8e9888067e069d9f4baaac","title":"Select Query Location","path":"/lrsiem/7.19.0/select-query-location","children":[]},{"id":"ci_360f61090cdcc85020fa1cfb816d38b4a8ab1f550243448d3825e8de7d19f028","title":"Set the Date Time Format","path":"/lrsiem/7.19.0/set-the-date-time-format","children":[]},{"id":"ci_3e4a9d2098a2206a31f2ba56e8951f75c2aafc224facc8d98b30e7efceb4b489","title":"Set Your Drilldown Preference","path":"/lrsiem/7.19.0/set-your-drilldown-preference","children":[]},{"id":"ci_e87a6467d5500770e2a12de79f82df66e468b15ac48d27b4653bc1312fd4dcac","title":"Switch Between Day and Night Modes","path":"/lrsiem/7.19.0/switch-between-day-and-night-modes","children":[]}]},{"id":"ci_928e9b8138cce0ca6af1e56bb5a092c43d93424f3fe703814f707474654ce436","title":"Widgets","path":"/lrsiem/7.19.0/widgets","children":[{"id":"ci_25d240ade468a98f5e4824bc529b1d447017b8fc59cff74d80b04459754a159e","title":"Customize Dashboard Widgets","path":"/lrsiem/7.19.0/customize-dashboard-widgets","children":[{"id":"ci_7d360c14266a2dc7fa7b1a57918af3475d7fc866e9506404f009065dfe6ff110","title":"Add Widgets","path":"/lrsiem/7.19.0/add-widgets","children":[]},{"id":"ci_7487259f74e2de6f1d3903c619f0e25569c68b879085c373d06d20bcce36fefc","title":"Configure Widget Settings","path":"/lrsiem/7.19.0/configure-widget-settings","children":[]},{"id":"ci_2a11c949d0724e0530cc32855f39a393e609acfd1322ae25982bb069afb81098","title":"Copy Widgets","path":"/lrsiem/7.19.0/copy-widgets","children":[]},{"id":"ci_287832fab2266e9d4d91c0023ddb1a373adb19dbfd12ac0075d7724b59229715","title":"Delete Widgets from a Dashboard Layout","path":"/lrsiem/7.19.0/delete-widgets-from-a-dashboard-layout","children":[]},{"id":"ci_39cea97ecb6b5db0fc2e8152f0be12dea810d2d9a039af77ee5f7e2c8ef5a1f9","title":"Move Widgets","path":"/lrsiem/7.19.0/move-widgets","children":[]},{"id":"ci_c1240b8963cd54240734fadf1f1acedf0e8c853563001327ea9a854b44a42405","title":"Rename Widgets","path":"/lrsiem/7.19.0/rename-widgets","children":[]},{"id":"ci_a217bbfa66a35e34221d6a31b44f8bae022a75a29a8e186d1d5fa6827529099a","title":"Resize Widgets","path":"/lrsiem/7.19.0/resize-widgets","children":[]}]},{"id":"ci_2d521f7ca72532d434071ec091f5c773bcee49b1da5ea754d7e622ebb18df4ab","title":"Component Status Widget","path":"/lrsiem/7.19.0/component-status-widget","children":[]},{"id":"ci_26b9e54c7617235009b5dcf9d81b4a84c653c5bcaff5e569aecd1a722f96de21","title":"Current Processing Rate Widgets","path":"/lrsiem/7.19.0/current-processing-rate-widgets","children":[]},{"id":"ci_53b8f8f7244345393ea973130903431e014d5a8f710a7fe8dd17e7213f491bf6","title":"Data Processing Trend Widgets","path":"/lrsiem/7.19.0/data-processing-trend-widgets","children":[]},{"id":"ci_462ef1554aca7538cbfeefb5622a644625cf48e4fa2d03357a0b95f313b11207","title":"Node-Link Graph Widgets","path":"/lrsiem/7.19.0/node-link-graph-widgets","children":[]},{"id":"ci_1490faf3b2112a5389d5b9c5c9c377d8cc729eb5af1d2d21731e46750fe1644b","title":"System Database Usage Widget","path":"/lrsiem/7.19.0/system-database-usage-widget","children":[]},{"id":"ci_efed8706740af78701b940a057dbf4438efb710040fd37cfc8c02bee7f4b1c2b","title":"Threat Activity Map","path":"/lrsiem/7.19.0/threat-activity-map","children":[{"id":"ci_2b265cac788f11c5a5606950198c204a459f265a0c14391b02b424e004e78501","title":"Configure Threat Activity Map Widget Settings","path":"/lrsiem/7.19.0/configure-threat-activity-map-widget-settings","children":[]},{"id":"ci_dc3c335e0233257cb696d2e7d2917572436bd6e63d817b2a48acba9a5ada8e3d","title":"Drill into Threat Activity Map Node Data","path":"/lrsiem/7.19.0/drill-into-threat-activity-map-node-data","children":[]},{"id":"ci_31371e112bd6e8682f3b3b03a09f23b24f7c965aa2bac19475138c5b7988215d","title":"Troubleshoot Threat Activity Map","path":"/lrsiem/7.19.0/troubleshoot-threat-activity-map","children":[]},{"id":"ci_615e2370c8ebdb1bc274462716c73f92b3090b513484fe0406e4964f0192adcf","title":"Zoom In and Out on the Map","path":"/lrsiem/7.19.0/zoom-in-and-out-on-the-map","children":[]}]},{"id":"ci_a59a6d62e677ee384958e2cc35f1e5d10189ca3a926cd902b4b8bba186e54f1f","title":"Timeline Widget","path":"/lrsiem/7.19.0/timeline-widget","children":[]},{"id":"ci_0a54ce7bf56c91fb9d327edf2687069eabab17dcd7e3f37c2ff13df188f006e1","title":"TopX Widgets","path":"/lrsiem/7.19.0/topx-widgets","children":[{"id":"ci_41173eb4e59f09f4f63fbafe7c8c8b6348722c6a9fc3f6d96161ab2bb1941730","title":"Configure TopX Widget Data Settings","path":"/lrsiem/7.19.0/configure-topx-widget-data-settings","children":[]},{"id":"ci_d73d77ccffd59e26778bc9872ccf9cc221e6eee4d797dec750871bc78c975001","title":"Configure TopX Widget Graph & Options Settings","path":"/lrsiem/7.19.0/configure-topx-widget-graph-options-settings","children":[]},{"id":"ci_11b6e4f86e5d30919981aa43ab07122757d9d2586cbda48e37272f05fdb83492","title":"Drill into Chart Metadata from the Dashboards","path":"/lrsiem/7.19.0/drill-into-chart-metadata-from-the-dashboards","children":[]},{"id":"ci_fbd92801d76000f7dd518971247cd915a37719b80daeb7cc13a7ec1eff4d038c","title":"Filter Data by Time Range on the Dashboards and Analyze Pages","path":"/lrsiem/7.19.0/filter-data-by-time-range-on-the-dashboards-and-analyze-pages","children":[]},{"id":"ci_86f0abc3f9a0655b28c0f18e1491c21008d685c1529c8247c1ac702af1ebef33","title":"Resize TopX Data Labels on Bar Charts","path":"/lrsiem/7.19.0/resize-topx-data-labels-on-bar-charts","children":[]}]}]}]},{"id":"ci_0a786285c891c214ac923fb74e2ced1e0937cb356fe6c731f04d434fed7c81ac","title":"LogRhythm Schema Dictionary and Guide","path":"/lrsiem/7.19.0/logrhythm-schema-dictionary-and-guide","children":[{"id":"ci_8e23a7aba122156e2f0b0acd9819ed4c1547035da450a34935b254358a7e4bd0","title":"Application Tab","path":"/lrsiem/7.19.0/application-tab","children":[{"id":"ci_2ce43458398de991a744faf65a4550ad4dc94576808748b347c503f9976a4e01","title":"Action [7.2]","path":"/lrsiem/7.19.0/action-7-2","children":[]},{"id":"ci_4308085aba824f2028f9616b643a447ffb511aecbe7c902de5ad0769da9c86a9","title":"Amount","path":"/lrsiem/7.19.0/amount","children":[]},{"id":"ci_b3715754d16d4e9b52e8f6a51c73d8a874478328d25a4f47f52ddc655098657b","title":"Command","path":"/lrsiem/7.19.0/command","children":[]},{"id":"ci_f641b19e2655d978d44d6640aa3c1ca6dd4cc8ba63bb0df43577e08975cb7eaf","title":"Hash [7.2]","path":"/lrsiem/7.19.0/hash-7-2","children":[]},{"id":"ci_192434bd09add628d334fec414c6025f10f4e8c63efa126ee5e54e9170227eb2","title":"IANA Protocol Name","path":"/lrsiem/7.19.0/iana-protocol-name","children":[]},{"id":"ci_f89a806dd7c923035fa0fa6aee1ac3b528934040e6fbf37e96e0122b0742b1fa","title":"IANA Protocol Number","path":"/lrsiem/7.19.0/iana-protocol-number","children":[]},{"id":"ci_7d22d70639fec49473e433a94d2283a19586d71fd5633b6d601e94b10598e426","title":"Object","path":"/lrsiem/7.19.0/object","children":[]},{"id":"ci_b183c61f459abf4936adc52108e1ff1b52758bc5483ce3e36ad0a39c217639f4","title":"Object Name","path":"/lrsiem/7.19.0/object-name","children":[]},{"id":"ci_8bfc91dbf2d1ec71db217a01e7ae376de10e698b53b4055973eaae19e752476d","title":"Object Type [7.2]","path":"/lrsiem/7.19.0/object-type-7-2","children":[]},{"id":"ci_cabc57f40a1686358729b2b32a86bed85ee4f8d614680c57c7910a2551aeb75c","title":"Parent Process ID [7.2]","path":"/lrsiem/7.19.0/parent-process-id-7-2","children":[]},{"id":"ci_ebb504789cab67b65063a1c1d5c71f2afa89ad2a155b571efcfc6707cc3b2a5f","title":"Parent Process Name [7.2]","path":"/lrsiem/7.19.0/parent-process-name-7-2","children":[]},{"id":"ci_94cd7f3cb7a861902706a528ae944e470c2da7af5e9ea37298223ecefda3ab11","title":"Parent Process Path [7.2]","path":"/lrsiem/7.19.0/parent-process-path-7-2","children":[]},{"id":"ci_1a1e1285663ce4369fe810eaa7ce93750e9be61e68db7b7279c5b4e714de89f2","title":"Policy [7.2]","path":"/lrsiem/7.19.0/policy-7-2","children":[]},{"id":"ci_c9f941c38c44373e02f69ff0595158f022dd74570b176a1b17477bae77805fa8","title":"Process ID","path":"/lrsiem/7.19.0/process-id","children":[]},{"id":"ci_c7b58469c8865866ff6cc8b71629586416b7833cc514d22a9e9aaf55b82a2ad5","title":"Process Name","path":"/lrsiem/7.19.0/process-name","children":[]},{"id":"ci_56396d484aef09f65139bc9b451bfd44d57e41e167cae48a8d50ed81c6d1577b","title":"Quantity","path":"/lrsiem/7.19.0/quantity","children":[]},{"id":"ci_51bb08d06041573a90574b6057bb749ecc2483cdcf72ebeb5f45d929be615482","title":"Rate","path":"/lrsiem/7.19.0/rate","children":[]},{"id":"ci_429b4d0841424ce941b567162ef11c22bd6f0887cba64759c46bba39ca3e1312","title":"Reason [7.2]","path":"/lrsiem/7.19.0/reason-7-2","children":[]},{"id":"ci_cd72c3aa58891fd00b8d2cc1cdd016e2c4b79ee067db5beec9b44a3d0785e9cd","title":"Response Code [7.2]","path":"/lrsiem/7.19.0/response-code-7-2","children":[]},{"id":"ci_b200d778faa96503f1c618e31e04a86a4c7a3e2052d1f4808d564b3aa5a38cac","title":"Result [7.2]","path":"/lrsiem/7.19.0/result-7-2","children":[]},{"id":"ci_cdb0a34083213c20205ac888459c8fc7175d252693d9921ca45a2722c1f18156","title":"Session","path":"/lrsiem/7.19.0/session","children":[]},{"id":"ci_bb5b57d1323d16b60f7cf6ce7e8b54d8aedbc3233137f2d71ecae5ad49ddd594","title":"Session Type [7.2]","path":"/lrsiem/7.19.0/session-type-7-2","children":[]},{"id":"ci_3f4af7db6fbbca075f1f16a82ead5b139f1562def22a5a257cf0d29e4806b43d","title":"Size","path":"/lrsiem/7.19.0/size","children":[]},{"id":"ci_e1f83f6d13d5f38d15535da9138a5f65315f045a971461a11bba48fa09054263","title":"Status [7.2]","path":"/lrsiem/7.19.0/status-7-2","children":[]},{"id":"ci_452c4767af58ca7ac35aeb081c48b46224709a7d1f53db69087f955ac3d61f7a","title":"Subject","path":"/lrsiem/7.19.0/subject","children":[]},{"id":"ci_76bb80c322a553802b08b3bf4760e24c3ce541944aeb6faef1f91ec3405613e4","title":"URL","path":"/lrsiem/7.19.0/url","children":[]},{"id":"ci_b2df2d62d3ba7bc2e447c86ac18cfeae8822fa3ef9c8bee411c7eced14cf2d30","title":"User Agent [7.2]","path":"/lrsiem/7.19.0/user-agent-7-2","children":[]},{"id":"ci_87bb9d65a775ec91156980f72868993b89ca53f3abc42427e807e33cffc789b2","title":"Version","path":"/lrsiem/7.19.0/version","children":[]}]},{"id":"ci_de82ebd93cc6bea5f162b62da60cc2e0da224420d631a244cc6e73222ecfb140","title":"Kbytes/Packets Tab","path":"/lrsiem/7.19.0/kbytes-packets-tab","children":[{"id":"ci_10972cda67b7ef40356375be9a01ca771b8de242e5e98b7417f4ddf4d7841a2e","title":"[prefix] [Bits/Bytes] [blank/In/Out]","path":"/lrsiem/7.19.0/prefix-bits-bytes-blank-in-out","children":[]},{"id":"ci_1d61aa38dcc55643c26027652c28bfe72263c58d3693c5eac04bf069e26b36e4","title":"Packets [Total/In/Out]","path":"/lrsiem/7.19.0/packets-total-in-out","children":[]}]},{"id":"ci_4362013417bb6659ec2fa8df8aa4b63fa956b5340ad502b249498a7bf2936b65","title":"Classification Tab","path":"/lrsiem/7.19.0/classification-tab","children":[{"id":"ci_9d95f623326360ce17666e090c6811072604032a25c18918431a38782407f24d","title":"CVE [7.2]","path":"/lrsiem/7.19.0/cve-7-2","children":[]},{"id":"ci_6492b217f9682b4b23b36dfc652a6ce3e3f72bd740f7abf2698345493a0c8058","title":"Severity","path":"/lrsiem/7.19.0/severity","children":[]},{"id":"ci_e10f051f51a9024411b954a38859fd319ac1fff150c0d988ac5e7e4edd62d9b6","title":"Threat ID [7.2]","path":"/lrsiem/7.19.0/threat-id-7-2","children":[]},{"id":"ci_f8cb8b3316a95cf49053e79c370ecc5b87c5ec8444c4e8e8ae092cd9c4f81ff0","title":"Threat Name [7.2]","path":"/lrsiem/7.19.0/threat-name-7-2","children":[]},{"id":"ci_86ddf6340cdc6bf8989e739a849b627d9fdd6323f61fddc8b2a854003a787e80","title":"Vendor Info [7.2]","path":"/lrsiem/7.19.0/vendor-info-7-2","children":[]},{"id":"ci_36a38d963a19985956f345ff339d962242f0f68e002c5abf3eade842c40ad56e","title":"Vendor Message ID","path":"/lrsiem/7.19.0/vendor-message-id","children":[]}]},{"id":"ci_fad076039c31dde118f3089928f9550df608c95e1ee40e68a34a75fbcf2927c2","title":"Host Tab","path":"/lrsiem/7.19.0/host-tab","children":[{"id":"ci_2728c45c300205743bfaa8d974cb277c28d9f9b83ec514fc69424dbc7b123455","title":"DIP/DestinationIP/Impacted IP","path":"/lrsiem/7.19.0/dip-destinationip-impacted-ip","children":[]},{"id":"ci_9b9f47652f3e7a7caf1ed8f3089a66a65c1e34ed457f15a90a7a3105fbfe7d3d","title":"DIPv4","path":"/lrsiem/7.19.0/dipv4","children":[]},{"id":"ci_88a91746ac91932935a74957fdab66e89cd14d637f9d4484999a7af7eb5361cc","title":"DIPv6","path":"/lrsiem/7.19.0/dipv6","children":[]},{"id":"ci_4e0e43e5f76515f8961d334308034257b5c7322424a067c6c53cfede0d81cfdc","title":"DIPv6E","path":"/lrsiem/7.19.0/dipv6e","children":[]},{"id":"ci_7b8feb2a9d3256b9bfe3172d5e8f921ccc4eb1c9db51ab3eb7d2f6a0716ea2b2","title":"Impacted Hostname","path":"/lrsiem/7.19.0/impacted-hostname","children":[]},{"id":"ci_03a53286f20b9c17c60e8984f21954e080d3b78585d960f103bbbbd6689cce8e","title":"Impacted Hostname or IP","path":"/lrsiem/7.19.0/impacted-hostname-or-ip","children":[]},{"id":"ci_272f93db4312610bc52d6c0b19eca6f26381574728b10adb7aa7bafc28b96a31","title":"Impacted Interface","path":"/lrsiem/7.19.0/impacted-interface","children":[]},{"id":"ci_7490a4dfd12d3ae2d8f5a22def5f024b8a8f0e8ba75b627fc3495738d6e425fe","title":"Impacted MAC Address","path":"/lrsiem/7.19.0/impacted-mac-address","children":[]},{"id":"ci_13eacca6435bfcf90b8fff87a0d0f1c49f01da5dd0d5dc76346a133f489c3622","title":"Impacted NAT IP","path":"/lrsiem/7.19.0/impacted-nat-ip","children":[]},{"id":"ci_6b47e615e20260f4a47fe4bdbe6752b46acd91c0dadd2efdf2f6c1734a8bbf85","title":"IP Address (Origin)","path":"/lrsiem/7.19.0/ip-address-origin","children":[]},{"id":"ci_d1aad5f81d116f79eaf20674aff3e0c9a56821f4d14f49a15b20aadf19ebb460","title":"Origin Hostname","path":"/lrsiem/7.19.0/origin-hostname","children":[]},{"id":"ci_f0fb6cf37fd4cc7a602357ab2ade6627aa5ec0c5f6832f16ba0bb9db22cae810","title":"Origin Hostname or IP","path":"/lrsiem/7.19.0/origin-hostname-or-ip","children":[]},{"id":"ci_333d5b61b441b9099ea2824f27ebe5944c13f60c4de6c52366cc8bdaff6aac34","title":"Origin Interface","path":"/lrsiem/7.19.0/origin-interface","children":[]},{"id":"ci_56b448ed8d20014fd8f6218ab309a09df667bcce46e8d64a919de6be66541fb2","title":"Origin MAC Address","path":"/lrsiem/7.19.0/origin-mac-address","children":[]},{"id":"ci_319dda2339a98b5d4a631b51dcaf8d51cfcbae76d0a9a2a1a0fa8321d16d562f","title":"Origin NAT IP","path":"/lrsiem/7.19.0/origin-nat-ip","children":[]},{"id":"ci_67bea060c1b4cd0490b1188fe9fa2fdbe975ef1d821a05509c84a25262b04f3b","title":"Serial Number [7.2]","path":"/lrsiem/7.19.0/serial-number-7-2","children":[]},{"id":"ci_28694cd6f88491e8987cc7b5cd47654a0b695710400c61cd1c90e7b25e4fa968","title":"SIPv4","path":"/lrsiem/7.19.0/sipv4","children":[]},{"id":"ci_8e86ed618dfea892596b28c006fcf75d63239ed2cc47d4163e46167d3ad7fb70","title":"SIPv6","path":"/lrsiem/7.19.0/sipv6","children":[]},{"id":"ci_eb80d1e9932d0dfd5089508bd035b598144ec7e35da0806734c7a8c7f4412a13","title":"SIPv6E","path":"/lrsiem/7.19.0/sipv6e","children":[]}]},{"id":"ci_dc4680d832c61f3927eec8e1db413d86f34c1e89bf2902b4de23b50492728dc6","title":"Identity Tab","path":"/lrsiem/7.19.0/identity-tab","children":[{"id":"ci_31857fec0c1cdfa86034bc66bb0a401744d924ef22f8a7b8cf88dafab0c5b71a","title":"Account > User (Impacted)","path":"/lrsiem/7.19.0/account-user-impacted","children":[]},{"id":"ci_ff747191b576593a3777b61d6d3087bb5378961d0891fb75fa958c3744d9704f","title":"Group","path":"/lrsiem/7.19.0/group","children":[]},{"id":"ci_ac849aac25aafeb09f11a090a337363581c66a68ddaaf979d74c62665b2a9a4a","title":"Login > User (Origin)","path":"/lrsiem/7.19.0/login-user-origin","children":[]},{"id":"ci_faa6e30a23a926b782d10f182496c057a4a318d934f04e626f982a4dafaeaf5b","title":"Recipient","path":"/lrsiem/7.19.0/recipient","children":[]},{"id":"ci_8ce206fbc3e395fe9b849ff4d4ad8d240baf617ce79e3235aa480375df46bf56","title":"Sender","path":"/lrsiem/7.19.0/sender","children":[]}]},{"id":"ci_7bcf901d80818b34fecd48a347a9a0301975b4a9943f411dbe3e9089cfdf8310","title":"Location Tab","path":"/lrsiem/7.19.0/location-tab","children":[]},{"id":"ci_ad2ea646f625d507b0f37d0b0c7e1a58ed110c141e8ad48d310c1356e37cd7aa","title":"Log Tab","path":"/lrsiem/7.19.0/log-tab","children":[]},{"id":"ci_f1157e1cb2b3eb13274f8cf2758050c937a05c80b62f84fbeaebc94e6b665125","title":"Network Tab","path":"/lrsiem/7.19.0/network-tab","children":[{"id":"ci_34281cb445b0b25e57028ad93ef2cfbbb69ea115653f3331f511e5863843ff12","title":"Domain (Origin) [7.4]","path":"/lrsiem/7.19.0/domain-origin-7-4","children":[]},{"id":"ci_8a829ebb09df31908ecbf111fdfdd018a604e93f56f6abd1722e5a63d45d977b","title":"Domain [7.2] (Domain (Impacted))","path":"/lrsiem/7.19.0/domain-7-2-domain-impacted","children":[]},{"id":"ci_f73c4e7220d3b804bd0aedebca789daad96037c2d2c634dfbcf7e8773823e82e","title":"Impacted NAT Port","path":"/lrsiem/7.19.0/impacted-nat-port","children":[]},{"id":"ci_581d641c274e552ea0edd05eff5f25e9b0244d3575b9c2edfc85d2672ccab472","title":"Impacted Port","path":"/lrsiem/7.19.0/impacted-port","children":[]},{"id":"ci_883c73d154ec04488931ab949864a4d62f497993133570470f247d04d8b5f997","title":"Origin NAT Port","path":"/lrsiem/7.19.0/origin-nat-port","children":[]},{"id":"ci_50f956e2d25b4570307fa9cb304ea0db50842d793768e8a03704dff8ed1fadcc","title":"Origin Port","path":"/lrsiem/7.19.0/origin-port","children":[]}]},{"id":"ci_349d666d80525f92da46fe1c4a106b8f02e69031aa0baf5d47b9f351f511067a","title":"Other MPE Fields","path":"/lrsiem/7.19.0/other-mpe-fields","children":[{"id":"ci_09abcfe030724cc57432f8b1c7c90fe9b212bf83dc49d1ec681fe0136c86b47c","title":"[Tag1-Tag5]","path":"/lrsiem/7.19.0/tag1-tag5","children":[]},{"id":"ci_e4b447b4d51561e6570233e5ff6699240c50a3dde3a30774ff59364b0a5acd8b","title":"Items In","path":"/lrsiem/7.19.0/items-in","children":[]},{"id":"ci_303dde08e46b2721722631aac57cd55574a3392059150f9d8d839d5d931d2504","title":"Items Out","path":"/lrsiem/7.19.0/items-out","children":[]}]},{"id":"ci_446fdb9935ec970bf4d91fb16b0f881a1ae49fdb85cfc797e7846abcbc46b39d","title":"Derived Data","path":"/lrsiem/7.19.0/derived-data","children":[{"id":"ci_042db03bb98a38536cc97df0e910fb74620bef9e42045cc02542878a90744ab9","title":"Identity-Derived Data","path":"/lrsiem/7.19.0/identity-derived-data","children":[]},{"id":"ci_35d47be29448aaa37a0d589645936f6da914814b846c3fd68e2ea464e2ce2078","title":"Log-Derived Data","path":"/lrsiem/7.19.0/log-derived-data","children":[]}]}]},{"id":"ci_205dca9371cbe3cf2367f8987734cf2705e09ab6c0b135f2c8f9dd030baf82e2","title":"Other LogRhythm Applications","path":"/lrsiem/7.19.0/other-logrhythm-applications","children":[{"id":"ci_5f6cfc8e8d8ec87327bc1ec5f4f85a8c44ca9ca8f59bad09b5b9e3e32185813b","title":"LogRhythm Intelligence","path":"/lrsiem/7.19.0/logrhythm-intelligence","children":[{"id":"ci_8f45cb71bef25c145c766548afaa28e987e78b9cf6a466094b32d9af60e71018","title":"LogRhythm Intelligence Threat Summary","path":"/lrsiem/7.19.0/logrhythm-intelligence-threat-summary","children":[]},{"id":"ci_41d42777e1fc67f2273b9a082a33623b003472d60a395d17f59101b98fbd74a6","title":"LogRhythm Intelligence Cloud Data Security","path":"/lrsiem/7.19.0/logrhythm-intelligence-cloud-data-security","children":[]}]},{"id":"ci_743171582f91a376a985affb8a5c8ad49db5636e97af7d0ae470b68c8ac2df97","title":"Threat Intelligence Service","path":"/lrsiem/7.19.0/threat-intelligence-service","children":[{"id":"ci_7c060b04944857e7f6ad7118803864d1f9d73cabe3efd2d764c10579aa464ea9","title":"Install and Deploy the Threat Intelligence Service","path":"/lrsiem/7.19.0/install-and-deploy-the-threat-intelligence-service","children":[{"id":"ci_83cb9adb15f47b8f46f90731acfddf3e6663f055156dbe5a71aa1962626a6976","title":"Run the Threat Intelligence Service Installer","path":"/lrsiem/7.19.0/run-the-threat-intelligence-service-installer","children":[]},{"id":"ci_a221180fba69297388e8bb2a91a84d28ab4415ef6d2fe74270e36232616aefb9","title":"Modify, Repair, or Remove the Threat Intelligence Service","path":"/lrsiem/7.19.0/modify-repair-or-remove-the-threat-intelligence-service","children":[]},{"id":"ci_7b4c32745232b45a5a57f1de024eaaf74ec31b9f37e3b8caa63ef2cec88d18ed","title":"Enable and Import the Threat Intelligence Service Modules","path":"/lrsiem/7.19.0/enable-and-import-the-threat-intelligence-service-modules","children":[]},{"id":"ci_0c118a7087d1f71470c56b8f644e2cd070b8b21d1ae138bcafc3cdfb9038f976","title":"Associate Vendor Lists with LogRhythm Lists","path":"/lrsiem/7.19.0/associate-vendor-lists-with-logrhythm-lists","children":[]},{"id":"ci_0b15d5896078b8e3635a0442def1c0dfd5faed8e5dc6fec588cb8036c8e41c67","title":"Enable Threat List AIE Rules","path":"/lrsiem/7.19.0/enable-threat-list-aie-rules","children":[]},{"id":"ci_6b0b925c462cf3c475630578e56013031da818101371809605280708ea6754bc","title":"Start the LogRhythm Threat Intelligence Service","path":"/lrsiem/7.19.0/start-the-logrhythm-threat-intelligence-service","children":[]},{"id":"ci_571a8757244fb01ec5081831433c21d62949469a79f6c1ef2714855c6b2975e2","title":"Vendor Lists","path":"/lrsiem/7.19.0/vendor-lists","children":[{"id":"ci_b4593c88560bb486dcd29cfa5bb19ccfe6b3a73c017b4132c6de680f330ef66d","title":"BrightCloud","path":"/lrsiem/7.19.0/brightcloud","children":[]},{"id":"ci_1b09d2df59ad615fac8009751f26e3c5d3017f42c355f88e7d5430487f460aed","title":"CrowdStrike","path":"/lrsiem/7.19.0/crowdstrike","children":[]},{"id":"ci_4ba8cf960519f8b4dedd480f31bc90e02f9b98820d8ebb6124f41c9c9650dbc7","title":"Cisco AMP Threat Grid","path":"/lrsiem/7.19.0/cisco-amp-threat-grid","children":[]},{"id":"ci_56ebe19e80f1c7695fac7529c434c92d4fab4aab2e72385960637e342c130986","title":"Symantec","path":"/lrsiem/7.19.0/symantec","children":[]},{"id":"ci_d019632acbf6c5744689b6da9d30733f8f6fdafb7a97553cdcbec91faf2db2d6","title":"Open Source","path":"/lrsiem/7.19.0/open-source","children":[]},{"id":"ci_b51f2439e1a42f86801776d970c35a3bda482c62e1d9eec346aebc4496472862","title":"Custom Providers","path":"/lrsiem/7.19.0/custom-providers","children":[]}]}]},{"id":"ci_d578b2634866c484cf55c10c8a7cedfdcd5c7e4216219f93e963a4fb1d412579","title":"Threat Intelligence Service User Guide","path":"/lrsiem/7.19.0/threat-intelligence-service-user-guide","children":[{"id":"ci_df7da713b12ee37bcc0594360e58e2daf8b934bcf789f49712c68cc961ccad95","title":"Launch the Service Manager","path":"/lrsiem/7.19.0/launch-the-service-manager","children":[]},{"id":"ci_3a7c68066043676ad29ed37cbf3402199649f5970eb3ce0ee3b86ccbd73f364b","title":"Configure the Connection to LogRhythm","path":"/lrsiem/7.19.0/configure-the-connection-to-logrhythm","children":[]},{"id":"ci_57b91a3a3652db8e96ee2e2845452448541dafebf8a6abe930d57402131b6c5d","title":"Configure Proxy Settings","path":"/lrsiem/7.19.0/configure-proxy-settings","children":[]},{"id":"ci_41cb20a5423d5874603a4236ee991a1efe6c17493a0b5f91071f21f6c45d8f90","title":"Configure Vendor Threat Feeds","path":"/lrsiem/7.19.0/configure-vendor-threat-feeds","children":[]},{"id":"ci_cf55510776a6bc988f187e23bbe40c88e55999fc44d2edcd877ab3e79e46ca53","title":"Add a Custom STIX/TAXII Provider","path":"/lrsiem/7.19.0/add-a-custom-stix-taxii-provider","children":[{"id":"ci_58ff406e2225a4626020cf8d3597f15b273100190c7b22a01fd0e45146d86e59","title":"Add a STIX Feed in TIS","path":"/lrsiem/7.19.0/add-a-stix-feed-in-tis","children":[]},{"id":"ci_d4d3e61983bcc638b89a522ea5c95090f5c19c4a0384fa3108f7d4cf779bbb0b","title":"Configure CustomObjectType in STIX/TAXII Feeds in TIS","path":"/lrsiem/7.19.0/configure-customobjecttype-in-stix-taxii-feeds-in-tis","children":[]}]},{"id":"ci_788f239a499e52356b4832c75a5794b451f113f44df862684760954b768ee8e1","title":"Start and Stop the Service","path":"/lrsiem/7.19.0/start-and-stop-the-service","children":[]},{"id":"ci_bf05feb7791c0708c5bd6c2f57bd354caa3a31782ec599697e560effcf81c684","title":"Configure the Threat Intelligence Service Whitelist","path":"/lrsiem/7.19.0/configure-the-threat-intelligence-service-whitelist","children":[]},{"id":"ci_9e5342e5ca7d8b8523b0cbf17f6016fa49e77be104807f1aa4991d66e416d93c","title":"URL Normalization","path":"/lrsiem/7.19.0/url-normalization","children":[]},{"id":"ci_f3667f625efe0071b5ba9285d6ce66581bf3a57308bfc2d05080383414ffe285","title":"Request Response Logging","path":"/lrsiem/7.19.0/request-response-logging","children":[]},{"id":"ci_d46c0e259d1a826e0ff18fc6af03558addd098cf1216bfb6848c8ac4a91a26c6","title":"View Log Files","path":"/lrsiem/7.19.0/view-log-files","children":[]},{"id":"ci_ce2be0415579c975fc8c9126ade548a4ad3f83c8a3060366dfc789ae2625da01","title":"Troubleshoot the Threat Intelligence Service","path":"/lrsiem/7.19.0/troubleshoot-the-threat-intelligence-service","children":[{"id":"ci_04cf1d7d6fdbed1da3a88642b5bb8b14af97d3582b567d5f7ada326c0522e149","title":"Firewall Blocking Open Source URLs in TIS","path":"/lrsiem/7.19.0/firewall-blocking-open-source-urls-in-tis","children":[]},{"id":"ci_afa78268391c9a0455c9852198455dde1651fdde7b9d5d373770164c3fd8364f","title":"Log Files in TIS","path":"/lrsiem/7.19.0/log-files-in-tis","children":[]},{"id":"ci_22e11177a7e7ba605523d0e5cf4f061a5124ee25774a51fcbd68f017c5a7d26c","title":"Resource Utilization in TIS","path":"/lrsiem/7.19.0/resource-utilization-in-tis","children":[]},{"id":"ci_a6f0628d8ad4ab86741ee033b8314b05458a54a3f940f2432921f2c2d6d492f1","title":"Threat Intelligence Service Will Not Start","path":"/lrsiem/7.19.0/threat-intelligence-service-will-not-start","children":[]}]}]}]},{"id":"ci_dd89a6d8c1f1d7388cfeb50342072c57562088f8e799c65c6386d0bfa0ee6266","title":"LogRhythm Diagnostics Tool","path":"/lrsiem/7.19.0/logrhythm-diagnostics-tool","children":[{"id":"ci_586fb1be39916110e8e1947440fb527495490ffa239370dce217f8cc2472e195","title":"Install the Diagnostics Agent and Diagnostics Tool","path":"/lrsiem/7.19.0/install-the-diagnostics-agent-and-diagnostics-tool","children":[]},{"id":"ci_5e869d2b35b5ecc713aba7280ac587a92bf7090f6f9dc9cdbf44a3408a1e76b9","title":"Configure Collection on the Diagnostics Tool","path":"/lrsiem/7.19.0/configure-collection-on-the-diagnostics-tool","children":[]},{"id":"ci_012baced829130c401eebb5f156ac56181d0302dd50c6c9f3c4fafbd9e223715","title":"Tabs in the Diagnostic Tool","path":"/lrsiem/7.19.0/tabs-in-the-diagnostic-tool","children":[]},{"id":"ci_ab9c5be2ea51cb6245db78e09ce8cdc229bbddfc8d4c02262ce751c09cd5773f","title":"Log Files and Data Collected by the Diagnostic Tool","path":"/lrsiem/7.19.0/log-files-and-data-collected-by-the-diagnostic-tool","children":[]},{"id":"ci_ef72e2c2fa8a2263dcc4ad560d3604b0e7732385d9756ff9f8d8732190a33190","title":"Detailed .zip File Contents From the Diagnostics Tool","path":"/lrsiem/7.19.0/detailed-zip-file-contents-from-the-diagnostics-tool","children":[]}]},{"id":"ci_2f9ea5f72a95ec1f86f86d5c47192997befb76be4cf29c521aeebf74eb3a67b6","title":"LogRhythm Echo","path":"/lrsiem/7.19.0/logrhythm-echo","children":[{"id":"ci_26de776b8567453cef56674e4973d2bd17dbfb2d683c1c5a16b9585c2ced5c9a","title":"Install or Upgrade LogRhythm Echo","path":"/lrsiem/7.19.0/install-or-upgrade-logrhythm-echo","children":[]},{"id":"ci_3a23eb8a604de46ba3befdae29449e57463659e8825d66cd5a51c2922e6e0027","title":"Configure LogRhythm Echo","path":"/lrsiem/7.19.0/configure-logrhythm-echo","children":[]},{"id":"ci_06a0f1de4f660f4e947e9e44edceac17b4fb959549d7739c0d876db38d849401","title":"Manage LogRhythm Echo Use Cases","path":"/lrsiem/7.19.0/manage-logrhythm-echo-use-cases","children":[]},{"id":"ci_a7ed16711861e179df58273cde666e1fb8489c8732fb4fdb9991e90fce84c1dd","title":"Run LogRhythm Echo Use Cases","path":"/lrsiem/7.19.0/run-logrhythm-echo-use-cases","children":[]},{"id":"ci_4db710eee77d9f9362f0300a9dcaf3a52996ce701db6f0633d891551950efe3d","title":"Schedule LogRhythm Echo Use Cases","path":"/lrsiem/7.19.0/schedule-logrhythm-echo-use-cases","children":[]},{"id":"ci_b29204f56e06adb562d5703da9e15158ebf2b71804411268f712eb27f79f98cc","title":"LogRhythm Echo API","path":"/lrsiem/7.19.0/logrhythm-echo-api","children":[]},{"id":"ci_eeca9834055b970135dc4d6a0e9cdd3aa96b986951fbc67d3669c0e4c95b938d","title":"LogRhythm Echo Troubleshooting","path":"/lrsiem/7.19.0/logrhythm-echo-troubleshooting","children":[]},{"id":"ci_30418d4d8c8f326ca7a3def74a535bd21f0ac143887f608d67192c2bb59e9f54","title":"LogRhythm Echo Use Case DB","path":"/lrsiem/7.19.0/logrhythm-echo-use-case-db","children":[]},{"id":"ci_d05354dd41e082fc7ecf13059b6b28935ef486ed88e08146c23a5e9b57a20c35","title":"LogRhythm Echo Use Cases and Their AIE Rules, Lists, and SmartResponses","path":"/lrsiem/7.19.0/logrhythm-echo-use-cases-and-their-aie-rules-lists-and-smartresponses","children":[]}]},{"id":"ci_0aa59745803238a460d9e05915fd223f83bcaae093e074934f07391199fe3f72","title":"TrueIdentity Sync Client User Guide","path":"/lrsiem/7.19.0/trueidentity-sync-client-user-guide","children":[{"id":"ci_8de99db9937fbe6c3b58e2ea5a9c6babfd368fcb79795833ec6021e08d812352","title":"TrueIdentity Sync Client Release Notes","path":"/lrsiem/7.19.0/trueidentity-sync-client-release-notes","children":[]},{"id":"ci_ba31f6deb3da1b7b0d970c5449b5847f558a858a22d970168d72e0722daad3fd","title":"Install the TrueIdentity Sync Client","path":"/lrsiem/7.19.0/install-the-trueidentity-sync-client","children":[]},{"id":"ci_b04cc65785ffe0a8f1312bfac026a3136733217622031812975811dc09436076","title":"Create Custom Certificates","path":"/lrsiem/7.19.0/create-custom-certificates","children":[]},{"id":"ci_7dff5ebfd6b542c01d4ca2bcaae0a99e96629263c99a8ea796ef21a66a9a24a9","title":"Generate LR API Token","path":"/lrsiem/7.19.0/generate-lr-api-token","children":[]},{"id":"ci_0f806b0bd54ef6175e8119fa59a3aa5d886b25e6021f8059428f420bf68a279f","title":"Launch the TrueIdentity Sync Client","path":"/lrsiem/7.19.0/launch-the-trueidentity-sync-client","children":[]},{"id":"ci_8af5776615f2575703f976a165e8ea7c131a459e3ece5b544544939305d157c6","title":"Add a TrueIdentity Sync Job","path":"/lrsiem/7.19.0/add-a-trueidentity-sync-job","children":[]},{"id":"ci_6b07ded9c5121b12665936fa3c7040840228a8695bc593085241ff432f2e5107","title":"View Synchronized TrueIdentities","path":"/lrsiem/7.19.0/view-synchronized-trueidentities","children":[]},{"id":"ci_1f7222247f732d3c144afe6ce30169ceaa2dbcfab9c4c00784ef05b6824dfef1","title":"Troubleshoot the TrueIdentity Sync Client","path":"/lrsiem/7.19.0/troubleshoot-the-trueidentity-sync-client","children":[]}]},{"id":"ci_74ab82eaed9dab3fb7de0582ac895f124664aea9b37c2cc19597bc8536736cd6","title":"Using Kibana with LogRhythm SIEM","path":"/lrsiem/7.19.0/using-kibana-with-logrhythm-siem","children":[]},{"id":"ci_537e20ed25d5c661499bcdeebfa26e41553865115629220b9bcba9784c331d69","title":"DX Upgrade Checker","path":"/lrsiem/7.19.0/dx-upgrade-checker","children":[]}]},{"id":"ci_d9df7aec0f82e4c4bc4ffcc5a387d80e04f7e926dad3553c84f6f861504bd433","title":"Understand the LogRhythm Architecture","path":"/lrsiem/7.19.0/understand-the-logrhythm-architecture","children":[{"id":"ci_0167640936d724e637f9102abacaa8c89908ca15df874a65d3b856d1fb7e6fc3","title":"Licensing","path":"/lrsiem/7.19.0/licensing","children":[]},{"id":"ci_32f3820020743c123e2973152d13e08e19991e98bb23d3b7bec6e5cd9a0d0e16","title":"Log Processing","path":"/lrsiem/7.19.0/log-processing","children":[{"id":"ci_b7ad712a0f20ee101e104ff6ed1a81637c4611e50d313913d4b40ca365f44962","title":"Audit Classifications","path":"/lrsiem/7.19.0/audit-classifications","children":[]},{"id":"ci_11d8333091d5ba634bc97e9a5e783bebd95ba33e9ee2f80b3bac5f7c9d3bc3f7","title":"Configuration and Log Processing","path":"/lrsiem/7.19.0/configuration-and-log-processing","children":[]},{"id":"ci_1bd400256ad400735a9232a66a654d4e97cace5b6c9287b3572613b985affb14","title":"Operations Classifications","path":"/lrsiem/7.19.0/operations-classifications","children":[]},{"id":"ci_433ed9eb6df21fb6aeab66b4cea692aff3e60b3ca48f023ada758dd55c471c23","title":"Security Classifications","path":"/lrsiem/7.19.0/security-classifications","children":[]}]},{"id":"ci_ceb0ac892924a55aac467379bee6401fc794d6003c0240fe3204d3d6da57c1fe","title":"LogRhythm SIEM Databases","path":"/lrsiem/7.19.0/logrhythm-siem-databases","children":[]},{"id":"ci_ca009e57af0346f45776b6d2083a05b4d83da9f5128fc0b8bbf03f984a9899ab","title":"Logs, Events, and Alarms","path":"/lrsiem/7.19.0/logs-events-and-alarms","children":[]},{"id":"ci_c08cb1784b351bdeec063f5ebab02cb8c70012422ec0443339cddd67af3dd7f1","title":"Networking and Communication","path":"/lrsiem/7.19.0/networking-and-communication","children":[]},{"id":"ci_4cae6c7e9b28a0cbd4f412b16c8d8a7e4a0c2e0d4f175994f6e5413408beed1a","title":"Component Reference","path":"/lrsiem/7.19.0/component-reference","children":[]}]},{"id":"ci_7e976e9c49755056f138749c6c72c365d23d311cdb34bdabb85a8444358e289f","title":"Find More Information","path":"/lrsiem/7.19.0/find-more-information","children":[{"id":"ci_0d3cc008a14ff769ab82d21a3a86023af3a5afb76aa1a61732b22e76caf93f4f","title":"Customer Support Guide","path":"/lrsiem/7.19.0/customer-support-guide","children":[]},{"id":"ci_4f4c2a3dd4121dece7e69ba0d155212b269f038784c8396cae2145297840534f","title":"End of Life Policies for Software and Hardware","path":"/lrsiem/7.19.0/end-of-life-policies-for-software-and-hardware","children":[]},{"id":"ci_ce132615c3b94e0ebd545edb172c01e4b846d47250d1b927c474cfc922de934c","title":"Glossary of LogRhythm Products and Components","path":"/lrsiem/7.19.0/glossary-of-logrhythm-products-and-components","children":[]},{"id":"ci_58208498c01d1ba30bf00538ce0c219159f21856c366d95e739534096b59cabb","title":"Open Source License Acknowledgements","path":"/lrsiem/7.19.0/open-source-license-acknowledgements","children":[]},{"id":"ci_1a504ca321d64e7270d75f2e05b8874a78d4bc555647ed2b5a9d94747c85dd76","title":"Upgrade FAQ and Determining the Correct Upgrade Path","path":"/lrsiem/7.19.0/upgrade-faq-and-determining-the-correct-upgrade-path","children":[]}]},{"id":"ci_889aeb3d110c6620401c61991187d48c7f037037ea1d4cfc866dc4f46419584b","title":"Download PDFs","path":"/lrsiem/7.19.0/download-pdfs","children":[]}]