[{"id":"ci_570744cfd2b4d3819aca6daddcbd47950820f6d415e28c6dc569f34ce2b073f2","title":"LogRhythm Release Notes","path":"/lrsiem/7.20.0/logrhythm-release-notes","children":[{"id":"ci_1fc82633eae466bca4aa8fe41b9c6e9fb807586ceddc36704e0c1c90e8390add","title":"7.20.0.71 Release Notes - 23 April 2025","path":"/lrsiem/7.20.0/7-20-0-71-release-notes-23-april-2025","children":[]},{"id":"ci_1877552d48f1eb5a61ddd70a720100a3d9e97138d3f60499284a7f034880558c","title":"7.20.0 GA Release Notes - 1 April 2025","path":"/lrsiem/7.20.0/7-20-0-ga-release-notes-1-april-2025","children":[]},{"id":"ci_b0e161eb6b824895b88586d202cc2572fa69889eb7076710cbb5cce9ca97162f","title":"7.19.0.54 Release Notes - 3 February 2025","path":"/lrsiem/7.20.0/7-19-0-54-release-notes-3-february-2025","children":[]},{"id":"ci_c474d43bf03d3746bc4c006ed21bbbdd3a028c832671e6fd7b467a0289a85f3c","title":"7.19.0 GA Release Notes - 7 January 2025","path":"/lrsiem/7.20.0/7-19-0-ga-release-notes-7-january-2025","children":[]},{"id":"ci_9056d68cb6eab85adb1c3962b2c2437b2558d4265de0239106c5e986f64e329c","title":"7.18.0.48 Release Notes - 7 November 2024","path":"/lrsiem/7.20.0/7-18-0-48-release-notes-7-november-2024","children":[]},{"id":"ci_5f81d0f74305e52e9da6543abcc3fb65bace05389604a6c6bcbc36afecf2ea59","title":"7.18.0.46 Release Notes - 31 October 2024","path":"/lrsiem/7.20.0/7-18-0-46-release-notes-31-october-2024","children":[]},{"id":"ci_dbbb81e4865e806a02716091b9e9edbda304519b7f195380d3bb749be40a4d61","title":"7.18.0 GA Release Notes - 1 October 2024","path":"/lrsiem/7.20.0/7-18-0-ga-release-notes-1-october-2024","children":[]},{"id":"ci_e782108a3943e2d348eb9e59b8ccaa85c9b13be7e714b2aba0eeb5a44b8b062d","title":"7.17.0.55 Release Notes - 12 August 2024","path":"/lrsiem/7.20.0/7-17-0-55-release-notes-12-august-2024","children":[]},{"id":"ci_f07c6c72b32aff632081c0ba92edededf8fac55c033ddfda3f2a70d260d80e1f","title":"7.17.0 GA Release Notes - 1 July 2024","path":"/lrsiem/7.20.0/7-17-0-ga-release-notes-1-july-2024","children":[]},{"id":"ci_1bfce488ef6995d6eb0861a7f520f02e19af5e7882346ade625e365a892cb0e7","title":"7.16.0.45 Release Notes - 24 April 2024","path":"/lrsiem/7.20.0/7-16-0-45-release-notes-24-april-2024","children":[]},{"id":"ci_76a7abbfac3c215e6d3a41ca9308abb94c2ae9e76b4baa98f359b51868ccb75d","title":"7.16.0 GA Release Notes - 1 April 2024","path":"/lrsiem/7.20.0/7-16-0-ga-release-notes-1-april-2024","children":[]},{"id":"ci_0c7aaf5278c2852115997f3154f551ca2adc24cd3cb1d22af813238426214c2a","title":"7.15.0.64 Release Notes - 5 February 2024","path":"/lrsiem/7.20.0/7-15-0-64-release-notes-5-february-2024","children":[]},{"id":"ci_dadfc649261f1b4246dd642bcc8fa4cad2d59c7779983f40bfd30f6a1af0c78b","title":"7.15.0 GA Release Notes - 4 January 2024","path":"/lrsiem/7.20.0/7-15-0-ga-release-notes-4-january-2024","children":[]},{"id":"ci_7ad9e0de9b76143b502b52c5806ae24a5270ef920a00aafec876f4c65a1dd76d","title":"7.14.0.107 Release Notes - 18 October 2023","path":"/lrsiem/7.20.0/7-14-0-107-release-notes-18-october-2023","children":[]},{"id":"ci_0cd44796bcef5c10f1d1992487269456af5d5b1f95d27149b1cbe629342bfe75","title":"7.14.1 Release Notes - 13 November 2023","path":"/lrsiem/7.20.0/7-14-1-release-notes-13-november-2023","children":[]},{"id":"ci_8271bd11bfc59bfe707d304cee7e96b9c210dfb61af3d8847a89fcdbea02c119","title":"7.14.0 GA Release Notes - 2 October 2023","path":"/lrsiem/7.20.0/7-14-0-ga-release-notes-2-october-2023","children":[]},{"id":"ci_3c6a241f4a5ab32970b00ffbf67f01a49f35f36a64f4d96bb2318978a6d47904","title":"7.13.0.78 Release Notes - 2 August 2023","path":"/lrsiem/7.20.0/7-13-0-78-release-notes-2-august-2023","children":[]},{"id":"ci_f4f2740beb49ddf75b57fdba144ff849c5ef4630bd922a2ca88c3e19b3ea3012","title":"7.13.0.76 Release Notes - 17 July 2023","path":"/lrsiem/7.20.0/7-13-0-76-release-notes-17-july-2023","children":[]},{"id":"ci_8614923e353a1bde69df1a06d16985f126e24f8ceb17dab479fe6010fe989aeb","title":"7.13.0 GA Release Notes - 29 June 2023","path":"/lrsiem/7.20.0/7-13-0-ga-release-notes-29-june-2023","children":[]}]},{"id":"ci_c4f1924e421e295e0343727cf5ced855a3b84d69742c01d2d7160c5ff1592ae9","title":"Get Started with LogRhythm SIEM","path":"/lrsiem/7.20.0/get-started-with-logrhythm-siem","children":[{"id":"ci_73e7bd11f29b163d8718e879af34be5ae7561a1923aa96544550b984b1781848","title":"Log in to the Client Console","path":"/lrsiem/7.20.0/log-in-to-the-client-console","children":[]},{"id":"ci_d0ff37435202ce69015359244d3c97fa4474753c4bc2c0aeb5d66e974b75348e","title":"Complete the New Deployment Wizard","path":"/lrsiem/7.20.0/complete-the-new-deployment-wizard","children":[]},{"id":"ci_8df6552130153c9a78f5d1a3e7b0bd4c73fee0ef39f40b90b3cd9ea20b1773ce","title":"Assign LogRhythm Licenses","path":"/lrsiem/7.20.0/assign-logrhythm-licenses","children":[]},{"id":"ci_19f4580accf6dc144b5253f70d86ed6f02dafaaec378b99817b08e9f727fab92","title":"Log in to the Web Console","path":"/lrsiem/7.20.0/log-in-to-the-web-console","children":[]},{"id":"ci_ff6b212f05db7568372cc040362653de102720ef5b58d7e1e3249e6615db3f04","title":"Verify the Web Console Connection Status","path":"/lrsiem/7.20.0/verify-the-web-console-connection-status","children":[]},{"id":"ci_5216ac0543e0cb2a289e7b6f646ea963395c57314ee5a28a387eb4ee8a3dc6f4","title":"Configure NetMon to Integrate with the Web Console","path":"/lrsiem/7.20.0/configure-netmon-to-integrate-with-the-web-console","children":[]}]},{"id":"ci_30d3a9ab99ab587068be27a64d90ecb67514383b434c35e340c7931c8b5c0a40","title":"Client Console Administrator Guide","path":"/lrsiem/7.20.0/client-console-administrator-guide","children":[{"id":"ci_a030f285f3eb0dd09d4946edbae0a189ecfb5fdd8b919c2c66e7f8e690ff38f0","title":"Advanced Intelligence Engine","path":"/lrsiem/7.20.0/advanced-intelligence-engine","children":[{"id":"ci_6f46b8e0a4a02fcd082bd2097a1a6e0c761e5c57e64c47fd4978034bb2cf7771","title":"Add AI Engine Servers","path":"/lrsiem/7.20.0/add-ai-engine-servers","children":[]},{"id":"ci_b89701f3f6f31f81bc3a1d2613ee408720d8a2749f2345e3566bd004a6566e40","title":"Apply Recommended Values to an AI Engine Server","path":"/lrsiem/7.20.0/apply-recommended-values-to-an-ai-engine-server","children":[]},{"id":"ci_60297bcad07fb4a95ec18490bfdc0b8e811bc44bff0d39da07e1226ced4db1b6","title":"Configure the Advanced Intelligence Engine","path":"/lrsiem/7.20.0/configure-the-advanced-intelligence-engine","children":[]},{"id":"ci_072b68a53c6a9b76d3c91705b67cd3a2b06533acf9bc2d79132e5d3263742227","title":"Create New AI Engine Rules","path":"/lrsiem/7.20.0/create-new-ai-engine-rules","children":[]},{"id":"ci_95c5e4ddd1ba5c467e336bdb596e824b68df8e91f70279b28925940f3edfb198","title":"Define AI Engine Linked Data Block Relationships","path":"/lrsiem/7.20.0/define-ai-engine-linked-data-block-relationships","children":[]},{"id":"ci_deb99a952be4dfd8aabf9bd5edda6f7d7f915e70bb085042ec6401c11e467554","title":"Define AI Engine Rule Block Relationships","path":"/lrsiem/7.20.0/define-ai-engine-rule-block-relationships","children":[]},{"id":"ci_9fb70affe312c296a4df47fcc736f64cab4f26c6f3265194f99ab0f3d7787d5f","title":"Drill Down on AI Engine Results","path":"/lrsiem/7.20.0/drill-down-on-ai-engine-results","children":[]},{"id":"ci_0e7830cd8da13b61cf089de641394b163a9d20c52d583efb33b6adf24ab329c5","title":"Import or Export AI Engine Rules from the Grid","path":"/lrsiem/7.20.0/import-or-export-ai-engine-rules-from-the-grid","children":[]},{"id":"ci_5bd62a9fc4eeef2d2eddd7d6d3385c51321637ecc6e2bff7b058221575e55bd2","title":"Modify AI Engine Rules","path":"/lrsiem/7.20.0/modify-ai-engine-rules","children":[]},{"id":"ci_f68e63b66dff990e1cfc23546ee916bb60bf485d934463213709a3cf06e2574d","title":"Restart AI Engine Servers","path":"/lrsiem/7.20.0/restart-ai-engine-servers","children":[]},{"id":"ci_40afe7c73854ed2cc9963e0a6d9735a3f6c67ed7cf01e4ade795856cd1aeff8b","title":"Revert an AI Engine Server to a Previous Configuration","path":"/lrsiem/7.20.0/revert-an-ai-engine-server-to-a-previous-configuration","children":[]},{"id":"ci_be27ffae54cf7776734ed3f445113c3e4187d81b87d216d4d93b32055cde6349","title":"Update the IP Address of an AI Engine","path":"/lrsiem/7.20.0/update-the-ip-address-of-an-ai-engine","children":[]},{"id":"ci_4cf592a326186ccdb4d446a04d982352a855ad55e575e098f74cf6698e4bf7c1","title":"Use AI Engine Rule Sets","path":"/lrsiem/7.20.0/use-ai-engine-rule-sets","children":[]},{"id":"ci_90b12eb1cddfb2bd3ceee6713630c592f28bc39c04e41ba5c40976826e1b996a","title":"Use AI Engine Workloads","path":"/lrsiem/7.20.0/use-ai-engine-workloads","children":[]},{"id":"ci_2f2656a5ed4e87dee79cb26bb72e174e9eea8e106d80fd8683cfc77d6df8e140","title":"Use Saved AI Engine Filters","path":"/lrsiem/7.20.0/use-saved-ai-engine-filters","children":[]},{"id":"ci_e729480bc3cfdd55fc82f12af56584be25495246ac73a6a1ae26c1e1112963e3","title":"Use the AI Engine Local Configuration Manager","path":"/lrsiem/7.20.0/use-the-ai-engine-local-configuration-manager","children":[]},{"id":"ci_317a1267a6bcdc5d72d39625fec2e4f1f3b8fd1cfc3646000e183920a0321541","title":"View AI Engine Generated Alarms","path":"/lrsiem/7.20.0/view-ai-engine-generated-alarms","children":[]},{"id":"ci_2fe6b8cff5c701ecebfdb1bd4ed0d6c616f5ad3ef882c628142ff448a515a221","title":"View AI Engine Rules","path":"/lrsiem/7.20.0/view-ai-engine-rules","children":[]},{"id":"ci_390c97308c5e2daa628e952422cf7d549256ab44eb3d5cda991869e3a70f7cbb","title":"Work with Existing AI Engine Rules","path":"/lrsiem/7.20.0/work-with-existing-ai-engine-rules","children":[]}]},{"id":"ci_8c936405c7bf1775fc61a979af5f97cf2204de99679506c9f0a61a886aebcc7b","title":"Alarm Rules","path":"/lrsiem/7.20.0/alarm-rules","children":[{"id":"ci_02165d20d598d1f4e85a45f790210bbee3607ca1271f94a304d4756050258a93","title":"Alarm Notification Policies","path":"/lrsiem/7.20.0/alarm-notification-policies","children":[{"id":"ci_afca4521130ea084f798e0444bc7588c5052c31e6866ac03f049d048730d0b69","title":"Create Group Notifications for Alarms","path":"/lrsiem/7.20.0/create-group-notifications-for-alarms","children":[]},{"id":"ci_8b22bf7f8c0945de6400669769a5932f72c0dc5d525cfc76fe2edf22d4fa3943","title":"Create New Email Alarm Notification Policies","path":"/lrsiem/7.20.0/create-new-email-alarm-notification-policies","children":[]},{"id":"ci_8cd57acd1b3596a6b7bf6086eee619b19c2abfcca3bae542f96890dfd1c0d82d","title":"Create New SNMP Alarm Notification Policies","path":"/lrsiem/7.20.0/create-new-snmp-alarm-notification-policies","children":[]},{"id":"ci_9b4cdfa5fc0e08dbb88a97fc42503e865ffa8df8bc65a5d08b1e32c69ce87715","title":"Create New Text File Alarm Notification Policies","path":"/lrsiem/7.20.0/create-new-text-file-alarm-notification-policies","children":[]},{"id":"ci_c232bce3a12794e2cef6ede7935940795e637c709b62b6a28fb2ff5ff5361527","title":"Define a Text File Notification Policy","path":"/lrsiem/7.20.0/define-a-text-file-notification-policy","children":[]}]},{"id":"ci_8c9abae29d8362cc71c81a75ccb2a8ddc407b27349be33ebbefd42122ed35ad5","title":"Create Alarm Rules","path":"/lrsiem/7.20.0/create-alarm-rules","children":[]},{"id":"ci_835ac3ba1c00f83b2b8c87a492e31e32255eeb5c551d44ca5a1fb4d578f6f7c0","title":"Create Alarm Rules for Known Logs","path":"/lrsiem/7.20.0/create-alarm-rules-for-known-logs","children":[]},{"id":"ci_644ffe98c4375902191fa898542b79dc7c9de113b9d4947fd5bfec30f09c1c5b","title":"Enable and Disable Alarm Rules","path":"/lrsiem/7.20.0/enable-and-disable-alarm-rules","children":[]},{"id":"ci_95cfb34af5120d1963b20612e7e3c0d2c39fe7114daf94e2e8ac2967119f9039","title":"Modify Alarm Rule Notifications in Batch","path":"/lrsiem/7.20.0/modify-alarm-rule-notifications-in-batch","children":[]},{"id":"ci_34d57e6214b6d2272e567a31f2f8b973b5ad4a931a41ce74ce9368ca078a3441","title":"Modify Alarm Rules","path":"/lrsiem/7.20.0/modify-alarm-rules","children":[]},{"id":"ci_12381c91f6d0aaf2649f2dd47e62efba2a5aff15ca34f00c679dd26990c3f83c","title":"Retire or Activate Alarm Rules","path":"/lrsiem/7.20.0/retire-or-activate-alarm-rules","children":[]}]},{"id":"ci_8f079a6c48e97790a4d6098a9143f1ad30600d0365cf30ea49f0a216958e9f7b","title":"Automatic Host Contextualization","path":"/lrsiem/7.20.0/automatic-host-contextualization","children":[{"id":"ci_1d3e1d6b799593741438376b0dda440a1d6f89cd0953eaf8cf36a359cf4227fe","title":"Disable Automatic Host Contextualization","path":"/lrsiem/7.20.0/disable-automatic-host-contextualization","children":[]},{"id":"ci_45bbf8ef8614454dd866cc55268f7f81d43a186f4ebcd2ef1cf945b73ea5287e","title":"Map Ports","path":"/lrsiem/7.20.0/map-ports","children":[]}]},{"id":"ci_b238489f196dab52b555269d85d054e125fdce54d0ea3006509d4f05ebd96c47","title":"Data Archives and Restoration","path":"/lrsiem/7.20.0/data-archives-and-restoration","children":[{"id":"ci_e1d41424bdbf74680a8819c9759ace5cf6efb48a80b241032508b15ab6730eec","title":"Add a Data Processor to Restore Archives","path":"/lrsiem/7.20.0/add-a-data-processor-to-restore-archives","children":[]},{"id":"ci_32bf80daa14d2e597d4bc77c73c0de6bf68fb3e5f4693415c3cdbf5fc1330bb1","title":"Backup and Recovery Procedures","path":"/lrsiem/7.20.0/backup-and-recovery-procedures","children":[{"id":"ci_cef93f178ab2e2e62013d149f013c2ac56b43963917595f2acb16721f5a67570","title":"Back Up LogRhythm Archives","path":"/lrsiem/7.20.0/back-up-logrhythm-archives","children":[]},{"id":"ci_f2cc23e988b7dc01a5be1e1298e60160b1aef4302a1ef4ab56ca11622dec7b2e","title":"Configure Automated Platform Manager Database Backups","path":"/lrsiem/7.20.0/configure-automated-platform-manager-database-backups","children":[]},{"id":"ci_a0dae7d486b232d6b9afebc86a23804ee080b689769ae5f74729c4df0a6e5a62","title":"Perform a Manual Platform Manager Backup","path":"/lrsiem/7.20.0/perform-a-manual-platform-manager-backup","children":[]},{"id":"ci_6d9381ec591fa04aec5444c47a9aedd083aa4993e16181c3bf26888d349c6b3a","title":"Restore From a Database Backup","path":"/lrsiem/7.20.0/restore-from-a-database-backup","children":[]},{"id":"ci_d1f5e92d514edeaf668457912db26d30281f7b090d19bb532fc2171f2a994e6d","title":"Restore Service State","path":"/lrsiem/7.20.0/restore-service-state","children":[]},{"id":"ci_5902c3a0365d24b80cd5019a653e20c6fa36967d720f5568224c41dccc130bcb","title":"Use a Dark Spare Backup Appliance","path":"/lrsiem/7.20.0/use-a-dark-spare-backup-appliance","children":[]}]},{"id":"ci_52c0f2353e320d5ef084313be7292065ac907662a45b807a54bf3e20f33632de","title":"Change Archive Location","path":"/lrsiem/7.20.0/change-archive-location","children":[]},{"id":"ci_ffe74d4452773e280edc77777edaf4f98b1da997ae482866a08d9ff189bfd17a","title":"Configure Object Access Auditing for LogRhythm Archive Files","path":"/lrsiem/7.20.0/configure-object-access-auditing-for-logrhythm-archive-files","children":[]},{"id":"ci_2068badbd2a78bfc4b4e80d632bdfdc1926c027fcd3f4c54f0a2262f45ca1b65","title":"Restore Platform Managers","path":"/lrsiem/7.20.0/restore-platform-managers","children":[]},{"id":"ci_590e459922f04f239b1e9287d680c51257b2080165614762dc92ffa819a8dbf1","title":"SecondLook","path":"/lrsiem/7.20.0/secondlook","children":[{"id":"ci_4038d1019e8c3c075d5bd86a520a7812f6f0af73054771ef29efaabb19be14c6","title":"Create a SecondLook Restore","path":"/lrsiem/7.20.0/create-a-secondlook-restore","children":[]},{"id":"ci_2bca3e5d8b4d209989f44fa177fa4b3adefc8b8a0ca4e2b902a13ee8a90a01bd","title":"Run a Saved SecondLook Restore","path":"/lrsiem/7.20.0/run-a-saved-secondlook-restore","children":[]}]},{"id":"ci_01a4631dc949dd7d745064f7fdec7db47b296a6bcb18aa856c910e8ea3fe5092","title":"Use Intelligent Indexing","path":"/lrsiem/7.20.0/use-intelligent-indexing","children":[]}]},{"id":"ci_c5ac2a83c3d1c7e640a14cad04a603fdb2583610c066d33cd58c838d5e61905f","title":"Data Indexer","path":"/lrsiem/7.20.0/data-indexer","children":[{"id":"ci_d5914794276cd8881a975db949949b536dc35275dfd0af4bff01a9f45f665e92","title":"Add a Data Indexer Node","path":"/lrsiem/7.20.0/add-a-data-indexer-node","children":[]},{"id":"ci_ae059d3d2665fb5d573402c26e168d96dd71ecbe397cb12529c04ddef7a0900a","title":"Apply System Updates to a Data Indexer","path":"/lrsiem/7.20.0/apply-system-updates-to-a-data-indexer","children":[]},{"id":"ci_04e4646697ccc7a21ef6e03590f6afccf751a3677041a48cd6882e94f87d1361","title":"Configure the Data Indexer","path":"/lrsiem/7.20.0/configure-the-data-indexer","children":[]}]},{"id":"ci_4797a5880a17c0d7ad568c91f48be523b3c6c53e462b3ed6ee180b49a49409e8","title":"Data Processor","path":"/lrsiem/7.20.0/data-processor","children":[{"id":"ci_c05132a9fa1b1c4bd2351110320a9595aff9eb1b5b164c8e2b184906ea76cdf5","title":"Add a Data Processor","path":"/lrsiem/7.20.0/add-a-data-processor","children":[]},{"id":"ci_3dc1b2e1040c5eb8c3234c9bfe43a11de3ccdc59a0bdfeebd5061670c88470eb","title":"Apply Recommended Data Processor Values","path":"/lrsiem/7.20.0/apply-recommended-data-processor-values","children":[]},{"id":"ci_ae82f00aed1912664fb8f41e56aec0447bd9d147d6f16377a796f41aa37f51d0","title":"Configure the Mediator for Automatic Startup","path":"/lrsiem/7.20.0/configure-the-mediator-for-automatic-startup","children":[]},{"id":"ci_54cd20eb9ca955e9403a3b6f35196f0d6500634516b4820be7589761387a0f47","title":"Create a Custom Certificate for Communication Between the Data Processor and AI Engine","path":"/lrsiem/7.20.0/create-a-custom-certificate-for-communication-between-the-data-processor-and-ai-engine","children":[]},{"id":"ci_2b047d4bdbad2edeae3bb2469964177af21d3063318fa93dbe15cd92341623f7","title":"TrueIdentity Entity Segregation","path":"/lrsiem/7.20.0/trueidentity-entity-segregation","children":[]},{"id":"ci_4f46a91403f2d03f753d8a09531993e6d201f92c6cbb4c757c988e87bf9dbb9e","title":"Filter LogRhythm Diagnostic Events","path":"/lrsiem/7.20.0/filter-logrhythm-diagnostic-events","children":[]},{"id":"ci_877ef609ed6974082088180a1495fc91f8de423486e20f385e9a234329f6b6a4","title":"Modify Data Processor Advanced Properties","path":"/lrsiem/7.20.0/modify-data-processor-advanced-properties","children":[]},{"id":"ci_1578f14f1b46e0773d3fac412ec4efa9724c3593631d908eed155c0ceb8623ad","title":"Modify Data Processor Basic Properties","path":"/lrsiem/7.20.0/modify-data-processor-basic-properties","children":[]},{"id":"ci_bf2ceadd85acebc88e8013a81960d63ec9fd6fd2f061d3fdd757a6789649b176","title":"Retire a Data Processor","path":"/lrsiem/7.20.0/retire-a-data-processor","children":[]},{"id":"ci_a5463932893d3771f93738089f2486894d36abb33a013ba6dac3196208eee23c","title":"Revert to a Previous Data Processor Configuration","path":"/lrsiem/7.20.0/revert-to-a-previous-data-processor-configuration","children":[]},{"id":"ci_1e40e6ea051cfec07201ddc29064c6e1decf88e0122fe35058f7b8cfb4775dfb","title":"Set Data Processor Messages Per Second Value","path":"/lrsiem/7.20.0/set-data-processor-messages-per-second-value","children":[]},{"id":"ci_f99153658fd60397e544fe6b0b0d4c1515fd748eda7b066f810818055f92bc18","title":"Start, Stop, and Restart Data Processor Services","path":"/lrsiem/7.20.0/start-stop-and-restart-data-processor-services","children":[]},{"id":"ci_08a903b000f79835c542df30ef99870312412db4ed55f1018edb9cc1dad67034","title":"Throttle the Mediator","path":"/lrsiem/7.20.0/throttle-the-mediator","children":[]},{"id":"ci_cd0075b0a028ea118622a23d7ccaa277d97ff9aa1f8a5ace426e6ff70ccc6288","title":"Update the IP Address of a Data Processor","path":"/lrsiem/7.20.0/update-the-ip-address-of-a-data-processor","children":[]},{"id":"ci_811706ac288d6d7876bcaca67ebbe33435538b59c09b153d2ab8c90fbe76436e","title":"Use the Data Processor Configuration Manager","path":"/lrsiem/7.20.0/use-the-data-processor-configuration-manager","children":[]}]},{"id":"ci_527dda642ec43b6ba82bff6de7903ff44620a308250734a2debdfdce83723558","title":"Deployment Health","path":"/lrsiem/7.20.0/deployment-health","children":[{"id":"ci_6e6fbf3df093632587dd6bb87f1e711c2d18de08adb07351f461b75be7cf7270","title":"Centralized Service Metrics","path":"/lrsiem/7.20.0/centralized-service-metrics","children":[{"id":"ci_6213df3917c80c12af437d08d7f478014ea09f676ab12d2733704e8db3386f59","title":"Install and Work With Centralized Service Metrics","path":"/lrsiem/7.20.0/install-and-work-with-centralized-service-metrics","children":[]},{"id":"ci_b6fa326cb745a44abd388bb27a43143e966f76ede0ba55ef2563b917b24de0c0","title":"Troubleshoot Centralized Service Metrics","path":"/lrsiem/7.20.0/troubleshoot-centralized-service-metrics","children":[]}]},{"id":"ci_f6b7785708931a69592f2c9b3368e2f065f004dac7ccfa4304557bd329192acc","title":"Deployment Monitor","path":"/lrsiem/7.20.0/deployment-monitor","children":[]},{"id":"ci_525662c73fcbcaeda39500d6d950e95521d98073a5bff23d368dfc7a6640922e","title":"Log Processing Reports","path":"/lrsiem/7.20.0/log-processing-reports","children":[{"id":"ci_7a93a8841a0532ae2e93306dd25ef4060ba9b5d882380dd1d66bd4e44b82cb87","title":"LPS Detail Report","path":"/lrsiem/7.20.0/lps-detail-report","children":[]},{"id":"ci_6704cb15992001e55b32486b05c926f0267b70fdfb9800580afa8734dda9b1ea","title":"LPS Policy Sorting Stats Report","path":"/lrsiem/7.20.0/lps-policy-sorting-stats-report","children":[]}]},{"id":"ci_f01a665179d3176acb83a26949babd18b0b18addcc5636a3a69e577b6f00937c","title":"Performance Counters","path":"/lrsiem/7.20.0/performance-counters","children":[{"id":"ci_98ee814735218c980ae12cc726839fb89562d0c61717d3ccbc9b463840ac5393","title":"Performance Counters—LR AI Engine Communication Manager","path":"/lrsiem/7.20.0/performance-counterslr-ai-engine-communication-manager","children":[]},{"id":"ci_66717eef31b9b6a0ae769bb958dc7ff2da7d8341c5d67729e2135b4aec29333f","title":"Performance Counters—LR AI Engine Data Provider","path":"/lrsiem/7.20.0/performance-counterslr-ai-engine-data-provider","children":[]},{"id":"ci_74941e37ecd8b9e1e777ee304d0bfe1d0d1539b0cf9217b65b87bb33188064b7","title":"Performance Counters—LR AI Engine Server","path":"/lrsiem/7.20.0/performance-counterslr-ai-engine-server","children":[]},{"id":"ci_2f0af7a09ce13a259d74328831da5483a7534e36caaf052b5ce275551ca8c80c","title":"Performance Counters—LR Alarming and Response Manager","path":"/lrsiem/7.20.0/performance-counterslr-alarming-and-response-manager","children":[]},{"id":"ci_33cb2876c316a4363aaa34c4604c003702dbf1e4caaacf0e1eddb975638915cd","title":"Performance Counters—LR Mediator, Log Distribution Services","path":"/lrsiem/7.20.0/performance-counterslr-mediator-log-distribution-services","children":[]},{"id":"ci_58e6c6a8e32f8051918dea9cf640b157ba7b03cef377ae0c2d8d0e21d2917531","title":"Performance Counters—LR Mediator, LDS, Sender","path":"/lrsiem/7.20.0/performance-counterslr-mediator-lds-sender","children":[]},{"id":"ci_2b46e5ba4f43539bb1a2ba05597dd3ffaecb4acbc25e96aade27eaa0dd5a3f39","title":"Performance Counters—LR Mediator, LogMart","path":"/lrsiem/7.20.0/performance-counterslr-mediator-logmart","children":[]},{"id":"ci_626fb7dd00a5667ff313f827ea4b39b3321cea051de46676a74d2fb6901f5558","title":"Performance Counters—LR Mediator, Processing","path":"/lrsiem/7.20.0/performance-counterslr-mediator-processing","children":[]},{"id":"ci_05954baa5e2a2027e81b8f22325bf79fd7eac7b373e2c3f50798ec7827eb3164","title":"Performance Counters—LR Mediator, Stats","path":"/lrsiem/7.20.0/performance-counterslr-mediator-stats","children":[]},{"id":"ci_966c59d0b7875795a662622f0d35651d7c9c710b0c146ff0b427fde7986d6f4b","title":"Performance Counters—LR Mediator, True Source","path":"/lrsiem/7.20.0/performance-counterslr-mediator-true-source","children":[]},{"id":"ci_d6688f5470bdd933fc24b90bc86da5b99b556dafc2b4a2a2a1067616cd0b1568","title":"Performance Counters—LR Messaging (DP to DX)","path":"/lrsiem/7.20.0/performance-counterslr-messaging-dp-to-dx","children":[]},{"id":"ci_34fa689abc1e49c7ff298f713c5d65309d27b8131be342e5068d3a252505a43f","title":"Performance Counters—LR System Monitor","path":"/lrsiem/7.20.0/performance-counterslr-system-monitor","children":[]},{"id":"ci_e2d8f1d793fe9f0fdd50089c9cf77db19f9a99b6ea0c57924ce42c5f938372d7","title":"View and Add Performance Counters","path":"/lrsiem/7.20.0/view-and-add-performance-counters","children":[]}]}]},{"id":"ci_badc15491ae683dc851cad57c07ede373e7c59e936371fd7f767ea8464fd5972","title":"Deployment Manager","path":"/lrsiem/7.20.0/deployment-manager","children":[]},{"id":"ci_e34ce3ad4681c9a46798b0e14afaa943861f88df2553ffa66fb3ce595aa2e533","title":"Deployment Security","path":"/lrsiem/7.20.0/deployment-security","children":[{"id":"ci_92e886e0a683d8b7b8db2712d1321a18bd7c0a6e1cc401a840dbfaab933c6c78","title":"Common Criteria Audit Data Generation","path":"/lrsiem/7.20.0/common-criteria-audit-data-generation","children":[{"id":"ci_33ff9bfe570f36723003ad4b5d81f8ba0108c9f5c50c04be559a89c710156a25","title":"Set Up the Audit Functionality","path":"/lrsiem/7.20.0/set-up-the-audit-functionality","children":[]},{"id":"ci_771b0352fd95aa51ef57cdb98d8189ea9da55e992563a8429f704f2955649c85","title":"Set up Discretionary Access Controls on the Trace Folder on an NTFS File System","path":"/lrsiem/7.20.0/set-up-discretionary-access-controls-on-the-trace-folder-on-an-ntfs-file-system","children":[]},{"id":"ci_2c5386635dc627e7544368f84d4bfc76d45f6196a62729a0f4c7999c84d7294d","title":"Configure Windows Task to Alarm on Audit Trace Failure","path":"/lrsiem/7.20.0/configure-windows-task-to-alarm-on-audit-trace-failure","children":[]},{"id":"ci_65f2543d4f1a568e58c04e27ebc4521edd68f4abe52041f6a025c46d8f588125","title":"Configure SQL Server to Run Under Domain Account","path":"/lrsiem/7.20.0/configure-sql-server-to-run-under-domain-account","children":[]},{"id":"ci_e60b7f8046a4d2fafeb71655a1a744a8bb690e831245cc93e456d5a70d38dd8b","title":"SQL Server Trace File Converter (TFC) User Guide","path":"/lrsiem/7.20.0/sql-server-trace-file-converter-tfc-user-guide","children":[{"id":"ci_36d1a9207c27c12b94b8e49dff5dce4e07389f5e378ef7015a41e0c1d2921cc8","title":"Download the SQL TFC Installer","path":"/lrsiem/7.20.0/download-the-sql-tfc-installer","children":[]},{"id":"ci_858818e69811087355d17b3b443502290dc572b3b61498c3ca1be3414571c29e","title":"Install the SQL Server TFC Server","path":"/lrsiem/7.20.0/install-the-sql-server-tfc-server","children":[]},{"id":"ci_bdeea877247f19f9e1233f15212e1e017204c0e6e073c73e1aae5437550fa76f","title":"Configure SQL Server TFC","path":"/lrsiem/7.20.0/configure-sql-server-tfc","children":[]},{"id":"ci_263075d3764763212d7f6e57764f7152c46c84aa99de2af368b2a5afce14ca4c","title":"Add a SQL Server TFC Log Source","path":"/lrsiem/7.20.0/add-a-sql-server-tfc-log-source","children":[]}]}]},{"id":"ci_0477a1c27790ec7336bea89c7dc765b8dd93cf1483bcfccbc4d253a53e669c56","title":"Common Criteria","path":"/lrsiem/7.20.0/common-criteria","children":[{"id":"ci_7e2b6c8a011b5bf6f38f0fa4354246bcf21757e751df04850c2f3c43bdfb309c","title":"Web Console Compliance","path":"/lrsiem/7.20.0/web-console-compliance","children":[{"id":"ci_7b8daab8d65046a7e6170f57103129fcb5ae31e4f8765690040221ad2c604b6e","title":"Auto Logout for Idle Users (US9521)","path":"/lrsiem/7.20.0/auto-logout-for-idle-users-us9521","children":[]},{"id":"ci_2b5f884bb6840b298b312e01b172fe755a9ecdbc98f4d2726f8682749a376d6c","title":"Nginx File Configuration Updates (US9305)","path":"/lrsiem/7.20.0/nginx-file-configuration-updates-us9305","children":[]},{"id":"ci_5c5593b2131adf4941539eaad19384aea4070d99382cc11ed483806a003cd05c","title":"Requirements","path":"/lrsiem/7.20.0/requirements","children":[]},{"id":"ci_954d766204638bfdc0508b5368b593aa0fd18ecd59b8746d9b095d1859a0a52d","title":"Warning Banner on Login Page (US9518)","path":"/lrsiem/7.20.0/warning-banner-on-login-page-us9518","children":[]},{"id":"ci_d9aeda8d7dec297c4c8115e4f352e6b515c7702ec90a52200d32a7467d6cc1db","title":"Web Console FIPS Compliance Configuration (US9525)","path":"/lrsiem/7.20.0/web-console-fips-compliance-configuration-us9525","children":[]},{"id":"ci_d133ca6ab82e16d9d1dab11d5ccd61365e88ff3f8339ef1e2918c5bdc667822b","title":"Web Console Logout Button (US9519)","path":"/lrsiem/7.20.0/web-console-logout-button-us9519","children":[]}]}]},{"id":"ci_44312a5a96dda69c5b51653b26ca2302045e261eba18abc90567befc94c06e35","title":"Federal Information Processing Standards (FIPS)","path":"/lrsiem/7.20.0/federal-information-processing-standards-fips","children":[{"id":"ci_4c3191ef5159b15bff8478500d95f6c6c497cbfd8a4baffd925e81270554009c","title":"Configure User Access Control for FIPS Mode","path":"/lrsiem/7.20.0/configure-user-access-control-for-fips-mode","children":[]},{"id":"ci_b203bb56f40e1e35922c989401173dc443f85bf73a3074f333accc7faa8ff893","title":"Configure LogRhythm XM for FIPS Mode","path":"/lrsiem/7.20.0/configure-logrhythm-xm-for-fips-mode","children":[]},{"id":"ci_15e04a4bfe7da0e97b9af5a89e554b24d61e788e5c390ad0b2fbeb4d5db41d66","title":"Configure LogRhythm DPAWC + DX for FIPS Mode","path":"/lrsiem/7.20.0/configure-logrhythm-dpawc-dx-for-fips-mode","children":[{"id":"ci_1e3b09e74c25719705329766fd1fc4d460450d394262fd67de2602708e5e14c9","title":"Configure LogRhythm DPAWC","path":"/lrsiem/7.20.0/configure-logrhythm-dpawc","children":[]},{"id":"ci_f555e6298b2c509134a8a913b5a19e1dfa713eb263abb38a885bf594fc8dd323","title":"Configure LogRhythm DX","path":"/lrsiem/7.20.0/configure-logrhythm-dx","children":[]},{"id":"ci_4615bd4b6aa827325b16e897d0103c8c7ce051b19df1f165bc6188737bdbe355","title":"Establishing IPsec Communications between Windows & Linux OS","path":"/lrsiem/7.20.0/establishing-ipsec-communications-between-windows-linux-os","children":[{"id":"ci_1e9c899ea8af7e54bf25b5e06790cf7cfcc1b1e2be094688124eea40cc18b8f1","title":"Windows OS IPsec Configuration","path":"/lrsiem/7.20.0/windows-os-ipsec-configuration","children":[{"id":"ci_b385459cf765667ff2289f651614f806f6e59f3eee11d279deacf1aede2abcdb","title":"Create a Custom MMC Console","path":"/lrsiem/7.20.0/create-a-custom-mmc-console","children":[]},{"id":"ci_9c4e98ac7b5436bc118fb724819e0083b992e5f069eca92085e6bbab79dd7a9f","title":"Enable Audit Policy for Your Computer","path":"/lrsiem/7.20.0/enable-audit-policy-for-your-computer","children":[]},{"id":"ci_1aa2621ec106314a6c994186b15ad1c473f53bc8565a7fb8fe6538909b45246d","title":"Build a Custom IPsec Policy","path":"/lrsiem/7.20.0/build-a-custom-ipsec-policy","children":[]},{"id":"ci_dd207a468a2f07a9728a1caefe94010c355bbe9f567a0bf40e2c5fbe9f2798cb","title":"Configure an IPsec Filter List","path":"/lrsiem/7.20.0/configure-an-ipsec-filter-list","children":[]},{"id":"ci_3a7f36e1b25462fb8f4280f42ef48916da84c4fb83ee7dc28863f2130337f94e","title":"Configure an IKE Authentication Method","path":"/lrsiem/7.20.0/configure-an-ike-authentication-method","children":[]}]},{"id":"ci_fb10f6fc21a26bee8995533edeb04cfe858f800c1d04f93ae55d6e48c6e5b647","title":"Linux/CentOS IPsec Configuration","path":"/lrsiem/7.20.0/linux-centos-ipsec-configuration","children":[{"id":"ci_b73cb60f0457f263c012c74814f449b8e1c8f2912d5202d8dab5df3b62951e49","title":"Configure IPsec on Linux Machine","path":"/lrsiem/7.20.0/configure-ipsec-on-linux-machine","children":[]},{"id":"ci_dd8e39431b58d50be63304c910ca0f8339f042d02a3559dd93a41a125fc18d83","title":"Put Linux/CentOS into FIPS Mode","path":"/lrsiem/7.20.0/put-linux-centos-into-fips-mode","children":[]}]},{"id":"ci_fe1862e9dd23b75815be9959e2baa6c988b8386daa95d0df0d1902bc573a6267","title":"Test Your Custom IPsec Policy on both Computers","path":"/lrsiem/7.20.0/test-your-custom-ipsec-policy-on-both-computers","children":[]}]}]},{"id":"ci_843136769ae1f3d1f16347ee05fb4be9ef3ba78927527c2b2af3cedcceeef970","title":"Force Encrypted Connections for SQL (Recommended)","path":"/lrsiem/7.20.0/force-encrypted-connections-for-sql-recommended","children":[]},{"id":"ci_4a3d208fd94c1ef9e3e6dc40cd1f3d5cf019695866d112bca8d15fc3769d4b25","title":"Deploy LogRhythm in a FIPS-Enabled Domain","path":"/lrsiem/7.20.0/deploy-logrhythm-in-a-fips-enabled-domain","children":[]},{"id":"ci_5fd72cfdb1858e65eeb4cf1d4e03415915dd106dd5e6e1310cb504050521bcc8","title":"Put Windows into FIPS Mode","path":"/lrsiem/7.20.0/put-windows-into-fips-mode","children":[]},{"id":"ci_f9f337afd2361c4cbd17741d735e41760f856059d64113234280b3657ee8831f","title":"Configure LogRhythm Services and the Windows Data Indexer for FIPS Mode","path":"/lrsiem/7.20.0/configure-logrhythm-services-and-the-windows-data-indexer-for-fips-mode","children":[]}]},{"id":"ci_b47d59a69607dff2fa5301cb1e27b1385479979b2a95bfe6d3b06ae00ab09c74","title":"Integrated Security","path":"/lrsiem/7.20.0/integrated-security","children":[{"id":"ci_3390437ca52182444c2b4d3e1878c1a8eab1377d0806e542f6b9a5acb801fd52","title":"Create Accounts for LogRhythm Components","path":"/lrsiem/7.20.0/create-accounts-for-logrhythm-components","children":[]},{"id":"ci_3793d7571bd52b46a972a187f994151b276a8c8677cd344017f203c629660ea3","title":"Configure Database Access","path":"/lrsiem/7.20.0/configure-database-access","children":[]},{"id":"ci_43086ee0206d58ada61eee2cba0fe45e635af068d017f34db251f60cc8e07f00","title":"Shut Down LogRhythm Services","path":"/lrsiem/7.20.0/shut-down-logrhythm-services","children":[]},{"id":"ci_b37115673b25f5372054c1bcc4411b479e5e942c9ee1cffc8bd3c1a3cf152f68","title":"Reconfigure LogRhythm Services to Use Integrated Security","path":"/lrsiem/7.20.0/reconfigure-logrhythm-services-to-use-integrated-security","children":[]},{"id":"ci_dac10346eaedc8e28640dae0acf560aaefb0279eaa21b9995167045b3218555e","title":"Enable Mixed Authentication Mode","path":"/lrsiem/7.20.0/enable-mixed-authentication-mode","children":[]},{"id":"ci_39204375fe8e79880344ffe9958db474846a08ff687cbe3ea6173a7904f50413","title":"Restart LogRhythm Services","path":"/lrsiem/7.20.0/restart-logrhythm-services","children":[]}]},{"id":"ci_a74425c2598747d5e64c3056b1a2dffd478af18b33e3751fab894f8929513240","title":"Least Privileged User","path":"/lrsiem/7.20.0/least-privileged-user","children":[{"id":"ci_7db3d393a5c5d04837a61690242243a64ec59244ba60ac9028f763b3a04689ad","title":"Configuring LogRhythm Permissions","path":"/lrsiem/7.20.0/configuring-logrhythm-permissions","children":[]},{"id":"ci_9b1399010b26c0b5b9bd5243cce746bd27d890d3d36363cb9afad8f8b922d0ce","title":"Least Privileged User: DP, Mediator Server","path":"/lrsiem/7.20.0/least-privileged-user-dp-mediator-server","children":[]},{"id":"ci_4de0cb35c4591b1c64c5e5036679a61db92ef889d475fb1231f59806fd82c62e","title":"Least Privileged User: DX, Linux","path":"/lrsiem/7.20.0/least-privileged-user-dx-linux","children":[]},{"id":"ci_e5d37994fcb4dee557d21b7ef1f5fc7469e354be6e69c73f942e7a9f1ab58c52","title":"Least Privileged User: DX, Windows","path":"/lrsiem/7.20.0/least-privileged-user-dx-windows","children":[]},{"id":"ci_e7419ce842d9d1e657d24b4129ccce18ff04294b02cc2030c51fcd59dca79abf","title":"Least Privileged User: PM, Advanced Intelligence Engine","path":"/lrsiem/7.20.0/least-privileged-user-pm-advanced-intelligence-engine","children":[]},{"id":"ci_e41d24916f6cccfc7ec0073245ad8b0df3b01080ff4001eebc4ae5903606e322","title":"Least Privileged User: PM, AIE Communication Manager","path":"/lrsiem/7.20.0/least-privileged-user-pm-aie-communication-manager","children":[]},{"id":"ci_e2aa4d6d6ff7bb370aaf9e97249525fc4687e0f13bee97c2bc2e440eb4885319","title":"Least Privileged User: PM, Alarming and Response Manager","path":"/lrsiem/7.20.0/least-privileged-user-pm-alarming-and-response-manager","children":[]},{"id":"ci_73d442fc26702db9ac7969b54c89759e26019c1033ba64cb9343f5db48837f0c","title":"Least Privileged User: PM, Disaster Recovery","path":"/lrsiem/7.20.0/least-privileged-user-pm-disaster-recovery","children":[]},{"id":"ci_ff3287db58d41f0078bc5bc12ff48e9cb072103931450aca9a85b828b5c5f46f","title":"Least Privileged User: PM, High Availability","path":"/lrsiem/7.20.0/least-privileged-user-pm-high-availability","children":[]},{"id":"ci_a3d691bd562abb1a9484dd80c147c3ecf0f1f2438bd398fc4a7f027d0c720681","title":"Least Privileged User: PM, Job Manager","path":"/lrsiem/7.20.0/least-privileged-user-pm-job-manager","children":[]},{"id":"ci_b157a79610a9a75842bd3f6837e486cac11e7eaaba40ed0002f74765478efd08","title":"Least Privileged User: PM, Web Console","path":"/lrsiem/7.20.0/least-privileged-user-pm-web-console","children":[]},{"id":"ci_2db663ce9f7908681544b6d9bf43552e413ec590497855f9427726ff8b1921c7","title":"Least Privileged User: SysMon, Linux, Unix","path":"/lrsiem/7.20.0/least-privileged-user-sysmon-linux-unix","children":[]},{"id":"ci_db1f2310fbef3e68a276389bd23f7363efcc5dde7f0795ca3b5a36d16eeb8a4c","title":"Least Privileged User: SysMon, Windows","path":"/lrsiem/7.20.0/least-privileged-user-sysmon-windows","children":[]}]},{"id":"ci_b50a819862bf01bcaf35a57824be5bd49ec14b0279dd960d922f990e7f09f7d2","title":"Public Key Infrastructure (PKI) Support","path":"/lrsiem/7.20.0/public-key-infrastructure-pki-support","children":[{"id":"ci_798b0f4f236fed9390be1de2593792803fb7f90984fc3779fc4d63ff1c7881ea","title":"Certificate Configuration for LogRhythm Component Connections","path":"/lrsiem/7.20.0/certificate-configuration-for-logrhythm-component-connections","children":[]},{"id":"ci_d0effdbedaa2af22584a26519fd1edddcc35acb638b1ee70d1a5ce5dbf5b4b85","title":"Create a Certificate for Microsoft SQL Server Connections","path":"/lrsiem/7.20.0/create-a-certificate-for-microsoft-sql-server-connections","children":[]},{"id":"ci_6cffd9fbfb0f799c052572524bc13f8f7f11c85db97517881e1ede19e4e0095c","title":"Create Client and Server Certificates","path":"/lrsiem/7.20.0/create-client-and-server-certificates","children":[]},{"id":"ci_70b68dbe0e94b1a304c5a314e0c53b878c306c91278c5db0aa48922d2f660a22","title":"Verify Certificates","path":"/lrsiem/7.20.0/verify-certificates","children":[]},{"id":"ci_0513c44dd0a4b280cea3679ce05e04c431270d8a227b65315565c0a8cf6dd8b6","title":"View an Example of Configuring Mutual Authentication in LogRhythm","path":"/lrsiem/7.20.0/view-an-example-of-configuring-mutual-authentication-in-logrhythm","children":[]},{"id":"ci_252f2112c973315fbaae28eba79b457340305885e78ff2269a1e5a486e27ab64","title":"View an Example of Configuring Certificates for AI Engine","path":"/lrsiem/7.20.0/view-an-example-of-configuring-certificates-for-ai-engine","children":[]}]},{"id":"ci_1f19828c4c200ec3ad211b69ee9056d1ce4def58afbe3d79fff55c78bcec97c3","title":"Security Banners","path":"/lrsiem/7.20.0/security-banners","children":[{"id":"ci_a29d480bf7db466c6ed85c40876a9ba29c54b8df6ec2bc0292df55923cf6c31b","title":"Configure the Session-Timeout Error Message","path":"/lrsiem/7.20.0/configure-the-session-timeout-error-message","children":[]},{"id":"ci_442800288f8d5380f65d80cb76e2d915cb5718e71cc004b274f39129165e24e0","title":"Configure the Start-Up Warning","path":"/lrsiem/7.20.0/configure-the-start-up-warning","children":[]}]},{"id":"ci_9a51373618a4a9eeace7337c463ec218013a5baf32e0c8df04758a468cd050f4","title":"LogRhythm Default Passwords","path":"/lrsiem/7.20.0/logrhythm-default-passwords","children":[]},{"id":"ci_6321518a1271b71f1cc0f36f2abd195ec9f2fb413a277811fe7065dd05d6274d","title":"Enhanced Auditing","path":"/lrsiem/7.20.0/enhanced-auditing","children":[{"id":"ci_3d6024ecd5fbd90747d33b1b5538d12ac8f521b53cd306a1fbfc01073e99bdef","title":"Collect Enhanced Audit Logs","path":"/lrsiem/7.20.0/collect-enhanced-audit-logs","children":[]}]},{"id":"ci_0944d46667f6b2a3fa5ab7b5bba3e7be6a9fb5dfdfb7aea60a1c7b66968430ec","title":"Query Auditing","path":"/lrsiem/7.20.0/query-auditing","children":[]}]},{"id":"ci_291daf1ffe0c0d6ce75653472823ce64b6a011e8c2dced504cb6a081cfb82856","title":"Endpoint Monitoring","path":"/lrsiem/7.20.0/endpoint-monitoring","children":[{"id":"ci_ce9fa3b0aca4f76196fd45989381c16508e065dafa4daeab346550889c427963","title":"Data Loss Defender (DLD)","path":"/lrsiem/7.20.0/data-loss-defender-dld","children":[{"id":"ci_f53bd2d59691142ce0f9ab3242aefdac06ccb8ae41f6f510e0387b2162b0cceb","title":"Create DLD Policies","path":"/lrsiem/7.20.0/create-dld-policies","children":[]},{"id":"ci_d564793d696cb3ac5b6a0a0b6f946ad1a96bfde1847ba7ad5dbdfec7c7260841","title":"Delete DLD Policies","path":"/lrsiem/7.20.0/delete-dld-policies","children":[]},{"id":"ci_c398afd0a8344390ef90f628da0577c848f38cff2db4e461bcd851a88fb8e1e2","title":"Enable DLD for an Agent","path":"/lrsiem/7.20.0/enable-dld-for-an-agent","children":[]},{"id":"ci_82ca31bf19ddb221cf909e1e8364d44449600af0a423d167bf5eb4d2195fcc3b","title":"Modify DLD Policies","path":"/lrsiem/7.20.0/modify-dld-policies","children":[]}]},{"id":"ci_a13006648ea4490a2e3324304d8102f788bfeaa922d426c0ef1cc9bff89e6f23","title":"File Integrity Monitor (FIM)","path":"/lrsiem/7.20.0/file-integrity-monitor-fim","children":[{"id":"ci_fd0cd456b692b942f683b469b2774cece79b3df42d80ebeab5af5ff0956b6014","title":"Create File Integrity Monitor Policies","path":"/lrsiem/7.20.0/create-file-integrity-monitor-policies","children":[]},{"id":"ci_b3e46482fca9267327731eece4e57a07fa33ca26cd9a4829b429a0c46435d5ec","title":"Create Inclusions and Exclusions for FIM","path":"/lrsiem/7.20.0/create-inclusions-and-exclusions-for-fim","children":[]},{"id":"ci_0988dbfa5e5d0ae9a91c55d452d07e12f39241f2711578c450de09b383f3286f","title":"Associate a File Integrity Monitor Policy With an Agent","path":"/lrsiem/7.20.0/associate-a-file-integrity-monitor-policy-with-an-agent","children":[]},{"id":"ci_3f4e71a1acca16bd7b3db0fc4a30eaa3fc15f95311d86aa421a748032bd19c63","title":"Modify File Integrity Monitor Policies","path":"/lrsiem/7.20.0/modify-file-integrity-monitor-policies","children":[]},{"id":"ci_72366a49c5840480f1ed50dd9fcb7bac71b4d5c0cc8cd78c76c60bb5cccf2928","title":"Clone File Integrity Monitor Policies","path":"/lrsiem/7.20.0/clone-file-integrity-monitor-policies","children":[]},{"id":"ci_518d92023533b13bc26c84cfc5a1ba894ae02f80b615c547737af2a3d1e7efdd","title":"Delete File Integrity Monitor Policies","path":"/lrsiem/7.20.0/delete-file-integrity-monitor-policies","children":[]}]},{"id":"ci_d76c8a890924037317adfebf1931254890db8cab803e5618eec2bfebb7dfc734","title":"Network Connection Monitor (NCM)","path":"/lrsiem/7.20.0/network-connection-monitor-ncm","children":[{"id":"ci_06eea1e02fda65e57d22ba3bf947e5954c365d4381773108d1ba7696e5b1dbfc","title":"Enable NCM for an Agent","path":"/lrsiem/7.20.0/enable-ncm-for-an-agent","children":[]}]},{"id":"ci_6d39879f29339c40493e7a7ad1b107e071a5418e3fe2080eb1b9db95fc7a6249","title":"Process Monitor","path":"/lrsiem/7.20.0/process-monitor","children":[{"id":"ci_9c0f6cc9a1f1cfc012745ae848c0ed3e8bcb2fe301408b62cfa450febd59eba8","title":"Enable Process Monitor for an Agent","path":"/lrsiem/7.20.0/enable-process-monitor-for-an-agent","children":[]}]},{"id":"ci_69fe2b2a540aee4a9f87cd09a64291087ebe3e0757b030063ed9437788b9482c","title":"Registry Integrity Monitor (RIM)","path":"/lrsiem/7.20.0/registry-integrity-monitor-rim","children":[{"id":"ci_6a33959b77bc3fe2b6bc600872ddd5eaf38ab3818ae8e5595c47773b87b7463a","title":"Associate Items to RIM Policies","path":"/lrsiem/7.20.0/associate-items-to-rim-policies","children":[]},{"id":"ci_5fba8911ed4fdb290e69893eb5d9177db390d16572ae3708bfdaa9e8f37ce2dd","title":"Associate RIM Policies to Windows System Monitor Agents","path":"/lrsiem/7.20.0/associate-rim-policies-to-windows-system-monitor-agents","children":[]},{"id":"ci_ceb12775c3c3fe93787cdc7442eba05dd4021b31c7c6bf8cc1691bca4887a541","title":"Configure RIM Policy Items","path":"/lrsiem/7.20.0/configure-rim-policy-items","children":[]},{"id":"ci_7794396f75e3c4bafc07639c936105b8859d62c416da4b859a22ee0f5029ded0","title":"Create RIM Policies","path":"/lrsiem/7.20.0/create-rim-policies","children":[]},{"id":"ci_fcaf9eb80323f12a0a6b10124cc909696c286a4cfa15010c8e4ac2058fb21b0f","title":"Delete RIM Policies","path":"/lrsiem/7.20.0/delete-rim-policies","children":[]},{"id":"ci_c125514b6035bb74ec542876781ab9d2214e525ca688a343ec7a5b5c7cd0ef53","title":"Delete RIM Policy Items","path":"/lrsiem/7.20.0/delete-rim-policy-items","children":[]},{"id":"ci_72d9ded758a400186381f4113d778fa9095e0186a1edd7403e94efa5b1e6649e","title":"Modify RIM Policies","path":"/lrsiem/7.20.0/modify-rim-policies","children":[]},{"id":"ci_e6ca82915d5fdf35c39f0c5e95580884b2ea11d4e9710714e5e721ad43ca3458","title":"Modify RIM Policy Items","path":"/lrsiem/7.20.0/modify-rim-policy-items","children":[]}]},{"id":"ci_017b12c1ac075f98ac92544c56b9fd208bca2280a2f7f27d9fb2809d9c0f44a3","title":"User Activity Monitor (UAM)","path":"/lrsiem/7.20.0/user-activity-monitor-uam","children":[{"id":"ci_f32680c285c48f0b770f3c876c87662ca915dcb236332a5e561045eb91f6ec04","title":"Enable UAM for an Agent","path":"/lrsiem/7.20.0/enable-uam-for-an-agent","children":[]},{"id":"ci_d2597fa129e4f7879608fbd92b852db5c5c1b8870f333a8b2f0f80b0a7884f50","title":"Include UAM in File Integrity Monitor","path":"/lrsiem/7.20.0/include-uam-in-file-integrity-monitor","children":[]}]}]},{"id":"ci_e9e1e83376cfc30c40a976ca078564918677108cbe1087867e8cd7aaa2363226","title":"Entities","path":"/lrsiem/7.20.0/entities","children":[{"id":"ci_2372cb8e29fb633298324d367ef50490ddf59cb7fa5d4b6ff2a79f6566ed270a","title":"Add a Single Entity","path":"/lrsiem/7.20.0/add-a-single-entity","children":[]},{"id":"ci_e4c7204d0aaa7e9e7a85e2247b6545d466d553e9bfd150c42e2120296acd857a","title":"Bulk Import Entities From a File","path":"/lrsiem/7.20.0/bulk-import-entities-from-a-file","children":[]},{"id":"ci_cd66f869b89af184b647f0b0bf885ceeb7fffcb0f213b6503e986955f632c57f","title":"Delete Entities","path":"/lrsiem/7.20.0/delete-entities","children":[]},{"id":"ci_e83a66472c1201021addcbc4b324a1176830745f67c25a1b547e4e3f0637f575","title":"Modify Entities","path":"/lrsiem/7.20.0/modify-entities","children":[]},{"id":"ci_e735df75dc7d749f6fdc18aaeab0f78bf686eab53b2a1673186a9d211ef8a0be","title":"Run the Entities Reorganization Wizard","path":"/lrsiem/7.20.0/run-the-entities-reorganization-wizard","children":[]}]},{"id":"ci_15b6542b0802522d5e73fc0c0008bc7c15ece408e1ea41b9575d561e5f18aefb","title":"Global Log Processing Rules","path":"/lrsiem/7.20.0/global-log-processing-rules","children":[{"id":"ci_ccc042831325722fdfc7a0b8f705d1f49554794f5b55d424eb0e427efc543fb9","title":"Create Global Log Processing Rules","path":"/lrsiem/7.20.0/create-global-log-processing-rules","children":[]},{"id":"ci_e6fcef8f6514686e99f82299f0188122473f93a7a3ab7e23cfdafffa10917bf5","title":"Modify Global Log Processing Rules","path":"/lrsiem/7.20.0/modify-global-log-processing-rules","children":[]}]},{"id":"ci_0f434c7b73b09e9471f19e196650e2c32ee7af5578ccc3573f36f0e5301b5b28","title":"Host Records","path":"/lrsiem/7.20.0/host-records","children":[{"id":"ci_03d1aead599faaaa20db83766e5f27924940d17b336a4773587b37fc0da43e92","title":"Add Host Records Manually","path":"/lrsiem/7.20.0/add-host-records-manually","children":[]},{"id":"ci_bad516ef735e8c87fc3bd27fb667e3e814d86b7ac660ba08cbece10a45b9c5c2","title":"Add Hosts From Clipboard","path":"/lrsiem/7.20.0/add-hosts-from-clipboard","children":[]},{"id":"ci_0aef3c7866cf3b9f6cf55c3ca42727d7ca68f7560774faf548928a0426e4673b","title":"Add Hosts From File","path":"/lrsiem/7.20.0/add-hosts-from-file","children":[]},{"id":"ci_182441bcc47382ecb891e35a9a23c0b8502d2804a80104c3b5e0697ab9a9514d","title":"Add Origin Hosts or Impacted Hosts as Known Hosts","path":"/lrsiem/7.20.0/add-origin-hosts-or-impacted-hosts-as-known-hosts","children":[]},{"id":"ci_bc133e7d0ffee824b346571bf54795de4766b514e711cb99ea6afd5a4f41d1ba","title":"Add or Remove Multiple Host Roles","path":"/lrsiem/7.20.0/add-or-remove-multiple-host-roles","children":[]},{"id":"ci_66557496a44ff5ec317d0082b213b49f244680f447e09b0d60081b4721bf51a8","title":"Export Multiple Host Roles to File","path":"/lrsiem/7.20.0/export-multiple-host-roles-to-file","children":[]},{"id":"ci_14e6f2cd1b62470195523718b5f66754a22f6ac12673cfe2ec600324ecb498f0","title":"Modify Properties for a Single Host Record","path":"/lrsiem/7.20.0/modify-properties-for-a-single-host-record","children":[]},{"id":"ci_11c2379bc4d6fdbccd1a33de771c490432c3c84c37700b411fc52d76fb5843e8","title":"Modify Properties for Multiple Host Records","path":"/lrsiem/7.20.0/modify-properties-for-multiple-host-records","children":[]},{"id":"ci_8f382c079e2f38714749fca3167d7a5e7221bd1076c80f88b131979718715e1a","title":"Resolve Known Hosts","path":"/lrsiem/7.20.0/resolve-known-hosts","children":[]},{"id":"ci_f2278b29425faadce2c9d923b83e1480f0388b20358482d628bfe065c3f5f684","title":"Retire Host Records","path":"/lrsiem/7.20.0/retire-host-records","children":[]},{"id":"ci_3d5a126e45251c9e0f2270fc2aadac7d1fc485d83f34b14ede93c765c8e4555c","title":"Search for Hosts","path":"/lrsiem/7.20.0/search-for-hosts","children":[]},{"id":"ci_328605c86cfe73909275f90ed05066b6cb64feff682216794db3e5c19a3b751e","title":"Windows Host Wizard","path":"/lrsiem/7.20.0/windows-host-wizard","children":[{"id":"ci_80951a3857096bdc0fe39c9c65e028b482c4c0091bf1e57f8d043120fe9a4424","title":"Configure Initial Host Settings in Windows Host Wizard","path":"/lrsiem/7.20.0/configure-initial-host-settings-in-windows-host-wizard","children":[]},{"id":"ci_ea3fda4eec7537bf876fb6be1c93b3dc86f64cc18d40a69f529224d7667f5e5a","title":"Import Computers for Log Collection","path":"/lrsiem/7.20.0/import-computers-for-log-collection","children":[]},{"id":"ci_77d485edfd30eecbcc33aac255b29a483550e3d5080cfe43033f649d45b80ede","title":"Perform Optional Configuration for Remote Log Collection","path":"/lrsiem/7.20.0/perform-optional-configuration-for-remote-log-collection","children":[]},{"id":"ci_1e310e0fbd13b47d485968d109b924041b04cc127c1bb4344b2f127f65bbf4da","title":"Query Computers with Windows Host Wizard","path":"/lrsiem/7.20.0/query-computers-with-windows-host-wizard","children":[]},{"id":"ci_291a4a2a80b9a2c32ef12eb3212e62ba572dc750714f0568ef75ce5e52f7edf9","title":"Review Computers with Windows Host Wizard","path":"/lrsiem/7.20.0/review-computers-with-windows-host-wizard","children":[]},{"id":"ci_654a3605e8b1daf9fbc9480151db07e862c93af5a2b92a187b485ab22c9bd431","title":"Scan a Domain for Computers","path":"/lrsiem/7.20.0/scan-a-domain-for-computers","children":[]},{"id":"ci_8bf58c73aa2ab11e3bca4c8de779c76ad621566d7022ba2eb92ae3632d8b0067","title":"Work with Hosts and Agents in Windows Host Wizard","path":"/lrsiem/7.20.0/work-with-hosts-and-agents-in-windows-host-wizard","children":[]}]}]},{"id":"ci_4468ab31d5becd1ac0b1dd9f3b7d343e491075fdce46cfa81f735576a45f8e9f","title":"Knowledge Base","path":"/lrsiem/7.20.0/knowledge-base","children":[{"id":"ci_7a8cb6802f35f5f47b60967f1505d0e1d0663515747e1c48bb55bb1ec7e731c4","title":"Back Up the EMDB","path":"/lrsiem/7.20.0/back-up-the-emdb","children":[]},{"id":"ci_ca7d81c3c23e3cff506fb9c8f9a0014fdc345ea063805f0394b6015ed5426c8b","title":"Configure Knowledge Base Synchronization Settings","path":"/lrsiem/7.20.0/configure-knowledge-base-synchronization-settings","children":[]},{"id":"ci_7163dbcefe7c8e846fb45e0b95d642f077901c37d8928063e74efe305c92ec13","title":"Download the Knowledge Base File","path":"/lrsiem/7.20.0/download-the-knowledge-base-file","children":[]},{"id":"ci_1a001996998989cd95a71597ec158c866936879d05a645ef17a1b15a9ea48932","title":"Import a Knowledge Base","path":"/lrsiem/7.20.0/import-a-knowledge-base","children":[]},{"id":"ci_baeca851a28ce25d47db26d594fcd8fc63d8849b163b66b411b7f8f83999e055","title":"Knowledge Base Manager","path":"/lrsiem/7.20.0/knowledge-base-manager","children":[{"id":"ci_0d452111cacb12b8ade8bd57e6eef873c88a44970f2834366f17657437a70831","title":"Disable Knowledge Base Modules","path":"/lrsiem/7.20.0/disable-knowledge-base-modules","children":[]},{"id":"ci_44dcb0cd6a644185ad5924a6db3cbee71089f55e98f8879ab3daa8c4e9cf8574","title":"Enable Knowledge Base Modules","path":"/lrsiem/7.20.0/enable-knowledge-base-modules","children":[]},{"id":"ci_1a5da4d6a2170ce248f54ed0dc37cc9ae3d2b9d8b4a9899f9a76bf1f67b241c8","title":"Export Knowledge Base Module Information to a File","path":"/lrsiem/7.20.0/export-knowledge-base-module-information-to-a-file","children":[]},{"id":"ci_7e870f11b76ed78ee0e03bcf40ac507b5a4d6cebfac32b67a75580d1cd9d2c5a","title":"Migrate Common Events","path":"/lrsiem/7.20.0/migrate-common-events","children":[]},{"id":"ci_af9bf2f8ff301823b6060bdca8fc96cf8671f824c5674b395d966e11bf305c09","title":"Modify the Properties of Knowledge Base Modules","path":"/lrsiem/7.20.0/modify-the-properties-of-knowledge-base-modules","children":[]},{"id":"ci_c91b7b9689e66da6a7d5ddd403199147caf04d41e8564a910ce9143b07333dd0","title":"View Knowledge Base Module Dependent Objects","path":"/lrsiem/7.20.0/view-knowledge-base-module-dependent-objects","children":[]}]}]},{"id":"ci_23b10894ff06715c297d258ad187fd78056ce36ff52ca20594754f345042765b","title":"Log Distribution Services","path":"/lrsiem/7.20.0/log-distribution-services","children":[{"id":"ci_633dd2e6bf33f604c73aa6c2d6e936444ec6fa3e040e34b34cd43b6e399cae33","title":"Log Distribution Receiver Manager","path":"/lrsiem/7.20.0/log-distribution-receiver-manager","children":[{"id":"ci_6221c9699e053ea3df86a3139d5fdaed55139adea02007de53e89fa70bd39f38","title":"Create Log Distribution Receivers","path":"/lrsiem/7.20.0/create-log-distribution-receivers","children":[]},{"id":"ci_eeb8227f3b031011adfb882c8362d8a5c0c25828fd2625e033b357bba8671a14","title":"Enable Log Distribution Receivers","path":"/lrsiem/7.20.0/enable-log-distribution-receivers","children":[]},{"id":"ci_d9232592dc9f9812d8df94629ce7d00e26b682d0633d9fe9585ba0b094062b0e","title":"Modify Log Distribution Receivers","path":"/lrsiem/7.20.0/modify-log-distribution-receivers","children":[]}]},{"id":"ci_338597d5faac46a8da98d85ced29bee3294c17f88b46f6321f92c5838546bda3","title":"Log Distribution Policy Manager","path":"/lrsiem/7.20.0/log-distribution-policy-manager","children":[{"id":"ci_1c9b04c005c6336fde3d4fcf9f4820bd8c6cb01824fe839c9cac66a31477bdfa","title":"Create Log Distribution Service Policies","path":"/lrsiem/7.20.0/create-log-distribution-service-policies","children":[]},{"id":"ci_7fb23322eec1d103fbce35bbf51f0b42c5d8a791fee49df37f65f36f391c747b","title":"Enable or Disable Log Distribution Service Policies","path":"/lrsiem/7.20.0/enable-or-disable-log-distribution-service-policies","children":[]},{"id":"ci_56346e44945ada314a641fb190f8236eb35da7d120c86a129c97e90e053b41a2","title":"Modify Log Distribution Service Policies","path":"/lrsiem/7.20.0/modify-log-distribution-service-policies","children":[]}]},{"id":"ci_d0a9564c5effe4c4a724b39fec382b096f8679d32da3d31075057a2663ae6383","title":"LogRhythm Log Distribution Services Version 2","path":"/lrsiem/7.20.0/logrhythm-log-distribution-services-version-2","children":[{"id":"ci_d9107f99d04a7bb5cdfdeff60516877382041d2ae2a69302ff37d8737677674d","title":"Determine When to Switch to Log Distribution Services v2","path":"/lrsiem/7.20.0/determine-when-to-switch-to-log-distribution-services-v2","children":[]},{"id":"ci_ef9de88a557314141ac2006edbf82cae1c5f83f25f0a4bac9817e208f06f8c97","title":"Enable Log Distribution Services v2","path":"/lrsiem/7.20.0/enable-log-distribution-services-v2","children":[]},{"id":"ci_0fad91b0ec1fc05c38b0b75205458d0363ed38760b9dbbcc44c4adbcf781529f","title":"Troubleshoot Log Distribution Services v2","path":"/lrsiem/7.20.0/troubleshoot-log-distribution-services-v2","children":[]}]},{"id":"ci_55d815d80f95ee366506caa39ba38a5b59e77c5a183799680aab7bb5d3761207","title":"Modify Log Distribution Service Properties in Data Processors","path":"/lrsiem/7.20.0/modify-log-distribution-service-properties-in-data-processors","children":[]}]},{"id":"ci_fdeabe3ca5dc2489e523c9de94de0740e5781e4525009cae3d830b2e260450a2","title":"Log Processing Policies","path":"/lrsiem/7.20.0/log-processing-policies","children":[{"id":"ci_415c28317217cca45b8f442780e2bbbfb600987004439a6c8cb1fdf0c3798850","title":"Create Log Processing Policies","path":"/lrsiem/7.20.0/create-log-processing-policies","children":[]},{"id":"ci_87eb8e3f2cb97c7428ab1274cc04cdad8637c5687add1d8cb4214b4a9b7b90d4","title":"Assign Log Processing Policies","path":"/lrsiem/7.20.0/assign-log-processing-policies","children":[]},{"id":"ci_ce80e621a80301b6f698ce7143b2f4c661dae5b97000f4ba2d685f89a2749b66","title":"Modify Log Processing Policies","path":"/lrsiem/7.20.0/modify-log-processing-policies","children":[]},{"id":"ci_52f1c2b9ac99c04db66e97e12187ea41039a4cb56ac4dcf22f749e45e2bf2900","title":"Delete Log Processing Policies","path":"/lrsiem/7.20.0/delete-log-processing-policies","children":[]},{"id":"ci_52549c777c4765e8128f848e88f7f3ba47edc0ccf0ff425e7be64a271932d354","title":"Troubleshoot MPE Rule Performance","path":"/lrsiem/7.20.0/troubleshoot-mpe-rule-performance","children":[]}]},{"id":"ci_c4cb7d18879044d78139a0326c599465bbc8ffbf7a0f6afb0ed304f7200501f4","title":"Log Sources","path":"/lrsiem/7.20.0/log-sources","children":[{"id":"ci_307c62c86b41ba237483b1db41138980a5becd22cbcc6085b5d83770783d4d92","title":"Work With Log Sources","path":"/lrsiem/7.20.0/work-with-log-sources","children":[{"id":"ci_4a41b56ad9f5bfde437203c3bcd8cea5b7bb9f626888e05990129f36348eaf00","title":"Add a Single Log Source","path":"/lrsiem/7.20.0/add-a-single-log-source","children":[]},{"id":"ci_68a2a284602b74d48d351e94df423f6a3ecfb58190fc9035a0e340a15fb97183","title":"Add Multiple Log Sources","path":"/lrsiem/7.20.0/add-multiple-log-sources","children":[]},{"id":"ci_c4914fea2bbc9ac5f4420d6c83d171c7f0f6780551ed0dff6c0640a209accaab","title":"Associate New Log Sources","path":"/lrsiem/7.20.0/associate-new-log-sources","children":[]},{"id":"ci_e9713a8f9956e128b68a7de51caaa410f253dc964acfbcadf48fb2a8f990203f","title":"Collect Local Event Logs with the Server Service Disabled","path":"/lrsiem/7.20.0/collect-local-event-logs-with-the-server-service-disabled","children":[]},{"id":"ci_23d3516384f5a042853ed89ec6d2b77ee2bc1e30a31d9512ffe1a62d39ffb3b2","title":"Configure Log Sources Automatically","path":"/lrsiem/7.20.0/configure-log-sources-automatically","children":[{"id":"ci_23efaee4241fa7af6bef5a6b117aa4968a7bcb5e4dab95ad16592f1c1959678b","title":"Add and Delete SNMP Connections","path":"/lrsiem/7.20.0/add-and-delete-snmp-connections","children":[]},{"id":"ci_22eea165052c9840b99161bb575556cb0be443ae684a2a5f98bf3378b21acae4","title":"Enable Automatic Log Source Configuration","path":"/lrsiem/7.20.0/enable-automatic-log-source-configuration","children":[]},{"id":"ci_1079a667bd6382983e9218accae856abf1d5aefdab02c85fd8d5f0d89d162386","title":"Use the Advanced Criteria Manager","path":"/lrsiem/7.20.0/use-the-advanced-criteria-manager","children":[]}]},{"id":"ci_58bb31a258588d8c57ac8daa1f861e591f2acea04df14a808df8001a29e79297","title":"Configure Support for Multi-Line Logs","path":"/lrsiem/7.20.0/configure-support-for-multi-line-logs","children":[]},{"id":"ci_8e42186a9932d721cd8ae1cc814d51719ecae4281a955bf7d0a86fae51496d3e","title":"Export Log Sources","path":"/lrsiem/7.20.0/export-log-sources","children":[]},{"id":"ci_9dd72b794fc8060b2d62f999a5d2e9115940b48bc8bf5929a585f7652e9ff268","title":"Modify a Single Log Source","path":"/lrsiem/7.20.0/modify-a-single-log-source","children":[]},{"id":"ci_fa6aac4f1afd28caf06b00440fced1e30f464688096b13c3f3f082bbffa6ef51","title":"Modify Event Settings","path":"/lrsiem/7.20.0/modify-event-settings","children":[]},{"id":"ci_26581beab5570bcc4e813fda4cc3383aeb43fd24d8ff895c103a545622094e35","title":"Modify Multiple Log Sources","path":"/lrsiem/7.20.0/modify-multiple-log-sources","children":[]},{"id":"ci_e235a5b148e674542b0cdb52beeebd289320897f32f52b7aee7bb890c3912919","title":"Move Log Sources to New Hosts","path":"/lrsiem/7.20.0/move-log-sources-to-new-hosts","children":[]},{"id":"ci_502a0a0425e1a10c994c6779c45fd35b99b82c6ddad113e79a8a45dcd08a2da1","title":"Preregister Log Sources","path":"/lrsiem/7.20.0/preregister-log-sources","children":[]},{"id":"ci_ca67908420afe8013595c54c0338a006530b888dfc1029b6551d5ebca0b0569c","title":"Resolve Log Source Hosts","path":"/lrsiem/7.20.0/resolve-log-source-hosts","children":[]},{"id":"ci_f20d7e66f25d4b0b7f15b2a41446a3728a49d6e23cb5b13959d7fd78c61c3571","title":"Retire or Activate Log Sources","path":"/lrsiem/7.20.0/retire-or-activate-log-sources","children":[]}]},{"id":"ci_e5c94df8e09ea5c37df4f0c4fb9f942b727713ba8333ce27cfe5f0a356175105","title":"Log Source Types","path":"/lrsiem/7.20.0/log-source-types","children":[{"id":"ci_cdffab25ca71a03368b8ba1e376a60eb8123884da9ff1e94ba3dedc59d2fc668","title":"Create Custom Log Source Types","path":"/lrsiem/7.20.0/create-custom-log-source-types","children":[]},{"id":"ci_de308e472f45b05751f7595d7ee2ed81864f457dec046bd6e909fdfafc6af822","title":"Delete Custom Log Source Types","path":"/lrsiem/7.20.0/delete-custom-log-source-types","children":[]},{"id":"ci_6a68be2d662be8d284799ec26bc05dc0eb1c0f0cc5dff32023f632c20167db83","title":"Modify Custom Log Source Type","path":"/lrsiem/7.20.0/modify-custom-log-source-type","children":[]},{"id":"ci_7ee9ade9f0d8e8b173ebc9a2fa4558d9446ec4c27d65564f504054d76abfbb5e","title":"Modify Type for Pending Log Source","path":"/lrsiem/7.20.0/modify-type-for-pending-log-source","children":[]}]},{"id":"ci_90ccd8dc3662a1f761f8f634a2b084aae1d6c9d022d1aac326951355d3af133f","title":"Data Masking","path":"/lrsiem/7.20.0/data-masking","children":[{"id":"ci_a8e62008b97903c59470d6ed52cb87ffe32c52bbc5e138fc18a741e4fca15db6","title":"Add New Data Masking Rules","path":"/lrsiem/7.20.0/add-new-data-masking-rules","children":[]},{"id":"ci_a73c3830a6b659a48d73f9ddcae0beabdd1091c47cf279ccdb7e027aba602cea","title":"Import and Export Data Masking Rules","path":"/lrsiem/7.20.0/import-and-export-data-masking-rules","children":[]},{"id":"ci_744fdd40e42ee367381d1ed2a9811445820fff093315a6413963188c5919767e","title":"Enable and Disable Data Masking Rules","path":"/lrsiem/7.20.0/enable-and-disable-data-masking-rules","children":[]},{"id":"ci_dc2ed95f865764d00bea3abea4222a8dd85a8f9312644606617621f8aa00139e","title":"Reorder Data Masking Rules","path":"/lrsiem/7.20.0/reorder-data-masking-rules","children":[]},{"id":"ci_c556e63be9cad58be796af96073c67c30374a6a96933fe26df6eca4ab9e95eb1","title":"Delete Data Masking Rules","path":"/lrsiem/7.20.0/delete-data-masking-rules","children":[]}]},{"id":"ci_4dccffaa2a82d33758f15bf498e950a7a2482bfaa7005717e2e7ab9d9260023b","title":"Log Source Identification and Acceptance","path":"/lrsiem/7.20.0/log-source-identification-and-acceptance","children":[{"id":"ci_a3a6f9649819dd5550e8651ee3e4c879f072fcd68afbee6a16cf0d78aed37613","title":"Accept New Log Sources","path":"/lrsiem/7.20.0/accept-new-log-sources","children":[]},{"id":"ci_5f2b9b34af078699ef83adb4bcf214174618e4f4a2b5618dfa42e8fbbe0adadf","title":"Accept New Log Sources Automatically","path":"/lrsiem/7.20.0/accept-new-log-sources-automatically","children":[{"id":"ci_6ae65485739ef29538e6550968661e5b9af5826bc40931c7ebedad2fcb1a06c9","title":"Create IP Range Log Source Acceptance Rules","path":"/lrsiem/7.20.0/create-ip-range-log-source-acceptance-rules","children":[]},{"id":"ci_9afe3c5416d3fc9ea9557c03719e21ce2138cc750044b9bebbc00bbf1d6eafa2","title":"Create Pattern Match Log Source Acceptance Rules","path":"/lrsiem/7.20.0/create-pattern-match-log-source-acceptance-rules","children":[]},{"id":"ci_61917c649ad69f3a285619552ce56ed5e8a4abb708a7444c2623b323480de672","title":"Manage Automatic Log Source Acceptance Rules","path":"/lrsiem/7.20.0/manage-automatic-log-source-acceptance-rules","children":[]}]},{"id":"ci_1b596fcf257b6862695820086aefb6338f0c8972a52f704cca6fef8f48c10f17","title":"Set the Log Source Identification Search Scope","path":"/lrsiem/7.20.0/set-the-log-source-identification-search-scope","children":[]},{"id":"ci_c5800f0290547e4f4785526ca33c7c023b061fec3ac87cd0a1f0cca36f0d94a9","title":"View Log Source Acceptance Properties","path":"/lrsiem/7.20.0/view-log-source-acceptance-properties","children":[]}]},{"id":"ci_ddc30639e6ebe4167eaf0ae657b8ba3dee63d3bc8ec0a47dface8e86215bb126","title":"Log Sources and Agents","path":"/lrsiem/7.20.0/log-sources-and-agents","children":[{"id":"ci_76f4f2fce21dd1d20b37bb358e0449a3c5e13c9264a133728baa6cd34ac81987","title":"Limit the Number of Agents Available for Batch Updates","path":"/lrsiem/7.20.0/limit-the-number-of-agents-available-for-batch-updates","children":[]},{"id":"ci_11f0224d087022c3e5d66d1e352e93aadaf495d7db3ec948f45795ce6d7d1a32","title":"Move Log Sources Between Agents","path":"/lrsiem/7.20.0/move-log-sources-between-agents","children":[]}]},{"id":"ci_cfcac0d12a808d3e1f550bf5ff110ca745f3cef0b5cfa89cf57afc82c2fbad78","title":"Flat File Collection","path":"/lrsiem/7.20.0/flat-file-collection","children":[{"id":"ci_3f6a83e6a2612fe12cddc332fb0a1d8a7ee920315be39f2971946ff03c6c1612","title":"Configure a Host for Local Flat File Collection","path":"/lrsiem/7.20.0/configure-a-host-for-local-flat-file-collection","children":[]},{"id":"ci_000a3e847c2d1f4d89ea40dc1545129b6188faae3653e2cba239679c8ecb8c4e","title":"Configure an Agent for IIS Log Collection","path":"/lrsiem/7.20.0/configure-an-agent-for-iis-log-collection","children":[]},{"id":"ci_1c77465428c507fc2e89b795a2646203bd05c8c70ca88135020fe8a34874db1e","title":"Convert Flat File to Epoch Time","path":"/lrsiem/7.20.0/convert-flat-file-to-epoch-time","children":[]},{"id":"ci_e3f3c37ab3182e36db369beabad1210bad922824b01d986c3435e9ae823ae87a","title":"Supported Date Parsing Formats","path":"/lrsiem/7.20.0/supported-date-parsing-formats","children":[]}]},{"id":"ci_0327db86e3006129f5f0f06dd9bdd4a4e983674c829582dbf51a565280eff622","title":"UDLA Collection","path":"/lrsiem/7.20.0/udla-collection","children":[{"id":"ci_57bdb7fce0a8fd887b6da63b084cbfbae3ea122fda4fbcdbf07b2af7a60ef488","title":"Configure UDLA Log Collection","path":"/lrsiem/7.20.0/configure-udla-log-collection","children":[]},{"id":"ci_0c0cb57efb5d003c5f64848937187d1348958609adddba77048e07074e510997","title":"Create a Sample McAfee ePolicy Orchestrator (ePO) Event Log Source","path":"/lrsiem/7.20.0/create-a-sample-mcafee-epolicy-orchestrator-epo-event-log-source","children":[]},{"id":"ci_76336007de99d390c32617108c4b1d5afbb4aa5373e2b180a23177c0b7a96d6b","title":"Create a Sample Oracle 10g Audit Trail UDLA Log Source","path":"/lrsiem/7.20.0/create-a-sample-oracle-10g-audit-trail-udla-log-source","children":[]},{"id":"ci_6f2eb50b3c7d36f38ea8daf09e18b532b260935eaa54a3594bbbb5bca7940494","title":"Export and Import UDLA Log Source Configurations","path":"/lrsiem/7.20.0/export-and-import-udla-log-source-configurations","children":[]},{"id":"ci_c163db8c6cd2b1a150a194a216979ab106f246c00f3868c6e64a4c145b68fd18","title":"Override UDLA SQL","path":"/lrsiem/7.20.0/override-udla-sql","children":[]}]},{"id":"ci_a1f68774f3a15dfb8874c43ccf6b21118eff4352523cfc4ee5a8b40866613c4f","title":"Log Source Virtualization","path":"/lrsiem/7.20.0/log-source-virtualization","children":[{"id":"ci_79b5e44c47a00d19c4c19843a0be4ae701679c95d07792ccfdd5ab65f8bead13","title":"Create Log Source Virtualization Templates","path":"/lrsiem/7.20.0/create-log-source-virtualization-templates","children":[]},{"id":"ci_48f9350e2087f48374d342d0de221bfb1e716578c830fad6f7453e308a38352f","title":"Create Virtual Log Sources","path":"/lrsiem/7.20.0/create-virtual-log-sources","children":[]},{"id":"ci_c9695f71e8ba66cbcb34408329c3607d3ed304fe49981ea3eb040cd4bcfe949c","title":"Delete Log Source Virtualization Templates","path":"/lrsiem/7.20.0/delete-log-source-virtualization-templates","children":[]},{"id":"ci_9c71a5e78328610b2262e83d97977c6a161ce81fd336e6016b96e7cc67e14376","title":"Delete Virtual Log Sources","path":"/lrsiem/7.20.0/delete-virtual-log-sources","children":[]},{"id":"ci_e79fb2706bfb085a8b0aa6aebe51e02857b26db363f05399f77b774a6812c77f","title":"Enable Virtualization on a Single Log Source","path":"/lrsiem/7.20.0/enable-virtualization-on-a-single-log-source","children":[]},{"id":"ci_c354b7fc888a39abbfc06ea5b725880e637576d5ba2c94066df8d5ec4d1b08e7","title":"Enable Virtualization on Multiple Log Sources","path":"/lrsiem/7.20.0/enable-virtualization-on-multiple-log-sources","children":[]},{"id":"ci_31fef1ea4e5c1c96d7460091f34b481988850b37587abb4c4d3df6bdc237ecc8","title":"Export Log Source Virtualization Templates","path":"/lrsiem/7.20.0/export-log-source-virtualization-templates","children":[]},{"id":"ci_11de41eb3e203aa33114593701941cd30738c904225bc930a994ad6bcd730a55","title":"Filter Virtual Logs at the Agent","path":"/lrsiem/7.20.0/filter-virtual-logs-at-the-agent","children":[]},{"id":"ci_f371f2af54036a662cc636f444cc0bdeb3f6935f68ebb0f5e2aea77af94d9c12","title":"Import Log Source Virtualization Templates","path":"/lrsiem/7.20.0/import-log-source-virtualization-templates","children":[]},{"id":"ci_f35b3ca04156280488538c5f624758affa7b68542aace1d6c321f3d7f3a35b82","title":"Modify Catch-All Sources on a Batch of Parent Log Sources","path":"/lrsiem/7.20.0/modify-catch-all-sources-on-a-batch-of-parent-log-sources","children":[]},{"id":"ci_ae14183ea67dedceef476e51e925bf419aac0e406abdd5c067ddd9bb5faee61f","title":"Modify Log Source Virtualization Templates","path":"/lrsiem/7.20.0/modify-log-source-virtualization-templates","children":[]},{"id":"ci_0e8911fefeacd6b46c31ed2bba1d93ba2269fe8c9b99dd2d30e60542b8c45a91","title":"Modify Virtual Log Sources","path":"/lrsiem/7.20.0/modify-virtual-log-sources","children":[]}]}]},{"id":"ci_a60efc7d59ed66c9b3360fc14fd093308ba96ab9ab051cbf3f136f5c17516d35","title":"Network Monitor","path":"/lrsiem/7.20.0/network-monitor","children":[{"id":"ci_f41b969203362fd8f81f4ee7fa8ef44c814a8019a8e4211dd58a46654d092e07","title":"Add NetMon in the Client Console","path":"/lrsiem/7.20.0/add-netmon-in-the-client-console","children":[]},{"id":"ci_8f8732c3335560ca49003e330e5fd7779b41660bc6b210d0d202b8680a3ab2b5","title":"Configure NetMon in the Client Console","path":"/lrsiem/7.20.0/configure-netmon-in-the-client-console","children":[]},{"id":"ci_c53cb2cd89d3199e6ea0f6eb43214b153ab7ade5f8fb34fd616e882730e1c8b3","title":"Delete NetMon in the Client Console","path":"/lrsiem/7.20.0/delete-netmon-in-the-client-console","children":[]},{"id":"ci_052bf80cb2bf0f5ee5aa08c72a49f51466758699fa5a41f203b5ec56630f00d2","title":"Modify NetMon in the Client Console","path":"/lrsiem/7.20.0/modify-netmon-in-the-client-console","children":[]},{"id":"ci_33f8225e3ac26e0dd33fba546a8b8d1c106db9c2a8b9bde7c79521ef746af8de","title":"Monitor NetMon in the Client Console","path":"/lrsiem/7.20.0/monitor-netmon-in-the-client-console","children":[]}]},{"id":"ci_bbc74136db3143ed944e1905ff04e9574d10cf158b81eaa913d438782220a686","title":"Network Records","path":"/lrsiem/7.20.0/network-records","children":[{"id":"ci_497c0b426496ebe96c9979f10279a72b99d4bc9b14497e472955934bd5fccb90","title":"Add Network Records from File","path":"/lrsiem/7.20.0/add-network-records-from-file","children":[]},{"id":"ci_14f844665dd7b06e126e85c2f07fa0ee4af83a9db4902162e74b4e363cb1438b","title":"Manually Add Network Records","path":"/lrsiem/7.20.0/manually-add-network-records","children":[]},{"id":"ci_7a1378df76d856783358713613f7c6c16c5f142a840e052a4dac3e53cee6a921","title":"Modify Properties for a Single Network","path":"/lrsiem/7.20.0/modify-properties-for-a-single-network","children":[]},{"id":"ci_93551970a3f0dc8f20eece19d290ad40ecdc4a88c2bc6bc50d878172dbf73d07","title":"Modify Properties for Multiple Network Records","path":"/lrsiem/7.20.0/modify-properties-for-multiple-network-records","children":[]},{"id":"ci_d5c3bb1f52dea66113fa723866c31283b52406470f2f954e87971bf079f443a4","title":"Resolve Known Networks","path":"/lrsiem/7.20.0/resolve-known-networks","children":[]},{"id":"ci_357ee0a4c5c1f3ab89e5f64c31a961e8b007461240707fc3f33e9a6527041ac2","title":"Retire Network Records","path":"/lrsiem/7.20.0/retire-network-records","children":[]},{"id":"ci_5489e43b6f7f3739c1a00548a3e707f282efc3e46e89cffda8fbdedced77966c","title":"Search for Networks","path":"/lrsiem/7.20.0/search-for-networks","children":[]}]},{"id":"ci_a25b3124d68425d9f229ce10195b1b0f73f8f17795e44a65471ad5f1531848dc","title":"Object Permissions Manager","path":"/lrsiem/7.20.0/object-permissions-manager","children":[{"id":"ci_b7399688b9843a83448c65a1694f417510d4b86ef920a8dcf83b89ada3d7c0f3","title":"Modify Objects' Security Settings","path":"/lrsiem/7.20.0/modify-objects-security-settings","children":[]}]},{"id":"ci_83c711a4c0287d42c73b54ca82496a29092fdaebe08606bde06464c56283bccf","title":"People and Users","path":"/lrsiem/7.20.0/people-and-users","children":[{"id":"ci_2df1785b7cd7e39e9cc22b9fcceba067e4f07db9df37cbac04cced4586433d72","title":"Add Person Records or Roles","path":"/lrsiem/7.20.0/add-person-records-or-roles","children":[]},{"id":"ci_e5f6c997e80af04d7308f93c76314aca820089c8f3aefb66951ef91cc58e2b0d","title":"Assign Active Directory Credentials to Local Users","path":"/lrsiem/7.20.0/assign-active-directory-credentials-to-local-users","children":[]},{"id":"ci_a65d0ea2d7bc01d1ebb0cc7591b7a5f4752ddfe14897bc167a59d4d06e3c40bf","title":"Create User Accounts for Person Records or Roles","path":"/lrsiem/7.20.0/create-user-accounts-for-person-records-or-roles","children":[]},{"id":"ci_40d454261f08b36a70200b7fa3a468ba09bdc74c849b5b8bd948b3527c822aeb","title":"Direct Requests to the Case API URL","path":"/lrsiem/7.20.0/direct-requests-to-the-case-api-url","children":[]},{"id":"ci_7f54332901fbd18dc89739ceff0e3f6c199031ab339f6b2b9e91ff39eea0b8fc","title":"Disable Person Records or Roles","path":"/lrsiem/7.20.0/disable-person-records-or-roles","children":[]},{"id":"ci_973ef127580dd20d811a689741c9ec01eadc2413924c749874281ab46cf9e35f","title":"Modify Logins for Person Records or Roles","path":"/lrsiem/7.20.0/modify-logins-for-person-records-or-roles","children":[]},{"id":"ci_0e0735599c4348a796b2ffd0e5603348363e9c766308d02a950c79698aa21fcf","title":"Modify Person Records or Roles","path":"/lrsiem/7.20.0/modify-person-records-or-roles","children":[]},{"id":"ci_37bf0da6968935522522c75242f918c0341f513caa39d90bb62d037eef6bd613","title":"Rename LogRhythm Users","path":"/lrsiem/7.20.0/rename-logrhythm-users","children":[]},{"id":"ci_c7dea06bd41b5bc0927997781fa78fb62859ffa0513bb3b4e01040295e2a1a31","title":"Reset Multi-Factor Authentication Access to the Web Console","path":"/lrsiem/7.20.0/reset-multi-factor-authentication-access-to-the-web-console","children":[]},{"id":"ci_09118f43ce720eed6b1350315d1e8f55b51a11e1c2d18def43fe009a9be364c1","title":"User Profile Manager","path":"/lrsiem/7.20.0/user-profile-manager","children":[{"id":"ci_d39a6683e4678ee15a3ea8450e2e27877ac21e0fedaf897e8bdfa6249809e9d0","title":"Create a New User Profile","path":"/lrsiem/7.20.0/create-a-new-user-profile","children":[]},{"id":"ci_36d9ea0da8afca20b04f134cd188ae41400a1ddf163cc67286717ebc7305ea6d","title":"Manage User Profile SmartResponse Access Rights","path":"/lrsiem/7.20.0/manage-user-profile-smartresponse-access-rights","children":[]},{"id":"ci_0a1258ba79b70608f6200eff9178333582cac033a4739239bf79c75879dbe13f","title":"Modify User Profile Data Processor Access Rights","path":"/lrsiem/7.20.0/modify-user-profile-data-processor-access-rights","children":[]},{"id":"ci_146bf2d68811c9738cfc74eb7e9055d5122335ff9693347f28c242b17dbcf01c","title":"Modify User Profile Effective Log Sources Settings","path":"/lrsiem/7.20.0/modify-user-profile-effective-log-sources-settings","children":[]},{"id":"ci_c759591b947997f756834809ca6500e7497e8147fe80f78c2da2ad83d28cd417","title":"Modify User Profile Entities Settings","path":"/lrsiem/7.20.0/modify-user-profile-entities-settings","children":[]},{"id":"ci_c412e5f4e929ef1da2e300c941a5a540753762c297fdaebe709f7b0475823d45","title":"Modify User Profile General Settings","path":"/lrsiem/7.20.0/modify-user-profile-general-settings","children":[]},{"id":"ci_5750c1dc66b30b49fcba6ea0a1fcaebbd825f4fbffdef813162ebfb12e534765","title":"Modify User Profile Log Sources Access Rights","path":"/lrsiem/7.20.0/modify-user-profile-log-sources-access-rights","children":[]},{"id":"ci_2be672dae5dce2d91c4558d0dfa425bd19caa961450815e2b74420813783e6c1","title":"Manage User Profile Notification Group Access Rights","path":"/lrsiem/7.20.0/manage-user-profile-notification-group-access-rights","children":[]},{"id":"ci_f8fdc64948ae9ccdde217ed4db05b08ab6cfd2154f898dca38213e130faaf0be","title":"Modify User Profile Management Permissions","path":"/lrsiem/7.20.0/modify-user-profile-management-permissions","children":[]}]}]},{"id":"ci_0ad679b7e952d2fe43ae5c840d96cba5aa6fb2fce2ffc6bf9fad9c64c1fc2396","title":"Platform Manager","path":"/lrsiem/7.20.0/platform-manager","children":[{"id":"ci_5702fcd9e1e9237beb53e364de1f96ff52a486d5d7e9e268c23fd2c688465019","title":"Alarming, Reporting, and Response Manager Services","path":"/lrsiem/7.20.0/alarming-reporting-and-response-manager-services","children":[{"id":"ci_3789d4378fd99914a8a7962914cd22a74d5fce88ccee27615f6eb8f056a27b68","title":"Apply Recommended Platform Manager Values","path":"/lrsiem/7.20.0/apply-recommended-platform-manager-values","children":[]},{"id":"ci_3f4b79cf4c3738e11db6dc3a511da3350710e6feb1c1bafb32d278751b113f1f","title":"Integrate LogRhythm and McAfee ePolicy Orchestrator","path":"/lrsiem/7.20.0/integrate-logrhythm-and-mcafee-epolicy-orchestrator","children":[]},{"id":"ci_bbe117b98d7fbe3bc77d0a54730b28780e6f6a9ea7bd9612895c8bfcc6ea83a2","title":"Modify Platform Manager Advanced Properties","path":"/lrsiem/7.20.0/modify-platform-manager-advanced-properties","children":[]},{"id":"ci_4500ec5f8218949dcfe9383908bff77c11c4f2ac720a1da3391764fe04ebaeeb","title":"Modify Platform Manager Basic Properties","path":"/lrsiem/7.20.0/modify-platform-manager-basic-properties","children":[]},{"id":"ci_5c8f928cb78a503ee56f9d5461b7d79259a173a01d72eb9df530a130d9479517","title":"Revert to a Previous Platform Manager Configuration","path":"/lrsiem/7.20.0/revert-to-a-previous-platform-manager-configuration","children":[]},{"id":"ci_cb3c17891fabac1f76ea68876df3ceb9819f0b51217fffaa1ca8a8af3277880a","title":"Specific SMTP Servers to Allow for Failover","path":"/lrsiem/7.20.0/specific-smtp-servers-to-allow-for-failover","children":[]},{"id":"ci_1bd74994068b18d6ac328f19f0a9718f1fb08887424fbe04ad2617ea4d3a29ba","title":"Start, Stop, and Restart Platform Manager Services","path":"/lrsiem/7.20.0/start-stop-and-restart-platform-manager-services","children":[]}]},{"id":"ci_900564b43c1a82199b210b6a7edb99a313684c6bce6004356c2a5dd414db04a0","title":"Global Risk Based Priority","path":"/lrsiem/7.20.0/global-risk-based-priority","children":[{"id":"ci_69a4b95754244158cabbc53a8f8255f0ec9c2433c7698a2d26a1ad77fab36785","title":"Determine the MPE RBP Manually","path":"/lrsiem/7.20.0/determine-the-mpe-rbp-manually","children":[]},{"id":"ci_9c637d67f7520ca2296498d00e2a4d4f30a4a7e01d17f020890961b21b3ac613","title":"Modify AIE Risk Based Priority Settings","path":"/lrsiem/7.20.0/modify-aie-risk-based-priority-settings","children":[]},{"id":"ci_ad8c430ea75bf12d81955afa2371dac683086f1bfedce9d122e30aa9fa2c47d5","title":"Modify the Default Destination Risk Level","path":"/lrsiem/7.20.0/modify-the-default-destination-risk-level","children":[]},{"id":"ci_9587939b3cad8397ebe32fb8cf2d22fcfdd94257cbc294821d63f14fc09e8938","title":"Modify the Default Source Threat Level","path":"/lrsiem/7.20.0/modify-the-default-source-threat-level","children":[]},{"id":"ci_b15f7121f4d2b8dafd8842a8d3a0af34d4cf6a5382eb0da482e3e8fbbc1611fe","title":"Modify the MPE Risk Based Priority Settings","path":"/lrsiem/7.20.0/modify-the-mpe-risk-based-priority-settings","children":[]},{"id":"ci_0e7a4c137803772628552b29eeff37a3434178885e0980b8f4ea0d6c0b10d528","title":"Risk Based Priority Calculator","path":"/lrsiem/7.20.0/risk-based-priority-calculator","children":[{"id":"ci_cf649800ae1be6b3c8804b6a9fb7cd69178bf8f43270e868ca1f5863ad9b3c5b","title":"Install the RBP Calculator","path":"/lrsiem/7.20.0/install-the-rbp-calculator","children":[]},{"id":"ci_7a0ed5133624adc0eb0d9dc51426e9608a9bc4925eccd36f81665bcee2a2f47c","title":"Determine MPE or AIE Risk Based Priority With The RBP Calculator","path":"/lrsiem/7.20.0/determine-mpe-or-aie-risk-based-priority-with-the-rbp-calculator","children":[]},{"id":"ci_47263396dcf2bc2c933633d457e8a57c73149304b43fc0925a35d1ecf97691cf","title":"Transfer AIE RBP Calculator Values to a LogRhythm Deployment","path":"/lrsiem/7.20.0/transfer-aie-rbp-calculator-values-to-a-logrhythm-deployment","children":[]},{"id":"ci_a508dea2bf500a8171fedbe86a45e640db2fa76da8d4d44905999ce6fd5ad437","title":"Host, Network, and Default DRL and STL Settings","path":"/lrsiem/7.20.0/host-network-and-default-drl-and-stl-settings","children":[{"id":"ci_916b91df9ab1f2fd1143fd840bb47c94d2dbb1bffbd2661991b24c299fef1e1e","title":"Known Host and Network Search Algorithm","path":"/lrsiem/7.20.0/known-host-and-network-search-algorithm","children":[]}]},{"id":"ci_8de42f27ff81aa8072fb35e95a0a19006036aa577d8421153c8a2ef54aefb0b3","title":"Message Processing Engine RBP Algorithm","path":"/lrsiem/7.20.0/message-processing-engine-rbp-algorithm","children":[]},{"id":"ci_1a5910f2accb431d963a073af9488164bce373a0fc82d98beb70d23414614404","title":"AI Engine RBP Algorithms","path":"/lrsiem/7.20.0/ai-engine-rbp-algorithms","children":[]}]}]},{"id":"ci_7c4dcebefaae9f6634d8f5ec28cfa167c2e5f98716bbd2b8a540e1862d1d6e9a","title":"Job Manager Services","path":"/lrsiem/7.20.0/job-manager-services","children":[{"id":"ci_169b8899725b9b2dbdb133ba22c7f32eeb0fd1e4d67b1fde14e25fe7e5b83cca","title":"Modify Job Manager Advanced Properties","path":"/lrsiem/7.20.0/modify-job-manager-advanced-properties","children":[]},{"id":"ci_90f25514d51ced464cc1bc0dbc56f79a565b814fadbcfdf13340142a53a9b2d9","title":"Modify Job Manager Basic Properties","path":"/lrsiem/7.20.0/modify-job-manager-basic-properties","children":[]},{"id":"ci_127498f57942188e5e1b17abaed18a6daf80c8d1d3b3e461bd168ac8f4a99a51","title":"Start, Stop, and Restart Job Manager Services","path":"/lrsiem/7.20.0/start-stop-and-restart-job-manager-services","children":[]},{"id":"ci_bc36f0a038b50ca1c4f438010b08fa9971141916365d6e429d982636c2b66bc2","title":"Use the Job Manager Configuration Manager","path":"/lrsiem/7.20.0/use-the-job-manager-configuration-manager","children":[]}]},{"id":"ci_464d3869db03d3fa0d29e50bb4c8675007bdaadde4056b1e787ebc20500b376f","title":"System Management Settings","path":"/lrsiem/7.20.0/system-management-settings","children":[{"id":"ci_7966a7831d90a4e29a0187ab3f0824fdabd74033b5d867d10a4ea86f51f4b1f0","title":"Active Directory Domain Manager","path":"/lrsiem/7.20.0/active-directory-domain-manager","children":[{"id":"ci_18597c7273d03864f60f07d4c496511e424e063af3be8e8ab9fd46eb046dc2e9","title":"Add Active Directory Groups as Filters","path":"/lrsiem/7.20.0/add-active-directory-groups-as-filters","children":[]},{"id":"ci_ee0112999d6b59185b5020852d42f0ee7131311e99e27fcd55a4a442fcfd289d","title":"Add New Active Directory Domains","path":"/lrsiem/7.20.0/add-new-active-directory-domains","children":[]},{"id":"ci_03a8976ed2e7315c3fa469dfd10445788d145c0ddbabbb8679ddbafa5b7d72ff","title":"Check the Active Directory Synchronization Status","path":"/lrsiem/7.20.0/check-the-active-directory-synchronization-status","children":[]},{"id":"ci_cbe8f54459e3d1af7d636a76cd821bc2775a07b4e349d874af0105556361378d","title":"Modify Active Directory Domains","path":"/lrsiem/7.20.0/modify-active-directory-domains","children":[]},{"id":"ci_1f5ee9230fa920fffdfdb88e6180bf42b7aeeb39dfb86218a74b5be72abef860","title":"Retire or Activate Active Directory Domains","path":"/lrsiem/7.20.0/retire-or-activate-active-directory-domains","children":[]},{"id":"ci_3e12d221ee175538daf3edfe38a788215889d9bfb877acd23d7105c643ceece8","title":"Run Active Directory Browser Investigations","path":"/lrsiem/7.20.0/run-active-directory-browser-investigations","children":[]}]},{"id":"ci_716f1955afcc862d365b9a48b28f1538eb4015c5ec7bc38bf5c952d3a020944c","title":"Configure Global Maintenance Settings","path":"/lrsiem/7.20.0/configure-global-maintenance-settings","children":[]},{"id":"ci_4253782f80193266edc3a11d2b5f7058e541d3eb60cffe57af0abbd9c63d5b6a","title":"Set or Modify Data Management Settings","path":"/lrsiem/7.20.0/set-or-modify-data-management-settings","children":[]},{"id":"ci_e96630f4e3503fabd56556f0a1980c35566bd7757088fa7b1a88ef2d37d01217","title":"Enable Intelligent Indexing Globally","path":"/lrsiem/7.20.0/enable-intelligent-indexing-globally","children":[]}]},{"id":"ci_3886ba1774be2976856bf60b5d365db4aff6b84d3af6f3884bfaa4a5d2595e2a","title":"Update the IP Address of the Platform Manager","path":"/lrsiem/7.20.0/update-the-ip-address-of-the-platform-manager","children":[]},{"id":"ci_486837f5442a51034ce0b8276592f870ca9258b829b0f7df2095f5f2dc729151","title":"Use the Platform Manager Configuration Manager","path":"/lrsiem/7.20.0/use-the-platform-manager-configuration-manager","children":[]}]},{"id":"ci_72c5e73bceb8583f1698e66b2ba6c9ae500a05a280f3fe861bfec861c73da2db","title":"SmartResponse","path":"/lrsiem/7.20.0/smartresponse","children":[{"id":"ci_be6f74d91a700d63bd735c67d62acb828e982314e88800024ec93b705c9f1b3a","title":"Approve or Deny SmartResponse Actions in the Client Console","path":"/lrsiem/7.20.0/approve-or-deny-smartresponse-actions-in-the-client-console","children":[]},{"id":"ci_9938ab5439880002473dd3fe14efe1b43be288ff8190188c4d6e06142aeafea2","title":"Develop SmartResponse Plugins","path":"/lrsiem/7.20.0/develop-smartresponse-plugins","children":[{"id":"ci_bbf633d8924089f89decafcb48cdee9d94b3fbd350c7c8537b3c165b24d9f5d6","title":"Create the Payload","path":"/lrsiem/7.20.0/create-the-payload","children":[]},{"id":"ci_ca1bcbc2a6c263d44fed6a0a566475f7020981663e284f52001ab37372ca3d75","title":"Create the Configuration File","path":"/lrsiem/7.20.0/create-the-configuration-file","children":[]},{"id":"ci_7f662eeaa7eca3cc48a8e07064067709e177543b05862b6664e6cb181f1d3479","title":"Package and Test the SmartResponse","path":"/lrsiem/7.20.0/package-and-test-the-smartresponse","children":[]},{"id":"ci_a9e14637c8257be40e3aa3dfaa008d8d851dae60c3e79de00d1fdc94dc4f63e2","title":"Deploy Custom SmartResponse Plugins","path":"/lrsiem/7.20.0/deploy-custom-smartresponse-plugins","children":[]}]},{"id":"ci_c7f3fcea70dd864cf317a1d59395731f0cffe76f28385acfe5ad1ccff12d2dca","title":"Import SmartResponse Plugins","path":"/lrsiem/7.20.0/import-smartresponse-plugins","children":[]},{"id":"ci_cf80e2a25edd1675a356185fa925baf23cf7c71a283730f4b4626b21676182cb","title":"Initiate SmartResponse","path":"/lrsiem/7.20.0/initiate-smartresponse","children":[]},{"id":"ci_2f9be64e3890a8194ae325ff9e764ba8989ca9d67081df4c9c64b984b0cf8dd8","title":"Preview SmartResponse Command Execution","path":"/lrsiem/7.20.0/preview-smartresponse-command-execution","children":[]},{"id":"ci_526bd214eefdb50dd75c90f9cdd57901597bd0271a1c9853ed6ca9caa49cb5af","title":"Test SmartResponse Plugin Actions","path":"/lrsiem/7.20.0/test-smartresponse-plugin-actions","children":[]},{"id":"ci_9c2166319d6140a92c2df2b114bbafd62f3909335633e2ae019d5992905c3689","title":"Troubleshoot SmartResponse Action Testing","path":"/lrsiem/7.20.0/troubleshoot-smartresponse-action-testing","children":[]},{"id":"ci_32d9df06c4e7a0d492f938805d9e0f1eea7f5e8cad2db797ae80fc90c3e0399f","title":"Validate SmartResponse Plugins","path":"/lrsiem/7.20.0/validate-smartresponse-plugins","children":[]}]},{"id":"ci_1e0b8b6113e51dce149e557706c3fa8dd3ba9e98f8ea2085a51cb88086212bd8","title":"System Monitor","path":"/lrsiem/7.20.0/system-monitor","children":[{"id":"ci_f045909b096265795f22b1d2ff353e3f23c5b05609a99a853ecc2a5361fa659a","title":"Agent Identification and Acceptance","path":"/lrsiem/7.20.0/agent-identification-and-acceptance","children":[{"id":"ci_ae7cea630b9bb5f4e9cce9cbd87551671250648fa9cc47f7f8b721ce27fb0083","title":"Accept a New System Monitor","path":"/lrsiem/7.20.0/accept-a-new-system-monitor","children":[]},{"id":"ci_b22b495e80a29aa002374d8ffb4fb3964536580f95e13d71e592c872ab669b3e","title":"Associate a System Monitor Agent","path":"/lrsiem/7.20.0/associate-a-system-monitor-agent","children":[]},{"id":"ci_4ffe5ab26406ed8364a9ce10fec8dfb80e49b40d24ec33fb8b06413719971325","title":"Work With New System Monitors","path":"/lrsiem/7.20.0/work-with-new-system-monitors","children":[]}]},{"id":"ci_4e46331543cec92c039f6fe0ddd7152fdc720f8023698fea63248e3ff4b23a33","title":"NetFlow, IPFIX, and J-Flow Collection","path":"/lrsiem/7.20.0/netflow-ipfix-and-j-flow-collection","children":[{"id":"ci_aed7848676fcb86fb4a000a77f0838fbeb870ee02cc535c640807006afac5feb","title":"Configure a Device or Host for NetFlow, IPFIX, or J-Flow Collection","path":"/lrsiem/7.20.0/configure-a-device-or-host-for-netflow-ipfix-or-j-flow-collection","children":[]},{"id":"ci_c15f504358516b485200d139aa743e34a70ed26f70c0ac7c23f644d603044335","title":"Customize IPFIX Logs","path":"/lrsiem/7.20.0/customize-ipfix-logs","children":[]}]},{"id":"ci_a7cc7c9f535f5d76c4497f2fa31367599bc99cd922c746a0663033c84bad33b5","title":"Work With System Monitor Agents","path":"/lrsiem/7.20.0/work-with-system-monitor-agents","children":[{"id":"ci_aa05c135456fee76b054a9ee2777321b7c9265b2d993dfe54cc504afb95996c2","title":"Add System Monitors","path":"/lrsiem/7.20.0/add-system-monitors","children":[]},{"id":"ci_046f68a119e703e1cea1fd19b146f34e61419a6e54720064349b03b4f6abd2bc","title":"Configure the scsm Service","path":"/lrsiem/7.20.0/configure-the-scsm-service","children":[]},{"id":"ci_a3380a694dc92703d49f40010d0466ff7a42ac907efcbdebb2a2e6a6b24e0032","title":"Connect System Monitor Agents to Different Entities","path":"/lrsiem/7.20.0/connect-system-monitor-agents-to-different-entities","children":[]},{"id":"ci_727c6a79d2a2a32347b9935353566b0488ec469c076e07832aa0e0ca058528da","title":"Connect System Monitor Agents to New Data Processors","path":"/lrsiem/7.20.0/connect-system-monitor-agents-to-new-data-processors","children":[]},{"id":"ci_2175ec1a49d12cefb3b30aaa8f5cb5549d16056bcbc9bf708eeb8bb59ec2dd90","title":"Connect System Monitor Agents to Existing Data Processors","path":"/lrsiem/7.20.0/connect-system-monitor-agents-to-existing-data-processors","children":[]},{"id":"ci_7fe07dee739fc371a034cdfc39f80f7b3d36c69bb8fbd8269bb6dff9ab459e8e","title":"Data Processor Pooling","path":"/lrsiem/7.20.0/data-processor-pooling","children":[{"id":"ci_acb44741a25809ab24c737f4eb0230ce692658b16abd72ee7f7b522996a7b9c7","title":"Data Processor Pool Manager","path":"/lrsiem/7.20.0/data-processor-pool-manager","children":[]},{"id":"ci_996c73a2c8014586cbf7cb94e8114c73b275c5d10db72ce3751e0da66c25d6d0","title":"Assign a Data Processor to a DP Pool","path":"/lrsiem/7.20.0/assign-a-data-processor-to-a-dp-pool","children":[]},{"id":"ci_a6bc1c1355c0ed263835148cd10ae04c603b04d3b57205639879658f7893d721","title":"Remove a Data Processor from a DP Pool","path":"/lrsiem/7.20.0/remove-a-data-processor-from-a-dp-pool","children":[]},{"id":"ci_fed7739a5ad901faf676d24e2ce4e9679a58e2d32d76a02d319c4188d600e19c","title":"Configure a System Monitor Agent into DP Pool Mode","path":"/lrsiem/7.20.0/configure-a-system-monitor-agent-into-dp-pool-mode","children":[]},{"id":"ci_13b50d7bba31483b5ab06008b522dfb2c8947bf1d044f6668581b86d66cd96d8","title":"Edit System Monitor Data Processor Settings","path":"/lrsiem/7.20.0/edit-system-monitor-data-processor-settings","children":[]},{"id":"ci_4304c2835c6e985c32d9b0bb60a30ec8206706b2a247c258054c6cdedf7b4011","title":"Assign a DP Pool to a System Monitor Configuration Policy","path":"/lrsiem/7.20.0/assign-a-dp-pool-to-a-system-monitor-configuration-policy","children":[]}]},{"id":"ci_027d15db0bffe58c70302865c5623364403e3adba49b7a63b481000039cfd175","title":"License System Monitors","path":"/lrsiem/7.20.0/license-system-monitors","children":[]},{"id":"ci_a12d1a94452c94d68a9f96d7d05a7243fd07392612b0cdff236b72fd74b62fe0","title":"Load Balanced Agent Groups","path":"/lrsiem/7.20.0/load-balanced-agent-groups","children":[{"id":"ci_c2aa6d858c0f941def75c052e6d8fd94297cf8f94fbdf9d605dcd6817d8df83c","title":"Load Balanced Group Manager","path":"/lrsiem/7.20.0/load-balanced-group-manager","children":[]},{"id":"ci_8b3b32a6d28342a94ba1bf48fcf12fe4822d26d36a85a4526cdc4ab3502a1bf8","title":"Assign Agents to a Load Balanced Group","path":"/lrsiem/7.20.0/assign-agents-to-a-load-balanced-group","children":[]}]},{"id":"ci_6fe3f8a5f8dd1d5900b2ac654eca126a19905d75973d6f57ebc6182425c8727b","title":"Modify System Monitor Basic Properties","path":"/lrsiem/7.20.0/modify-system-monitor-basic-properties","children":[]},{"id":"ci_a5d2f264b09a1e138b089b5c813a258f78da7b77c75a60d3fcd02ceb9f3fe7ef","title":"Modify System Monitor Advanced Properties","path":"/lrsiem/7.20.0/modify-system-monitor-advanced-properties","children":[]},{"id":"ci_c871495e85c5b47c076d4464b9e85fc7045eb7d9edbc7eb206bafbf345227046","title":"Modify Properties of Multiple System Monitor Agents","path":"/lrsiem/7.20.0/modify-properties-of-multiple-system-monitor-agents","children":[]},{"id":"ci_7711ec0c0f4164cb4a7fe51d274d0b97e34b52f5409de7a3942c6700b06c8eb5","title":"Modify System Monitors","path":"/lrsiem/7.20.0/modify-system-monitors","children":[]},{"id":"ci_929ede0f0bf9e04a66e7f9780887cd0a357b811dda94a0f2f351ab61dbe73686","title":"Configure a Secure Syslog Agent","path":"/lrsiem/7.20.0/configure-a-secure-syslog-agent","children":[]},{"id":"ci_564cbdd6fc165b06a08be9c7a4f588c2f72bfdee0ab32f945e6d7324f9c7c0f1","title":"Retire or Activate System Monitor Agents","path":"/lrsiem/7.20.0/retire-or-activate-system-monitor-agents","children":[]},{"id":"ci_0e52b87b42d4052336a7fb9a2189110cdf1f81b36d6bc04d20a751e0e73626de","title":"Revert System Monitor Agents to Previous Configurations","path":"/lrsiem/7.20.0/revert-system-monitor-agents-to-previous-configurations","children":[]},{"id":"ci_655fabc5e3f2699fc3270e5931b3feafead080f3129c09df38ce2e54f12b1939","title":"Startup and Shutdown System Monitors on Linux","path":"/lrsiem/7.20.0/startup-and-shutdown-system-monitors-on-linux","children":[]},{"id":"ci_f09739143d1f2c6898cecf0b21422dc5d240fbddfaeafdb3eeee0e842de9d48d","title":"Stop, Start, and Restart Agent Services on Windows","path":"/lrsiem/7.20.0/stop-start-and-restart-agent-services-on-windows","children":[]},{"id":"ci_d4c2a04e249089f34328cc65c38d97dd958a4192d89be22a9f75762e64e24ce1","title":"Generic JSON Collector","path":"/lrsiem/7.20.0/generic-json-collector","children":[]}]},{"id":"ci_8115488a4ba3eb2966fa03217d72cdf3a76dcd3c9611d1e85e35b92eb8f3d6b0","title":"Register Agent to Host with Duplicate Name","path":"/lrsiem/7.20.0/register-agent-to-host-with-duplicate-name","children":[]},{"id":"ci_5266a3736b6af21a2ceddd7d21b5ce2ad06bac60dbaa06aeaeb2714be98f2e3b","title":"sFlow Collection","path":"/lrsiem/7.20.0/sflow-collection","children":[{"id":"ci_17ea9d9d1d986f91b451bc019d70321a8fd9c08d7e337681efddb89ec600c59d","title":"Configure a Device or Host for sFlow Collection","path":"/lrsiem/7.20.0/configure-a-device-or-host-for-sflow-collection","children":[]}]},{"id":"ci_ff1e8b881f49398a74a155fe0054fb97f26e62b1948ecfd4e59ccae3ca831e0d","title":"SNMP Trap Receivers","path":"/lrsiem/7.20.0/snmp-trap-receivers","children":[{"id":"ci_6ba933164e62dbe95fef0100017b3d3c4f62bba1df86114560cfb5d3aeeafdd1","title":"Configure a System Monitor for SNMP Trap Receiver","path":"/lrsiem/7.20.0/configure-a-system-monitor-for-snmp-trap-receiver","children":[]}]},{"id":"ci_fee82cdf9712726f47e627e42e20dbb56db2474e4b58fc9d8c7cf1ba6d074421","title":"Syslog Collection","path":"/lrsiem/7.20.0/syslog-collection","children":[{"id":"ci_a861ee8ab5e7461baffb100d6b0760d84f325180479f54bdddc69b6834a2c4b4","title":"Configure a Device or Host for Syslog Collection","path":"/lrsiem/7.20.0/configure-a-device-or-host-for-syslog-collection","children":[]}]},{"id":"ci_7267fe099d01f0d65e33abe10d45b0efd530b00d516fa3b7d89f81d363bdab57","title":"System Monitor Configuration Policy Manager","path":"/lrsiem/7.20.0/system-monitor-configuration-policy-manager","children":[{"id":"ci_19712e0efba94dc13f960ced432c3d2c3b841fc3cbaf73e96ae51a78bb32f876","title":"Apply System Monitor Configuration Policies","path":"/lrsiem/7.20.0/apply-system-monitor-configuration-policies","children":[]},{"id":"ci_7e238fee704214bdd291511bb17212560e684b309e5ad04c446f444a397bbc72","title":"Assign Configuration Policies to Multiple System Monitor Agents","path":"/lrsiem/7.20.0/assign-configuration-policies-to-multiple-system-monitor-agents","children":[]},{"id":"ci_da020c5b5925771e60194742f932b9353e6ab3e0592424a8f941b415b9c544d1","title":"Create New System Monitor Configuration Policies","path":"/lrsiem/7.20.0/create-new-system-monitor-configuration-policies","children":[]},{"id":"ci_1d7ab1865aefa3e856d98cf1f8b5d05437a30f5edc835e8aaf443c6a6df3ba00","title":"Delete System Monitor Configuration Policies","path":"/lrsiem/7.20.0/delete-system-monitor-configuration-policies","children":[]},{"id":"ci_c6581927ce6db02c2305eb77bf51c94d367df980f111783bff9cdae7557315eb","title":"Modify Configuration Policies on System Monitor Agents","path":"/lrsiem/7.20.0/modify-configuration-policies-on-system-monitor-agents","children":[]},{"id":"ci_78f3b767de4958c0055e4a733bf2a27adb0b5e87cfc6f5199c42f5d8fef24bcf","title":"Modify System Monitor Configuration Policies","path":"/lrsiem/7.20.0/modify-system-monitor-configuration-policies","children":[]}]},{"id":"ci_ef38cb6919784c17abf69060036f010633f59668c251c4532a78b53469dfeacf","title":"Unidirectional Windows Agent Settings","path":"/lrsiem/7.20.0/unidirectional-windows-agent-settings","children":[{"id":"ci_f2bef346b86757f68decd5a551ef99b5c8b57cb135ad95e945614b743612d80f","title":"Confirm a SysMon Agent is Sending Logs","path":"/lrsiem/7.20.0/confirm-a-sysmon-agent-is-sending-logs","children":[]},{"id":"ci_834201074037a796c3f19144d9db58b108216233c329742e12691db7cda6fdf3","title":"Copy the System Monitor Agent Configuration File to the Agent Machine","path":"/lrsiem/7.20.0/copy-the-system-monitor-agent-configuration-file-to-the-agent-machine","children":[]},{"id":"ci_add5c47f985d39dd12d2ecb9c799c8e79a8171c2f399e573ee3d218a99f725d1","title":"Enable the Unidirectional Feature on the Data Processor","path":"/lrsiem/7.20.0/enable-the-unidirectional-feature-on-the-data-processor","children":[]},{"id":"ci_ac38e90cd3fe5a73fe34de735df715af39723e93a2b00823d8d7d8e0bdc741de","title":"Enable the Unidirectional Feature on the System Monitor Agent","path":"/lrsiem/7.20.0/enable-the-unidirectional-feature-on-the-system-monitor-agent","children":[]},{"id":"ci_8b365de895bacc2cc034120819a5c0b144c544a79b78d75f703bb4e029e7b8ee","title":"Export the System Monitor Agent's Local Configuration File","path":"/lrsiem/7.20.0/export-the-system-monitor-agent-s-local-configuration-file","children":[]}]},{"id":"ci_300560d5f1db0066b69e0821c61e62fccf2e7313001d45655583e519d0dcc3b2","title":"Windows Event Log Collection","path":"/lrsiem/7.20.0/windows-event-log-collection","children":[{"id":"ci_e65b09c6d4cc72a555016b8e49a2c2b67e44fdf6e120b64fd6ee3b6473424dfa","title":"Collect Non-Domain Logs Remotely","path":"/lrsiem/7.20.0/collect-non-domain-logs-remotely","children":[]},{"id":"ci_80616d7ef0529f986fbca7af9578743bb60891ef8edc36f64b4e53df82a50243","title":"Create a Least-Privileged Domain User Account for Remote Log Collection","path":"/lrsiem/7.20.0/create-a-least-privileged-domain-user-account-for-remote-log-collection","children":[]},{"id":"ci_c8e3d13a3dd9a02f8948b4e8164e08841e02289da89b115285d3738b13e2ec99","title":"Set Up Remote Log Collection","path":"/lrsiem/7.20.0/set-up-remote-log-collection","children":[]}]}]}]},{"id":"ci_14230033f581d49c423e0e6a6c8960df36bd39b1745176f09343e6f4207a7d2a","title":"Client Console Analyst Guide","path":"/lrsiem/7.20.0/client-console-analyst-guide","children":[{"id":"ci_dab1a09d0d34ea54d683e927abf0431c069b8b8818033ee990211573b472bfbe","title":"Filters and Wizards","path":"/lrsiem/7.20.0/filters-and-wizards","children":[{"id":"ci_0c5b5da240973b3579e4803fd85663757baf099e1bea9248caf760ca82c025e5","title":"Use Filter Modes","path":"/lrsiem/7.20.0/use-filter-modes","children":[]},{"id":"ci_88e3d6a8e193a710bbeb17c3c2b58f479be67d33401c15a5347da33c02015058","title":"Use Lists with Filters","path":"/lrsiem/7.20.0/use-lists-with-filters","children":[]},{"id":"ci_0843766c32b2c3faa3584fdec07d62ccb1819dc3ce7b40a2e023df8412c883c6","title":"Use Multiple Filters","path":"/lrsiem/7.20.0/use-multiple-filters","children":[]},{"id":"ci_15814fd7fd60ebcb848fa8bdaf66c7ffadbc6e514d8ce540539aeb3f5786a216","title":"Use Multi-Type Filters","path":"/lrsiem/7.20.0/use-multi-type-filters","children":[]},{"id":"ci_38f59cdca66cddda95a7e732cd624a74327a0298da88e0ed653eb7c921677cb7","title":"Use Search Strings with Filters","path":"/lrsiem/7.20.0/use-search-strings-with-filters","children":[]},{"id":"ci_7fe92eebbf62fa3355912d081742545006c620c855056200344a81735f0a3686","title":"Use SQL Pattern Match with Filters","path":"/lrsiem/7.20.0/use-sql-pattern-match-with-filters","children":[]},{"id":"ci_8503490431e1c2aabc2de482d3d3f6fc76b8335290fc9294563e01c4c287c99d","title":"Use the Filter Editor","path":"/lrsiem/7.20.0/use-the-filter-editor","children":[{"id":"ci_2541c95da1cad0fc5177ca64db41bfe88b3a16064ae48b92be936e30e2b2ec7f","title":"Filters—Action","path":"/lrsiem/7.20.0/filtersaction","children":[]},{"id":"ci_8337f1a1100dc1ab6eb8c3e56e905889483b649696a71ba048d37a08a23756b7","title":"Filters—Aggregation","path":"/lrsiem/7.20.0/filtersaggregation","children":[]},{"id":"ci_8159bff3c5e9f241ef10a92c2d96b26a6c3e5300715b41c8acc5ea5c3dc600d2","title":"Filters—AIE Summary Fields","path":"/lrsiem/7.20.0/filtersaie-summary-fields","children":[]},{"id":"ci_8be39680158e7f5a9a5c16213b139d0de4ac3d76c7b8168f8485a551612c4e63","title":"Filters—Data Fields","path":"/lrsiem/7.20.0/filtersdata-fields","children":[]},{"id":"ci_40ed649a7e273a014e9361b0b6aa9d6fa3900f5c5e657263e137f27d8012b2ef","title":"Filters—Day and Time Criteria","path":"/lrsiem/7.20.0/filtersday-and-time-criteria","children":[]},{"id":"ci_c1f95f3f9b13b73af0dd099df8ee98436bcc8571e5c0854ae16198c1ee2ca2b9","title":"Filters—Distinct","path":"/lrsiem/7.20.0/filtersdistinct","children":[]},{"id":"ci_e0f3e365934b54889a4b11f770820a568f48d82791a646e66e90bcaa115656be","title":"Filters—Exclude Filter","path":"/lrsiem/7.20.0/filtersexclude-filter","children":[]},{"id":"ci_371a54cf7474b56f0ff89abcd0ea5a3941f5b0b95ecd489253db03cf5b9229ca","title":"Filters—Expressions","path":"/lrsiem/7.20.0/filtersexpressions","children":[]},{"id":"ci_04890dd1f12c55da53c37ddfb3769f752c6dec4864309e3b927a78420f46246c","title":"Filters—Group By","path":"/lrsiem/7.20.0/filtersgroup-by","children":[]},{"id":"ci_893d92b68a91b25c765120b8b108e681ad90b17f22a47c3c93266452d4fae30b","title":"Filters—Include Filter","path":"/lrsiem/7.20.0/filtersinclude-filter","children":[]},{"id":"ci_af15be4dbff233928e54aa27b0ea8f4381e212a71c62b5199e3f1d0863651f42","title":"Filters—Information","path":"/lrsiem/7.20.0/filtersinformation","children":[]},{"id":"ci_17ca5a8b39734d3148e92166833eba9c9626aabaedeef23ac0d4111bc35429c2","title":"Filters—Log Source Criteria","path":"/lrsiem/7.20.0/filterslog-source-criteria","children":[]},{"id":"ci_57af8f58130d5c21744e8bde168cb0d485997bad6d70d4575b96c2cdfaef7a38","title":"Filters—Notify","path":"/lrsiem/7.20.0/filtersnotify","children":[]},{"id":"ci_18cf8cb5247efaf084eb83008287b30651da8fe28d38d1928316e24239b3e548","title":"Filters—Primary Criteria","path":"/lrsiem/7.20.0/filtersprimary-criteria","children":[]},{"id":"ci_c0f6ce74c544136fbf0d0b622398a2e69b74020543c09a51f098d78e22502c0e","title":"Filters—Profile","path":"/lrsiem/7.20.0/filtersprofile","children":[]},{"id":"ci_e2076730e94682909cdbb32411af2211113f017ed61940eb9a83eca836d306bf","title":"Filters—Schedule","path":"/lrsiem/7.20.0/filtersschedule","children":[]},{"id":"ci_c5b6bc46ce5d7a0f8afe0bc23a77a8c70d350027642a80c7c5a136b6f0798441","title":"Filters—Settings","path":"/lrsiem/7.20.0/filterssettings","children":[]},{"id":"ci_2461200d8313827b4ce47a6a3aa3f17b3e20fa7bff8ebc94c026432cb4c77765","title":"Filters—Thresholds","path":"/lrsiem/7.20.0/filtersthresholds","children":[]},{"id":"ci_895105db5f181bafca54d1db5a2cf8ae58b20d7b04f2598adf544dba120030b1","title":"Filters—Time and Schedule","path":"/lrsiem/7.20.0/filterstime-and-schedule","children":[]},{"id":"ci_efff1513960ad0ca346216d39e1baf292de043fb52147f1dd26a3e7fc76d6a69","title":"Filters—Unique Values","path":"/lrsiem/7.20.0/filtersunique-values","children":[]}]}]},{"id":"ci_717c1fe7a7addd635b328cd06f6e5d1947ae1be8ab8bb40a662caf98bc0afe06","title":"General Console Features","path":"/lrsiem/7.20.0/general-console-features","children":[{"id":"ci_7e9c0a6a3e123c3729536378f88e9d412ba216c421dbb9a269c097026573d0e4","title":"Export Grid to File","path":"/lrsiem/7.20.0/export-grid-to-file","children":[]}]},{"id":"ci_50a722262518bf064bce2a7ad4e41a5da91cabd263c0218423642040a53481b6","title":"Layouts","path":"/lrsiem/7.20.0/layouts","children":[{"id":"ci_8433d2488a0c8a051e47a2435398da9eef84663c62febf5480f81333d8044dcb","title":"Clone Existing Layouts","path":"/lrsiem/7.20.0/clone-existing-layouts","children":[]},{"id":"ci_60c49f365f06f25b3afbbc3296914e577a4f587224dc99decc3eff325a62084b","title":"Create New Layouts","path":"/lrsiem/7.20.0/create-new-layouts","children":[]},{"id":"ci_0c1016bb5f1b8a8cb0a4a0b6ee5b70a91368baebb53ddcbc420d6df924ff07ce","title":"Delete Layouts","path":"/lrsiem/7.20.0/delete-layouts","children":[]},{"id":"ci_19d0255dfaf545d3b0f6d92ab20ef5cffc6ea8f03015c4cf86f8e185ce8ca380","title":"Import and Export Layouts","path":"/lrsiem/7.20.0/import-and-export-layouts","children":[]},{"id":"ci_034f038f6e8e0b9a45f2451cb93b71cb5c96f092f0ff1eaaf3956d3c41f5fe8c","title":"Make or Clear Default Layouts","path":"/lrsiem/7.20.0/make-or-clear-default-layouts","children":[]},{"id":"ci_2b35c4c0502dded53e4f9fb0903efd614705f0107bf1fd52f873c173c9528169","title":"Modify Layout Properties","path":"/lrsiem/7.20.0/modify-layout-properties","children":[]},{"id":"ci_275469fb6c51c31b3850cfb386d328ff36f604f14c5325c25883ed3d32ad0c20","title":"Reset Layouts","path":"/lrsiem/7.20.0/reset-layouts","children":[]},{"id":"ci_549aa519642d9d2901f04ba8c7f039c1b6ba6b346df5664804d4bfdc99bc9bb1","title":"Save Layouts","path":"/lrsiem/7.20.0/save-layouts","children":[]},{"id":"ci_b7e54d73614c0af716d76e4a136e1cef1d6c35df524f299f243d7c4e4211d946","title":"Set Color Themes in Layouts","path":"/lrsiem/7.20.0/set-color-themes-in-layouts","children":[]}]},{"id":"ci_cafb25525ff6e5fd2e377c2239fc26b9a89b434ae835901e4e7b4c19b1fbdab2","title":"Lists in the Client Console","path":"/lrsiem/7.20.0/lists-in-the-client-console","children":[{"id":"ci_d2ad5e73336c4c6a7d931d5dff48403999d43afd886e846bd204cb1dac5c47ce","title":"Add Expiring Items to a List","path":"/lrsiem/7.20.0/add-expiring-items-to-a-list","children":[]},{"id":"ci_bbd2be9ada530a384e742bf0d45aa94b42438433b3c04342ac7fe85ef98770d5","title":"Add Values to a List","path":"/lrsiem/7.20.0/add-values-to-a-list","children":[]},{"id":"ci_e3878f63579a32b1f6db7c855d3880aee4b1c9e9ce4b41c0c8fab9352854eb6c","title":"Clone Lists","path":"/lrsiem/7.20.0/clone-lists","children":[]},{"id":"ci_657123aa40053ac87a41361956efd210590a69511d26d179f0e485189ce17a92","title":"Create Lists in the Client Console","path":"/lrsiem/7.20.0/create-lists-in-the-client-console","children":[]},{"id":"ci_c5528e6a793c1db6714fc361730d1b1ee91943736ed2f264d573f0f3bef4d4a3","title":"Modify the Properties of Lists","path":"/lrsiem/7.20.0/modify-the-properties-of-lists","children":[]},{"id":"ci_1f8258d572a04ad860618c75c0dfaa6bd853a3642002fcb99bb6b08fbee8ea6c","title":"Remove List Items","path":"/lrsiem/7.20.0/remove-list-items","children":[]},{"id":"ci_3e78b7c62e092e867b2aa449755937a868a3367dd274791b85d5140971b0ee66","title":"Reset Expiration Date for List Items","path":"/lrsiem/7.20.0/reset-expiration-date-for-list-items","children":[]}]},{"id":"ci_33f10f8acaf55bf7e38198a35961fd938846c6abeb8457d0e79095456e9fa567","title":"Message Processing Engine Rule Builder","path":"/lrsiem/7.20.0/message-processing-engine-rule-builder","children":[{"id":"ci_3f33348313dbf448595e03b89ec5156fd3b16a6b42c9d834fc2089e595cab1d6","title":"Application Manager","path":"/lrsiem/7.20.0/application-manager","children":[{"id":"ci_ea9fd00c518be6355ecaf00979e008e96ec6667ee4b17817c6ef0abb91044a77","title":"Create New Application Records","path":"/lrsiem/7.20.0/create-new-application-records","children":[]},{"id":"ci_301d02047d1c824bfbf41703e4a159e6ea7bd7a9050da538330ccc45a5cd1c60","title":"Modify Application Record Properties","path":"/lrsiem/7.20.0/modify-application-record-properties","children":[]},{"id":"ci_e9d32ed521be2e5d1aaa945b880f6bd1f966054ea6abe5764ce7bc1c5c9f8d5f","title":"Refresh the Application Manager","path":"/lrsiem/7.20.0/refresh-the-application-manager","children":[]},{"id":"ci_911f07f354c18ca6c0019196cff1bbf28b3bf9bacdf8560c956021d774123408","title":"Retire or Activate Application Records","path":"/lrsiem/7.20.0/retire-or-activate-application-records","children":[]}]},{"id":"ci_e01853e907738651d31b3cf33190a3d0b7ec5ef7665a5cc955747a099bbdbdc6","title":"Common Event Manager","path":"/lrsiem/7.20.0/common-event-manager","children":[{"id":"ci_40d6e0c1aa52e77585c666d9e75f7e8b8c2efa610f6ef787853f22490c2b4080","title":"Create Common Events","path":"/lrsiem/7.20.0/create-common-events","children":[]},{"id":"ci_fd9e3cca6f82b7fa8860f64a70218eddd60599bd75e328505048fa77c6e98598","title":"Delete Common Events","path":"/lrsiem/7.20.0/delete-common-events","children":[]},{"id":"ci_a182b0aea380da4c2a8ed10d99f2640c953a886b5d259c129804afeaedfbc4da","title":"Modify Common Events","path":"/lrsiem/7.20.0/modify-common-events","children":[]},{"id":"ci_aa0376dfe2f5cb4415a1baad3bb883b9f4df295bc8ea4934109339fcdc81e7fa","title":"Search for Common Events","path":"/lrsiem/7.20.0/search-for-common-events","children":[]}]},{"id":"ci_5dc949337561c6ad58f1db061dea4b9a725de6197979726f5254d7e77377a068","title":"Create Custom MPE Sub-Rules","path":"/lrsiem/7.20.0/create-custom-mpe-sub-rules","children":[]},{"id":"ci_4c7a581394aae6917dc7846c47a1746a53daed1f419c6da5ef50953b6b9324af","title":"Create MPE Policies","path":"/lrsiem/7.20.0/create-mpe-policies","children":[]},{"id":"ci_6a735a8c2c8de3b14a16e5d995611d17520f5420dd8e32ef03a0496ddd5b805b","title":"Create New Base MPE Rules","path":"/lrsiem/7.20.0/create-new-base-mpe-rules","children":[]},{"id":"ci_410b7ebe3a10f7a50b59705337ab7052661072e2419275f988dccef038ed9105","title":"Edit MPE Rules","path":"/lrsiem/7.20.0/edit-mpe-rules","children":[]},{"id":"ci_99bd991d02e54597a566a5e0834322ccb604979223feb9ea0b4c0b40df8968f4","title":"Edit Sorting Properties for System Base MPE Rules","path":"/lrsiem/7.20.0/edit-sorting-properties-for-system-base-mpe-rules","children":[]},{"id":"ci_860f802edd13e755b1f9368e8220e90f736b47b4f1acde84b92726b21255dd9e","title":"Import and Export MPE Rules","path":"/lrsiem/7.20.0/import-and-export-mpe-rules","children":[]},{"id":"ci_acc293485a32635f1c90228a45ec9a47fa23df0d1eacd7ba40c2b751f09aa344","title":"Regular Expression Characters and Practices","path":"/lrsiem/7.20.0/regular-expression-characters-and-practices","children":[]}]},{"id":"ci_4d3f9b54a6d5be0dc564fcbeefb838c214e720371ab1d51993776f94d8a5707c","title":"Monitor, Search, and Analysis","path":"/lrsiem/7.20.0/monitor-search-and-analysis","children":[{"id":"ci_9994adafd0c203a9605a8a7afe08287e054249cd5bfe0d044b045706161420f0","title":"Alarm Viewer","path":"/lrsiem/7.20.0/alarm-viewer","children":[{"id":"ci_5629c1f230a4e47aa6596c3efd53406662084798a48c6d27a9522f6a4d5177a0","title":"Change the Status of a Single Alarm","path":"/lrsiem/7.20.0/change-the-status-of-a-single-alarm","children":[]},{"id":"ci_8c8275093a7da8d5481cedef76630712bb65eeb06321882356bdd0006c425e08","title":"Change the Status of Multiple Alarms","path":"/lrsiem/7.20.0/change-the-status-of-multiple-alarms","children":[]},{"id":"ci_b8acffaff093734737e436cbdb6f6b162a40720be784cc4b7030bfde7f16e2f8","title":"Create Alarm Lists","path":"/lrsiem/7.20.0/create-alarm-lists","children":[]}]},{"id":"ci_dfd1a2207d622f1931445844063880766b9526548b3cd59b93c3aa9d8682dc07","title":"Investigator","path":"/lrsiem/7.20.0/investigator","children":[{"id":"ci_7886226b96595bb55af76ccd0daa2bed4cadfca7643e0b141507341b9c040843","title":"Change Share Permissions on a Saved Investigation","path":"/lrsiem/7.20.0/change-share-permissions-on-a-saved-investigation","children":[]},{"id":"ci_3c2f2429868ff320269297544d5d8189ac5a9c4320ebc859c46be18ff2654ed2","title":"Create Investigations","path":"/lrsiem/7.20.0/create-investigations","children":[]},{"id":"ci_35ac7eee04edbc9157ed6d4e113516966118ed078a7d285621c94fce05c14f25","title":"Drill Down on a Single Item in Investigation Results","path":"/lrsiem/7.20.0/drill-down-on-a-single-item-in-investigation-results","children":[]},{"id":"ci_50b56495c6fc8e37b10f637e088a40c64d40a3ef701c629e68fbf96df1c05e40","title":"Drill Down on Multiple Items in Investigation Results","path":"/lrsiem/7.20.0/drill-down-on-multiple-items-in-investigation-results","children":[]},{"id":"ci_5630b655efe5844057fbbaedcae3159573638dea1d8c3434d897cb195be8b8b3","title":"Import and Export Investigations","path":"/lrsiem/7.20.0/import-and-export-investigations","children":[]},{"id":"ci_8d2763e59963298a234040420901f87912a7272349ac205caa4f2d8a687467de","title":"Run Saved Investigations","path":"/lrsiem/7.20.0/run-saved-investigations","children":[]},{"id":"ci_dafd4c2ace5d6aff51985da5e07cfd4f5abe5bdfb3f785ee0fc9858b9f3d4c0a","title":"Save Investigations with Report Packages","path":"/lrsiem/7.20.0/save-investigations-with-report-packages","children":[]},{"id":"ci_a5c7765d068f2830966ab509cbbc02df837df2b855fe1230451a1c5f4f473eeb","title":"Save Investigations with Report Templates","path":"/lrsiem/7.20.0/save-investigations-with-report-templates","children":[]},{"id":"ci_e37b6b31809318e568b79cef7b6b82948d2c7f5056dd4f5a79e3abad0394cc71","title":"Search for Most Frequent Common Events","path":"/lrsiem/7.20.0/search-for-most-frequent-common-events","children":[]},{"id":"ci_81366fbf889714a2acd7abc528c82997ffb375e60228d0caad3dcee808bc1984","title":"View Metadata in the Log Viewer Tab","path":"/lrsiem/7.20.0/view-metadata-in-the-log-viewer-tab","children":[]},{"id":"ci_20a51dc6d9df76eed975046ff8b32c7f3cba7015c546e05b0df029e4e49dbf2a","title":"Work With Investigation Result Graphs","path":"/lrsiem/7.20.0/work-with-investigation-result-graphs","children":[]},{"id":"ci_d2f6ab2342d45ac49e623e3779fd243160991436a9480be2e1359f140f1ff323","title":"Work with Log Miner","path":"/lrsiem/7.20.0/work-with-log-miner","children":[]},{"id":"ci_c8a6dbadf10b671a196a6cfe2c9712202a40361ef408035621270e523572c5cc","title":"Work With Network Visualization Diagrams","path":"/lrsiem/7.20.0/work-with-network-visualization-diagrams","children":[]}]},{"id":"ci_94e93ab0df6ec72046c8c9424024e9866512011f873138af2b5357ca8e536a95","title":"Personal Dashboard","path":"/lrsiem/7.20.0/personal-dashboard","children":[{"id":"ci_2866d222c4ebb8ebfe879783fac0bb72c094e0a241b787e37619a087a1ddc6c8","title":"Add Personal Dashboard Filters","path":"/lrsiem/7.20.0/add-personal-dashboard-filters","children":[]},{"id":"ci_911d193e92ee0cbcf2b21121ba0f30786c099fe95226bfe94568323587c2e845","title":"Apply Personal Dashboard Filters","path":"/lrsiem/7.20.0/apply-personal-dashboard-filters","children":[]},{"id":"ci_2f8a1d89d44e8e08916a6077c6cff1793ddf2810545c72539d51651f8c0f0633","title":"Clone Personal Dashboard Filters","path":"/lrsiem/7.20.0/clone-personal-dashboard-filters","children":[]},{"id":"ci_fab87bec781723b339f4663e5cf82fd72fb9c7c2f4ae65212867045a758de68f","title":"Configure the Personal Dashboard Display","path":"/lrsiem/7.20.0/configure-the-personal-dashboard-display","children":[]},{"id":"ci_352e0af6298abedc3250c770d0ca89c0b7fbe73cdd7eef215e5aa4ded2c1846b","title":"Delete Personal Dashboard Filters","path":"/lrsiem/7.20.0/delete-personal-dashboard-filters","children":[]},{"id":"ci_14d1d975116aa69151f832e1d1d68515333d80a25b422de55953ea70a3ace9da","title":"Drill Down on Dashboard Data","path":"/lrsiem/7.20.0/drill-down-on-dashboard-data","children":[]},{"id":"ci_3647abc9b627e86a068cc1c2dbeb8808e34d024acbf4937593dc6d7d5e4d2609","title":"Modify the Properties of Personal Dashboard Filters","path":"/lrsiem/7.20.0/modify-the-properties-of-personal-dashboard-filters","children":[]}]},{"id":"ci_3b6f24b40c84a42d74ba07e40850d64b2f01e37b37e9eeea669aab0950142bbd","title":"Quick Search Toolbar","path":"/lrsiem/7.20.0/quick-search-toolbar","children":[{"id":"ci_cdfae6ca2b6d77e1914441d5e76e3f3c7785a162df36184cda87b4e597543ffc","title":"Use the Quick Search Toolbar","path":"/lrsiem/7.20.0/use-the-quick-search-toolbar","children":[]}]},{"id":"ci_12541b54e2c017e142fd0cf4a6bf4c64943394dd93f2f1ab9277bd4d98228d03","title":"Run Contextualize","path":"/lrsiem/7.20.0/run-contextualize","children":[]},{"id":"ci_378bd76b6e8ad3be1ff1a3decf9a7e23590d7ab5c524d9ecc957913f3306c1c6","title":"Run Correlate","path":"/lrsiem/7.20.0/run-correlate","children":[]},{"id":"ci_582f8098ff6f7cc5a8358fceb822d0ab40b9993318a8905db73bedc329e8c42f","title":"Tail","path":"/lrsiem/7.20.0/tail","children":[{"id":"ci_e37bf7f7a2779711af658e55b1a987800c1742758394455e1b5d4580ba963157","title":"Create New Tails","path":"/lrsiem/7.20.0/create-new-tails","children":[]},{"id":"ci_696f4d8fffe3b0c4a4800d56974fd5b9890036d081daf6538ed293955d57ecba","title":"Run Saved Tails","path":"/lrsiem/7.20.0/run-saved-tails","children":[]},{"id":"ci_12dca71133d2265392caf6b1820ea3a401dafc3ba1a7e560e68c147fd1cbc715","title":"Tail Log Sources","path":"/lrsiem/7.20.0/tail-log-sources","children":[]}]},{"id":"ci_21caf43141cf58b05436dcb2b5357492ede955d12c5a6dad6e010418454ee436","title":"TopX Analysis","path":"/lrsiem/7.20.0/topx-analysis","children":[{"id":"ci_36da0ea8da31283feab9be356c277fee38baa37bdeb3e56d0c8cb19c35b55548","title":"Analyze TopX Results","path":"/lrsiem/7.20.0/analyze-topx-results","children":[]},{"id":"ci_db69aeecc093fac0974e3d7ee9da09db6200281549fa323037617dab1b9fc520","title":"Configure TopX Widgets","path":"/lrsiem/7.20.0/configure-topx-widgets","children":[]}]}]},{"id":"ci_958b1acaf600f606cff78130b2cb83542962008191b68c781b0ce939d24296f6","title":"My LogRhythm","path":"/lrsiem/7.20.0/my-logrhythm","children":[{"id":"ci_faf689b9a4b865273133a533512acb8c5da53911629e3a6394f1b12a124d6968","title":"Add or Modify a Person Record","path":"/lrsiem/7.20.0/add-or-modify-a-person-record","children":[]},{"id":"ci_0d96c04bbb1d032004d1ea718228331c2b42113a9fabdf13c9f31db2c8ff3cd0","title":"Change Your Password","path":"/lrsiem/7.20.0/change-your-password","children":[]},{"id":"ci_97be15bdf1d452ec060bf3aad3c04acd76178eeefa0fdbdd4f460f5b309575d9","title":"Create Email Notification Policies","path":"/lrsiem/7.20.0/create-email-notification-policies","children":[]},{"id":"ci_49e8207d006cc6d9d7d8769aff7d95f48d8d31ecbfc20505b293d626079e15d4","title":"Manage Your Preferences","path":"/lrsiem/7.20.0/manage-your-preferences","children":[]}]},{"id":"ci_9d483007027250bc7ee2314da0893238773ab10cf55f39c9aedce064fda68ba6","title":"Report Center","path":"/lrsiem/7.20.0/report-center","children":[{"id":"ci_be304128e2f7692c1c710d08dfd64bfa71db99174b278ea0adfe669ebdbf245f","title":"Add Custom Logos to Reports","path":"/lrsiem/7.20.0/add-custom-logos-to-reports","children":[]},{"id":"ci_e4de1a22b4ca88ded43d908bc11dfac9cc72125b268b31137c4b26983e341dc9","title":"Clone Reports or Report Packages","path":"/lrsiem/7.20.0/clone-reports-or-report-packages","children":[]},{"id":"ci_9327510d21f452d702d828c7d76bd995a2983885fda757b8b45344d716be4878","title":"Create Custom Log Detail Report Templates","path":"/lrsiem/7.20.0/create-custom-log-detail-report-templates","children":[]},{"id":"ci_410302a341dbc4c417e7674f9c131d1c7c1d3244262c3ec8d9daa647bf816c0e","title":"Create Custom Log Summary Report Templates","path":"/lrsiem/7.20.0/create-custom-log-summary-report-templates","children":[]},{"id":"ci_c5143eddad702d0eb03fffa78d04b9cd76b5f5ccbb82bc009eaa8192c7c94cb6","title":"Create Report Packages","path":"/lrsiem/7.20.0/create-report-packages","children":[]},{"id":"ci_bb26f58b1dc26a7532d6bbedf47dd4de5090233535837dc6349a1c8c9b34a98d","title":"Create Reports","path":"/lrsiem/7.20.0/create-reports","children":[]},{"id":"ci_51309402a08382f73de8c2e020c7d4f6b4294d0a94a1896e2782f6264a779ad6","title":"Create Scheduled Reports","path":"/lrsiem/7.20.0/create-scheduled-reports","children":[]},{"id":"ci_f05f541fc4e501eb343ef4db8d16ba7efa843829a7461a21858306ef151eb618","title":"Import or Export Reports or Report Packages","path":"/lrsiem/7.20.0/import-or-export-reports-or-report-packages","children":[]},{"id":"ci_2b61dee4276daaa648b09dee8cb25d3cb55bec395afe549e94f09c2e89d806e9","title":"Manage Scheduled Reports","path":"/lrsiem/7.20.0/manage-scheduled-reports","children":[]},{"id":"ci_af65f3399c57676d8929fea04f0cfe017bdb36943cf0bba4a3652b1fd3410955","title":"Modify Custom Report Templates","path":"/lrsiem/7.20.0/modify-custom-report-templates","children":[]},{"id":"ci_cc8756256689fd3f7c5fb34b10cf0535a6f8c2fa66ef14e8a03bd0cdf7948dbb","title":"Restore Default Logo to a Report","path":"/lrsiem/7.20.0/restore-default-logo-to-a-report","children":[]},{"id":"ci_cc4dbf0f1aaeac8fff2f26ecc2f9db4cf39b7b34bb36025a0ac541cfe4b87aba","title":"Run Reports","path":"/lrsiem/7.20.0/run-reports","children":[]},{"id":"ci_28d7e44d45c651991a35b44f3b4423c5a7664b87cdff2cd940e4f161d0885887","title":"Run Reports as Investigations","path":"/lrsiem/7.20.0/run-reports-as-investigations","children":[]},{"id":"ci_5e5b0ae92a5d4ce0a159b4e71a2f172515afa23f8088c0baa1d18c619ea591b6","title":"Troubleshoot Empty Reports","path":"/lrsiem/7.20.0/troubleshoot-empty-reports","children":[]},{"id":"ci_0ab85e22594966af41efb809cdd8ad09bd401b2e83f2bca00bb5361bda4f4a40","title":"View Report Center Job Status","path":"/lrsiem/7.20.0/view-report-center-job-status","children":[]},{"id":"ci_0e853b2a5c56de4554e604e3e75c1e64cc30f88efc6fae9f0fb28b81b930062b","title":"View Reports in the Client Console","path":"/lrsiem/7.20.0/view-reports-in-the-client-console","children":[]}]}]},{"id":"ci_a70d0032e928689f722e35f5b594dcd19fde43e7208a74c8ef73665326657c77","title":"Web Console User Guide","path":"/lrsiem/7.20.0/web-console-user-guide","children":[{"id":"ci_406acf34e6244594a4280f407ba3c1f877b7329256cca34171927c860f3bc56c","title":"Alarms","path":"/lrsiem/7.20.0/alarms","children":[{"id":"ci_f2c14009ab0ba6569e2235a1bb47db6f5784178fc81b2dc22f7980061edec382","title":"Alarms Page Overview","path":"/lrsiem/7.20.0/alarms-page-overview","children":[{"id":"ci_c9e69ad0d1f669d2bc94cc37c6a2cec07f405be208caec803ff2e4c1a1e512c6","title":"Alarm Cards","path":"/lrsiem/7.20.0/alarm-cards","children":[{"id":"ci_b447f1535638ede327e9a1652120adf2c0158c544a7f388846130c355f053681","title":"Sort Alarm Cards","path":"/lrsiem/7.20.0/sort-alarm-cards","children":[]}]},{"id":"ci_fd4071019477e183d71345d14935a213a12489f8c09d6248ac16be54cb8aa665","title":"Alarm Grid","path":"/lrsiem/7.20.0/alarm-grid","children":[{"id":"ci_940350e160bc31549fdcf45541495bf4ccdd83324618a111801b1e6d30d0fddf","title":"Pin and Resize Alarm Grid Columns","path":"/lrsiem/7.20.0/pin-and-resize-alarm-grid-columns","children":[]}]},{"id":"ci_143ee754c9d08a048476ec2c599dcc9ad463f3f9533028bd162ee18a5019dd76","title":"Alarm Status Trends","path":"/lrsiem/7.20.0/alarm-status-trends","children":[]}]},{"id":"ci_e374f99a6e8d880fb2d807c260fc879692ff1d6015eac754dfaaf165f35d6c9d","title":"Alarm Filters","path":"/lrsiem/7.20.0/alarm-filters","children":[{"id":"ci_90b7e4fb019a887cba5be79bdcbf4ef3b8c15acd5e0eaec1a134966ab485f4ff","title":"Remove Alarm Filters","path":"/lrsiem/7.20.0/remove-alarm-filters","children":[]},{"id":"ci_6b97b6f3e42d788d660fb3faa9760ce532d162dd02ba83821934f51a28042f65","title":"Use Status, Entity, Risk, Notification List, and Alarm ID Filters","path":"/lrsiem/7.20.0/use-status-entity-risk-notification-list-and-alarm-id-filters","children":[]},{"id":"ci_5cc979d0c5ea0e64ef5c219ee4134cca0fbe4f322ca6c9cbcfef45ebd940ca3d","title":"Use the Time Frame Filter","path":"/lrsiem/7.20.0/use-the-time-frame-filter","children":[]}]},{"id":"ci_161e8be17a7f4b69dc9dec5443ac3d7700b72b8207851357943099674ff4b015","title":"Add Comments to Alarms","path":"/lrsiem/7.20.0/add-comments-to-alarms","children":[]},{"id":"ci_933250d2e4e6fe83890b7eee3ca7606e537cdf6be3b0ef8e1d74951b82f29944","title":"Approve or Deny SmartResponse Actions in the Web Console","path":"/lrsiem/7.20.0/approve-or-deny-smartresponse-actions-in-the-web-console","children":[]},{"id":"ci_2d5f872fe9cf8e7607acb2aa0d97dcd78a65e36f9f7fa21f253b7764f4daf9c4","title":"Drill into Log Data Associated with an Alarm","path":"/lrsiem/7.20.0/drill-into-log-data-associated-with-an-alarm","children":[]},{"id":"ci_e4bf1a4d4e64bfd23846120febb423ce42834b7f18b6cdeb49421043a9c543e7","title":"Update the Alarm Status","path":"/lrsiem/7.20.0/update-the-alarm-status","children":[]},{"id":"ci_aa0e814b9782b6cb5b7d28d11f90dbc5b0606ceef0bbe1230dfeecdfe86a6447","title":"View Alarms in Your Browser","path":"/lrsiem/7.20.0/view-alarms-in-your-browser","children":[]},{"id":"ci_ace7177061f1cda5946fe3c7b7853156f33f64497c1b52385c6eebe926ef56fc","title":"View Additional Alarm Information","path":"/lrsiem/7.20.0/view-additional-alarm-information","children":[]}]},{"id":"ci_e7a58213560d74f10f3d378c938a705b48ea66a58f016727650d4962142c962b","title":"Analyzer Grid","path":"/lrsiem/7.20.0/analyzer-grid","children":[{"id":"ci_3f4f1fc01e2feec57b7d511333da4e99f4e5f864993790dffabad1e7b2a7c10d","title":"Use the Analyzer Grid","path":"/lrsiem/7.20.0/use-the-analyzer-grid","children":[]},{"id":"ci_3a2adc486422a4ba7631af1fab62399698e6f01ded33e9798ede5573eea1d1d8","title":"Configure the Analyzer Grid","path":"/lrsiem/7.20.0/configure-the-analyzer-grid","children":[]},{"id":"ci_e369bf8f6d5863c629623c4866c726e4c0b26f7be13ed073b061e1f01c02de15","title":"Details & Actions Panel","path":"/lrsiem/7.20.0/details-actions-panel","children":[]},{"id":"ci_5c9aa8b6caf3afb323c0d2157b70be664ac9656b086849fcfd28cf73e4c47bc3","title":"Export Log Data into a CSV File","path":"/lrsiem/7.20.0/export-log-data-into-a-csv-file","children":[]},{"id":"ci_65f5dd777702e1306052c471d3cb9c26e6773e602548d57e674cc08238add954","title":"Inspector Panel","path":"/lrsiem/7.20.0/inspector-panel","children":[{"id":"ci_6cf6c2affff82eff13266e462a86c2e2c5150dd54d9f29e074eab9c7e1505a7b","title":"Integrate with LogRhythm UEBA (formerly CloudAI)","path":"/lrsiem/7.20.0/integrate-with-logrhythm-ueba-formerly-cloudai","children":[]},{"id":"ci_ac11151c1d9cd246ca0f73979bbb7dc0fd70dbaced49025cfbe389db47535fa8","title":"Use Contextualize","path":"/lrsiem/7.20.0/use-contextualize","children":[]},{"id":"ci_c4ff2d9fb823bd47c11d9222f9f1eff98bcee89080a9aa4b3f2536b8681621e7","title":"Configure Third-Party Contextualize Actions","path":"/lrsiem/7.20.0/configure-third-party-contextualize-actions","children":[]},{"id":"ci_7f3b1ab30e3d1e4e97cd2df272678af261aad60e18763f4f443179ccc8821836","title":"Use SmartResponse","path":"/lrsiem/7.20.0/use-smartresponse","children":[]},{"id":"ci_0bf189aa743e6a19447a37270c6b52b8bdd258e85843087fdc81e3d9618759b8","title":"Use the AI Engine Rule Viewer","path":"/lrsiem/7.20.0/use-the-ai-engine-rule-viewer","children":[]},{"id":"ci_f354690dd497512664352663abf76b18dcc6b5913e4a361f329e9edd5249ce05","title":"Use Threat Intelligence Service Integration","path":"/lrsiem/7.20.0/use-threat-intelligence-service-integration","children":[]}]}]},{"id":"ci_100d8ab3d21b963842eb45ae69fd5901a5891935bc19a70fbfd58cb716e9940d","title":"Case Management","path":"/lrsiem/7.20.0/case-management","children":[{"id":"ci_2b723acdc0f28b14b464c62065301db6279517d609c54aded570183d08232b3e","title":"Case Cards","path":"/lrsiem/7.20.0/case-cards","children":[]},{"id":"ci_897c01221ae76be22f0984d5b2bfa330090cef66b4748d3ac9b544f9aeb1d813","title":"Case History Widgets","path":"/lrsiem/7.20.0/case-history-widgets","children":[]},{"id":"ci_6502b78a96ea130f41857ea2cd2f10b20b62f55d2d555ac34c52c191edcab929","title":"Case List Widgets","path":"/lrsiem/7.20.0/case-list-widgets","children":[{"id":"ci_dce026c27394f790d6702b2e358026604d228be2cd8b04dc94da01250e9487d0","title":"Configure Case List Widget Settings","path":"/lrsiem/7.20.0/configure-case-list-widget-settings","children":[]}]},{"id":"ci_3ab855445737af2f53d770277f1f6588b3947739d865731171c8f5e48557b8d8","title":"Case Owners vs. Collaborators","path":"/lrsiem/7.20.0/case-owners-vs-collaborators","children":[]},{"id":"ci_9bb7e657fe70f5e62fb437f955b197ecc4275ad2c9f85e94b6166519f3f4b08c","title":"Case Status and Workflow","path":"/lrsiem/7.20.0/case-status-and-workflow","children":[]},{"id":"ci_912f21f1d6a011e35dfc1d6efcfee1d77ff093eae64486875d3d4e4e9b7ec495","title":"Case Trend Widgets","path":"/lrsiem/7.20.0/case-trend-widgets","children":[{"id":"ci_0c2880bdf334ef2591c15936fbd1b36d8551feccac57b240bf758c6e6ec28512","title":"Configure Case Trend Widget Settings","path":"/lrsiem/7.20.0/configure-case-trend-widget-settings","children":[]},{"id":"ci_cd7342a2e72d36917cadf7f006779506b69839fc60b014787b5e5744ec7242f4","title":"Read Case Trend by Priority Charts","path":"/lrsiem/7.20.0/read-case-trend-by-priority-charts","children":[]},{"id":"ci_8a7c4414545e39dc6f3487a66a39c36a4283ce2118f57835213b8c6cc730fa6b","title":"Read Case Trend by Status Charts","path":"/lrsiem/7.20.0/read-case-trend-by-status-charts","children":[]}]},{"id":"ci_24b49dfe002a555e2953539e5621cde3676652783c56fdec622156c49d28bf30","title":"Open the Case Details View","path":"/lrsiem/7.20.0/open-the-case-details-view","children":[]},{"id":"ci_f239df39ea97be5612ded729513f5ce96e80684cb5a59efc2f0e88e7b902b2b3","title":"Separate Entities in Cases","path":"/lrsiem/7.20.0/separate-entities-in-cases","children":[]},{"id":"ci_011f2c84adfb314ba25e0c5b655a65c0ddcf7975aa5768caf3e9379f9abce000","title":"Work with Cases","path":"/lrsiem/7.20.0/work-with-cases","children":[{"id":"ci_ec82db62123e348067e97f0971d098228cfcb108cf2831adcf4973a904e5302e","title":"Add Alarms to a Case","path":"/lrsiem/7.20.0/add-alarms-to-a-case","children":[{"id":"ci_41362c524621e10e162f052c1ae2bd4f43c6999faafbe8f2c7f71f10c940eb3e","title":"Update the Status of Alarms Associated with a Case","path":"/lrsiem/7.20.0/update-the-status-of-alarms-associated-with-a-case","children":[]}]},{"id":"ci_222977fe3dc7265a541de0c4cbcc283f71479becc0e56635def573c0815fa026","title":"Add Files to a Case","path":"/lrsiem/7.20.0/add-files-to-a-case","children":[]},{"id":"ci_9c1853ee882802006c9dbb55955b8ae7a6ca51553d6c94ad10ada2adfb7c4758","title":"Add Logs to a Case","path":"/lrsiem/7.20.0/add-logs-to-a-case","children":[]},{"id":"ci_5863c305c32a97233568851a2848ecb42fc578c747d6947e96b9593c11a5a4ae","title":"Add Notes to a Case","path":"/lrsiem/7.20.0/add-notes-to-a-case","children":[]},{"id":"ci_4ef770f8adb07efb551f27734fb5f5414692acb9f757074c0fd036d09473b8c3","title":"Case Associations","path":"/lrsiem/7.20.0/case-associations","children":[{"id":"ci_bf7023ca0af22b65d530c53d5bb6c2fbd32256fdba27c236d4c8e3624677ab00","title":"Add Case Associations","path":"/lrsiem/7.20.0/add-case-associations","children":[]},{"id":"ci_59440e29016dc950bf2af26d3b9e5aa30957cf1b7f74d132ea170c768795c17a","title":"Remove Case Associations","path":"/lrsiem/7.20.0/remove-case-associations","children":[]}]},{"id":"ci_b58f53004e1e3c84fee1cbaa1f7fb7931188e0250c0e8da10de73dcb0756032e","title":"Case Collaborators","path":"/lrsiem/7.20.0/case-collaborators","children":[{"id":"ci_eab1e5a92539cd9a9e7f76b62c1f5c2e4ca3583ec3cd145eb7aeaeb1270c5826","title":"Assign Collaborators to a Case","path":"/lrsiem/7.20.0/assign-collaborators-to-a-case","children":[]},{"id":"ci_6424f5e474222eb039e1b599f6819c061d260c2b8d8a0c99d80ec601a37f13a5","title":"Remove Collaborators from a Case","path":"/lrsiem/7.20.0/remove-collaborators-from-a-case","children":[]},{"id":"ci_39b35be04ab46dd00d17c4b79add148f35d7b00c5f745bb35d63689ba4336892","title":"Transfer Case Ownership","path":"/lrsiem/7.20.0/transfer-case-ownership","children":[]}]},{"id":"ci_3fb47f6067a186e2b5de8b7c01f35f48c28eb64c57b63b2c6e7f505df9451b37","title":"Case Tags","path":"/lrsiem/7.20.0/case-tags","children":[{"id":"ci_72ae6c07e02f64fc93141cb14b46ab600ab7b152b07f9fcb770ade2289df53a9","title":"Add Case Tags to a Case","path":"/lrsiem/7.20.0/add-case-tags-to-a-case","children":[]},{"id":"ci_7487242fadeaa4359b9f64e4bae0ce360d2e3df5b0e449a9fceab088948f84f3","title":"Remove Case Tags from a Case","path":"/lrsiem/7.20.0/remove-case-tags-from-a-case","children":[]},{"id":"ci_8f9dc45eea2727142869ea1ffea8222321ec1c3b34305fd1b695e199502d5c85","title":"Use Case Tags to Filter Cases in Case Widgets","path":"/lrsiem/7.20.0/use-case-tags-to-filter-cases-in-case-widgets","children":[]},{"id":"ci_cac4471496aea3fbc9bd0f134e2907450fa8be5b30ac6a63a805402ee5eb405a","title":"Use the Case Tag Library","path":"/lrsiem/7.20.0/use-the-case-tag-library","children":[]}]},{"id":"ci_b57f1bbf96e08be230ea51f67ac01c06b897fb06044cd498f6a6f3614fbe084d","title":"Close Cases","path":"/lrsiem/7.20.0/close-cases","children":[]},{"id":"ci_71583bb5ab0330a4115e5fe16eb8322afe33edd5a41f740046f0c5a651df1340","title":"Create New Cases","path":"/lrsiem/7.20.0/create-new-cases","children":[]},{"id":"ci_e6e22052d299d5031d9dea00e4a8a80137bd360d14761c745826b8d57e30fb58","title":"Delete Logs, Alarms, and Files from Case Evidence","path":"/lrsiem/7.20.0/delete-logs-alarms-and-files-from-case-evidence","children":[]},{"id":"ci_bd340a50887d11537a984aaa209d830c1f718d1746aa86ccc6a62279e77e5b62","title":"Edit and Delete Notes in Case Evidence","path":"/lrsiem/7.20.0/edit-and-delete-notes-in-case-evidence","children":[]},{"id":"ci_42b8ef36344e019d9cdd90b1b28f1adfb545cf0c4b0fc37a77da8120d7ab9668","title":"Edit Case Names, Priorities, Due Dates, and Summaries","path":"/lrsiem/7.20.0/edit-case-names-priorities-due-dates-and-summaries","children":[]},{"id":"ci_bdfa6d166640f906d42e57b85f42b44db911660ba2f69356001422becaaf0b13","title":"Filter Cases","path":"/lrsiem/7.20.0/filter-cases","children":[]},{"id":"ci_e567ef85506f07f1a60f9bf54b4a35ec6ddfceabc9e5218b5c5867f638b5e14d","title":"Pin Important Evidence","path":"/lrsiem/7.20.0/pin-important-evidence","children":[]},{"id":"ci_11f85b3aed6c8762feb7aba5a2bbf8cab4dffad162c45c66b69ae6354eafabb0","title":"Reopen Cases","path":"/lrsiem/7.20.0/reopen-cases","children":[]},{"id":"ci_b7a311ba693b95f512a49503a13a3e9a6259978d67d695ec9e48b6535243b05c","title":"Unpin Evidence","path":"/lrsiem/7.20.0/unpin-evidence","children":[]}]},{"id":"ci_54c1e821cc206c2949e9fc8efbf17c2b96f48dbf7508776f4d346c260757feaf","title":"Work with the Current Case Panel","path":"/lrsiem/7.20.0/work-with-the-current-case-panel","children":[]}]},{"id":"ci_ec0ca5acc2e79880ce128cfe2c59abbeefa108d515a9fd3cc9186a0e35822ea9","title":"Cloud to Cloud Log Collection","path":"/lrsiem/7.20.0/cloud-to-cloud-log-collection","children":[{"id":"ci_25fb72584f11c0dfdb96514d3eba9647d4e50e6619af94c42a97e66d2db22307","title":"Configure an Open Collector Log Source","path":"/lrsiem/7.20.0/configure-an-open-collector-log-source","children":[]},{"id":"ci_15cb640aca9523db0914ba568a10d6c22da25d80c0b1547d40e43f61e16038c5","title":"Add a Log Source Configuration","path":"/lrsiem/7.20.0/add-a-log-source-configuration","children":[]},{"id":"ci_79aeb0f8b2f5f21895f1e5e89bdec2b3ef02e7e829c6b2e0ba293eaf479d2216","title":"Use the Log Source Configuration Grid","path":"/lrsiem/7.20.0/use-the-log-source-configuration-grid","children":[]},{"id":"ci_5d56c367e02f2dde9e0f10dc66160d7d339dbf52f44953b3b40263b1d8c1d74a","title":"Edit a Log Source Configuration","path":"/lrsiem/7.20.0/edit-a-log-source-configuration","children":[]},{"id":"ci_005e2784b60147fd83252937bec47983ca696d649a575f371953d92f4a78a0e1","title":"Delete a Log Source Configuration","path":"/lrsiem/7.20.0/delete-a-log-source-configuration","children":[]}]},{"id":"ci_b11ea50489b6a61fdb4a5143c001aa69823cd4bf059857529494882383960803","title":"Dashboards","path":"/lrsiem/7.20.0/dashboards","children":[{"id":"ci_1d6e4ee5be7e22e4b8b92c879ba0ccd804a90e889c74e4927ee1f55c6da8f9a1","title":"Create New Dashboards","path":"/lrsiem/7.20.0/create-new-dashboards","children":[]},{"id":"ci_71442eaabd9ed3e9b580ee2fab25b5117783196710607d493d1b9c4a151b4857","title":"Clone Dashboards","path":"/lrsiem/7.20.0/clone-dashboards","children":[]},{"id":"ci_51d9340a5802e517b79271b0c202cb9c067f041db0cd9531aee82e7a42c0fce6","title":"Import and Export Dashboards","path":"/lrsiem/7.20.0/import-and-export-dashboards","children":[]},{"id":"ci_ae478da71d35ccc7cf1bf36ce2ede91b7be192487beb42adc2249cc009ac02d7","title":"Change Dashboards","path":"/lrsiem/7.20.0/change-dashboards","children":[]},{"id":"ci_5eefb7bd1fc1ce251fcdf134355a5456809135991fe72eb62cac3e3c74ad1ffc","title":"Revert Changes","path":"/lrsiem/7.20.0/revert-changes","children":[]},{"id":"ci_e4a460102acf42670fed8214c7283a6cc280195ec148bdadd091432c1bc17b99","title":"Print Dashboards","path":"/lrsiem/7.20.0/print-dashboards","children":[]},{"id":"ci_146808c05fd4c461d2e47eb3d2887b3d4a5520ac8df3c7928c46ce956c15a230","title":"Save Dashboard Changes","path":"/lrsiem/7.20.0/save-dashboard-changes","children":[]},{"id":"ci_4bdb6247eee1896eca3ddd9f4755d9a84680f9cc68f3b12dc8fc3a99896e40a8","title":"Filter Data with Lucene Searches","path":"/lrsiem/7.20.0/filter-data-with-lucene-searches","children":[{"id":"ci_a4ab2f29c49890ff6f0df12510eac7950428e4d8820e21a34c90115429e4f1e1","title":"Lucene Search Syntax","path":"/lrsiem/7.20.0/lucene-search-syntax","children":[{"id":"ci_cff8da615e9e55f73eae62285360964cf8e7b5882e623769d9ff4b486a104570","title":"Basic Queries","path":"/lrsiem/7.20.0/basic-queries","children":[]},{"id":"ci_1f2547eca172ece2a88b97a711b22e5ba9b7e064d18f133e38f9f190291e3ed5","title":"Complex Queries","path":"/lrsiem/7.20.0/complex-queries","children":[]},{"id":"ci_86a11c84cd1b0cd256927c22d9879cb3e88bac38c6ec743ee8b489080777b374","title":"Troubleshoot the Lucene Search","path":"/lrsiem/7.20.0/troubleshoot-the-lucene-search","children":[]},{"id":"ci_738d1f497420e62f270e26e6542592b43348ece8d382bb79fa025231e232923b","title":"Wildcard Queries and Fuzzy Matches","path":"/lrsiem/7.20.0/wildcard-queries-and-fuzzy-matches","children":[]},{"id":"ci_08a6eb9ee3ed48fe34213a3e65bfc94ea828bcb46e4942735dec25b0422f973b","title":"Metadata Fields","path":"/lrsiem/7.20.0/metadata-fields","children":[{"id":"ci_8e914313f3c4e8a8d21f438a85ac2ffea9bc335098365a846ba1dd2c274ad063","title":"Applications","path":"/lrsiem/7.20.0/applications","children":[]},{"id":"ci_7793fefe6aa48e879ccc8888c2b42e717879bbd8d59526e352f7a44e7d2c29b4","title":"Classification","path":"/lrsiem/7.20.0/classification","children":[]},{"id":"ci_9fe12b2b199a98dfb9a2eac2305c0094ea3d1eb166bf1277d386449732cebeee","title":"Identity","path":"/lrsiem/7.20.0/identity","children":[]},{"id":"ci_a28a9e624ad8891635d65c2a63808ee29f605b3addaae05e6a3cc2400ca299f7","title":"KBytes and Packets","path":"/lrsiem/7.20.0/kbytes-and-packets","children":[]},{"id":"ci_78a9d4b05bbdb36d2833b4ff37545e5ce654346e5d05f16d37963b971646f1d6","title":"Location","path":"/lrsiem/7.20.0/location","children":[]},{"id":"ci_14a0d9f77a8e51341ad813516729c78dd2f23e9b78380fdf4160f67fe04afd25","title":"Log","path":"/lrsiem/7.20.0/log","children":[]},{"id":"ci_4e088d168eb975c5d14cc2afce78fe812f1b471936dd18e5c600712e83c1bac5","title":"Network","path":"/lrsiem/7.20.0/network","children":[]},{"id":"ci_457f3ac634dc6cb791660607b9ab8c7cf281a21bb47ee9abe3d3f33d5ab6823c","title":"Host","path":"/lrsiem/7.20.0/host","children":[]}]}]}]}]},{"id":"ci_465e473df1e4f380867fb1ab4229cc3651eec7717ab4fa921e619d93f79f5f34","title":"Lists in Web Console","path":"/lrsiem/7.20.0/lists-in-web-console","children":[{"id":"ci_caa6dd8d44e5abe2e4b73f577aa8ddff74dcd967744b89657786a31c691cad62","title":"Add List Items in the Web Console","path":"/lrsiem/7.20.0/add-list-items-in-the-web-console","children":[]},{"id":"ci_efc87cd32f8ff7b7c00982531df9ed326a892e93704e8eaf26004b8d246a10b6","title":"Add Related Lists","path":"/lrsiem/7.20.0/add-related-lists","children":[]},{"id":"ci_8b8287b4ed8e1295ea64e4e33cb1f858227b0260ebb4621eb7fb7d8172a0d3e0","title":"Create a List in the Web Console","path":"/lrsiem/7.20.0/create-a-list-in-the-web-console","children":[]},{"id":"ci_c3d275d3d29e0751880f96fa80acded5adfeeaf09c6f87449829048dd674fa9f","title":"Filter and Sort Lists","path":"/lrsiem/7.20.0/filter-and-sort-lists","children":[]},{"id":"ci_e81fb75c37449635a16b28a258b39140edd6311c78db363584703e2369425104","title":"Remove List Items in the Web Console","path":"/lrsiem/7.20.0/remove-list-items-in-the-web-console","children":[]},{"id":"ci_5eac8b36f11c65d90348ad91ba77c4088841d55d1fb92d6548d746f89f2b688d","title":"Select and View a List","path":"/lrsiem/7.20.0/select-and-view-a-list","children":[]},{"id":"ci_92a33eb2fe376491c572b0518a2bbee40fb6b5ed647ad32a1843adc732660525","title":"View Retired Lists","path":"/lrsiem/7.20.0/view-retired-lists","children":[]}]},{"id":"ci_99bb92a7194c60a0859d840a7afaba03055e96922078d1c39c556f68f2ea3503","title":"Log Collection in Web Console","path":"/lrsiem/7.20.0/log-collection-in-web-console","children":[{"id":"ci_ca61282729ac72e8209658f482e08d1692c39449b8ee4be5152b8184153b5930","title":"Agents Grid","path":"/lrsiem/7.20.0/agents-grid","children":[]},{"id":"ci_2d553716c06d20abeadc67da246a05ece6fda5560263f20bc9e69f948416778b","title":"Beats Grid","path":"/lrsiem/7.20.0/beats-grid","children":[]},{"id":"ci_9181aa8746161188fd1e9c49af72a87d7acd3e0c66226a108695801f4097fbb9","title":"Log Sources Grid","path":"/lrsiem/7.20.0/log-sources-grid","children":[]},{"id":"ci_2c76f0ce4e88059305c788f38df3f3343a7acaa9d207808077e9bc3854f00938","title":"Open Collectors Grid","path":"/lrsiem/7.20.0/open-collectors-grid","children":[]},{"id":"ci_316ae97c1c9ca08948cd8e4248e686ac9c2fb2112d32180ceca851dd65301054","title":"Add a New Beat in Web Console","path":"/lrsiem/7.20.0/add-a-new-beat-in-web-console","children":[]},{"id":"ci_925131a7695d2f4db4187685c576de85655c15157248d6471ff8d15ad84c7a72","title":"Add a New Log Source in Web Console","path":"/lrsiem/7.20.0/add-a-new-log-source-in-web-console","children":[]},{"id":"ci_1eec6abd8e250bd5b7045758f3b1619c16aefb631f379ecffd01bfbc5c6aade1","title":"Manage Pending Log Sources","path":"/lrsiem/7.20.0/manage-pending-log-sources","children":[]},{"id":"ci_e093fb3bd9e43330447d586b2279499babebfd6a2db0d5f5f18e0491b6d5fff1","title":"Retire Beats","path":"/lrsiem/7.20.0/retire-beats","children":[]},{"id":"ci_2bd74c9e50d342fce7d2c05404b65372bf70a44d05ce24084bad26497c2b9eea","title":"Retire Open Collectors","path":"/lrsiem/7.20.0/retire-open-collectors","children":[]}]},{"id":"ci_56580e0b9b96a6d97f13f69ba34481df47922c70f2455f3f9928204ba1aa93aa","title":"Playbooks","path":"/lrsiem/7.20.0/playbooks","children":[{"id":"ci_91b3ca4b929d5261468b67cc93ac18b70bdd19a00d582f2564e1f1ebcb2844c0","title":"Create Playbooks","path":"/lrsiem/7.20.0/create-playbooks","children":[]},{"id":"ci_62b7e5687998f2fe5fbf054c620d606380d6a2546327ec0c1b17653d662e7a85","title":"Import Playbooks","path":"/lrsiem/7.20.0/import-playbooks","children":[]},{"id":"ci_eeeec47ffd3185ca1230c12a728ac02c49787188f5e151c74d5af55c6d71d6ac","title":"Work with Playbooks","path":"/lrsiem/7.20.0/work-with-playbooks","children":[]},{"id":"ci_2a8275e702cf6e619de80da3e2fffc97c028d7378e0a1f197d5667eb2c9240d5","title":"Add Playbooks to a Case","path":"/lrsiem/7.20.0/add-playbooks-to-a-case","children":[]},{"id":"ci_6a147de6c5814d10c68bd515c14d71b365f8041b10bcfb59afe7a48d106cfd21","title":"Work with Playbooks in a Case","path":"/lrsiem/7.20.0/work-with-playbooks-in-a-case","children":[]},{"id":"ci_f1266c6ec10910464b89f9fd840f95df2199ed900fd20fda5da96abd3a460b50","title":"Procedures List Widget","path":"/lrsiem/7.20.0/procedures-list-widget","children":[]}]},{"id":"ci_4280063b7652823cee17fa7ae73d235fe7dcd212fac75523a8be549e5733fe73","title":"Reports","path":"/lrsiem/7.20.0/reports","children":[{"id":"ci_30ea87abb7506c8b747333715b03e806b742a6f4555f8d088e5e25aa6d321ad0","title":"Completed Reports Widget","path":"/lrsiem/7.20.0/completed-reports-widget","children":[{"id":"ci_bc869965008b84a684383037795979407fd79989a81193d34c7ba9e250ff65d8","title":"Configure Completed Reports Widgets","path":"/lrsiem/7.20.0/configure-completed-reports-widgets","children":[]}]},{"id":"ci_cc1ea1cea442e4eed0de378e3bfa52199ff5de7c452612533a2e6a10aa9b2bf0","title":"Download Reports from the Web Console","path":"/lrsiem/7.20.0/download-reports-from-the-web-console","children":[]},{"id":"ci_00d4ee87d95445bed5218df0c24b588c4a56378b93f95f05f82aa741ead59b9b","title":"Filter Report Packages on the Reports Grid","path":"/lrsiem/7.20.0/filter-report-packages-on-the-reports-grid","children":[]},{"id":"ci_adf92b49f96c27d3f14fc0b0d18fe2b389b6cb5f3e1ba337f21621fe57f3196a","title":"Pin and Resize Reports Grid Columns","path":"/lrsiem/7.20.0/pin-and-resize-reports-grid-columns","children":[]},{"id":"ci_ba57ee34e6c6ba9f31e07809f71ee23f6afcbe0a5cfea9a54dcb7f1999357cd4","title":"Run Searches from Report Filter Criteria","path":"/lrsiem/7.20.0/run-searches-from-report-filter-criteria","children":[]},{"id":"ci_219d76d66bc93c8e25086623cd02ae3b928f23bc5f03f91b1ddb03b3fce1a075","title":"Sort Content on the Reports Grid","path":"/lrsiem/7.20.0/sort-content-on-the-reports-grid","children":[]},{"id":"ci_effa5d3eb59440455a51b22ae3ff5d7ae2c8eeb9838b95d7fb85baf0f8986d84","title":"View Package and Reports Details in the Inspector","path":"/lrsiem/7.20.0/view-package-and-reports-details-in-the-inspector","children":[]}]},{"id":"ci_843ab5bb3b0ca6f07f6a5d428e2e868d51bdd818e31433934eebf2f92357f1c0","title":"Search","path":"/lrsiem/7.20.0/search","children":[{"id":"ci_5269add563bb854d889f4ea2a27440699f2c6c1215cc26a799d214c2596ed7b2","title":"Manage the Searches Page","path":"/lrsiem/7.20.0/manage-the-searches-page","children":[]},{"id":"ci_49ce9c6372e8bd8423bc804c750b46376dd2d1ae1a67ccd2526ddb0ba59687ec","title":"Run Searches from the Searches Page","path":"/lrsiem/7.20.0/run-searches-from-the-searches-page","children":[]},{"id":"ci_329534b9f74a0e01d809138f3c3b375bd2d5e922ce3fbfd9b200ab8c2b4014d9","title":"Use Search","path":"/lrsiem/7.20.0/use-search","children":[]},{"id":"ci_ac5999cd9b235e79a8eadc375536cf83bc6b4b66baa8e1ce1e5424a8a1692087","title":"Save Searches","path":"/lrsiem/7.20.0/save-searches","children":[]},{"id":"ci_f4131149a31ee55a8458db508d628a89d22cc539c91558f20e2e28d1e77831c5","title":"Perform Details Searches (User/Host)","path":"/lrsiem/7.20.0/perform-details-searches-user-host","children":[]},{"id":"ci_64906bd9e42e1ee710a327a3f423636eebae9644dd8369079f470ecb3e869e63","title":"Perform Pivot Searches","path":"/lrsiem/7.20.0/perform-pivot-searches","children":[]},{"id":"ci_337a9301f45d89cc1c74aadb927cc0cdd816f25784f78fd4b9f1943d355e5173","title":"Search Tiers (Hot/Ultra-Warm/Warm/Cold)","path":"/lrsiem/7.20.0/search-tiers-hot-ultra-warm-warm-cold","children":[]}]},{"id":"ci_88ffd66d8c89361e3d5212005b0c19478845185e967b489021a72d638360a66c","title":"SecondLook - Web Console","path":"/lrsiem/7.20.0/secondlook-web-console","children":[]},{"id":"ci_4a0f4b9845c5c995527506f02f8675fc2c047a1f52a2c7f9e7aecc58cf8babb6","title":"Single Sign-On","path":"/lrsiem/7.20.0/single-sign-on","children":[{"id":"ci_f7a2e80a49b151159cc687a82d2cc477c41d78c00090d3ec92a451d6faa553d8","title":"SSO Known Issues and Recommendations","path":"/lrsiem/7.20.0/sso-known-issues-and-recommendations","children":[]},{"id":"ci_60b8cf18c8fb20416ca5eb00f460c911567ceda55f1673c745fb66b2d639eb16","title":"SSO User Auto-Provisioning","path":"/lrsiem/7.20.0/sso-user-auto-provisioning","children":[]},{"id":"ci_86284f3c606aa8079247cd742666e83be2de216568e9b4eab1477fa38f5801ee","title":"SSO Configuration","path":"/lrsiem/7.20.0/sso-configuration","children":[{"id":"ci_340681a5c38ca7626ab53349411b3348269f829dbff0ee5aaed0c0df65f9122d","title":"Supported Identity Providers","path":"/lrsiem/7.20.0/supported-identity-providers","children":[{"id":"ci_bdf3526fce10c89de7e4bcf6a9e670d2a986d340aedb8dc1451db7068c81d132","title":"Configure SSO with Okta","path":"/lrsiem/7.20.0/configure-sso-with-okta","children":[]},{"id":"ci_3a2cb7c80615bcf6897a700101c3b6b4873258f7aefd7b0b7f21138be7748b7e","title":"Configure SSO with Azure AD","path":"/lrsiem/7.20.0/configure-sso-with-azure-ad","children":[]},{"id":"ci_0de9875991873833604f21f1fae7f5772bdc6d0152f0fc36c2a95eb15f75156d","title":"Configure SSO with PingOne for Customers","path":"/lrsiem/7.20.0/configure-sso-with-pingone-for-customers","children":[]},{"id":"ci_fbbd45e6b46c81dc68d608d013b7e6dfa9b4af6ee40b3d93a5801d7ecc338318","title":"Configure SSO with PingOne for Enterprise","path":"/lrsiem/7.20.0/configure-sso-with-pingone-for-enterprise","children":[]}]}]}]},{"id":"ci_7902d7203f933c51cdfd0ffcb631dc5d3c4189be6b21d79baafc91824511d7a9","title":"TrueIdentity","path":"/lrsiem/7.20.0/trueidentity","children":[{"id":"ci_642cef8725d6f059be71dea076829dbe7f5d1e33ed1c67c3b8856416171d8146","title":"Work with TrueIdentities","path":"/lrsiem/7.20.0/work-with-trueidentities","children":[]}]},{"id":"ci_e082995a35c94310eeb8ac1904bdc31f94e995eec2121e20dffe03e4ff6ce93e","title":"User Interface","path":"/lrsiem/7.20.0/user-interface","children":[{"id":"ci_d5dcc5a9a263c1e260730ec5867896ee850255cfb172bd4995b6f3d53533b98c","title":"Resource Center","path":"/lrsiem/7.20.0/resource-center","children":[]},{"id":"ci_f07eb5b7e14460e33e692541c9941d347a399e218115c6e8aed6d242b0caf994","title":"Pages","path":"/lrsiem/7.20.0/pages","children":[{"id":"ci_8a76a5489460d77e42512e5c47ade15b38680ad1e3c0622a8bd9789dd9d4e6fe","title":"Alarms Page","path":"/lrsiem/7.20.0/alarms-page","children":[]},{"id":"ci_ee2c49712d1b76adff679ba2550da7b718e2eb58f54fe68d1a02be9e8ca80f0d","title":"Analyze Page","path":"/lrsiem/7.20.0/analyze-page","children":[]},{"id":"ci_08027fb0240e73c12196150d8a92d846f18a5284623f451cbc506ca816439e19","title":"Cases Page","path":"/lrsiem/7.20.0/cases-page","children":[]},{"id":"ci_7707f580952e6919fab02bd77f658e48e00942dc8142417ec8d0066611d6b545","title":"Dashboards Page","path":"/lrsiem/7.20.0/dashboards-page","children":[]},{"id":"ci_39fc254b4db287f318cc87b2afc909401af5cc049c6351ce423966d15aa715ba","title":"Host/User Detail Page","path":"/lrsiem/7.20.0/host-user-detail-page","children":[]},{"id":"ci_eb38de220a49bddc85dc76f184c47ee0072ded0bd80e1b1415d5ddd411f34c90","title":"Lists Page","path":"/lrsiem/7.20.0/lists-page","children":[]},{"id":"ci_56ae272a6d61fa4155d3f989ddc4ac4eed716077bcbb69c5c4a20e2251d31dd9","title":"Reports Page","path":"/lrsiem/7.20.0/reports-page","children":[]},{"id":"ci_b211619e5e75c3ce30a778b08b1fdb2c804bee51698588e94a0caf81b6b2fa8c","title":"Searches Page","path":"/lrsiem/7.20.0/searches-page","children":[]},{"id":"ci_8f993319177b04d362bf1445b849bb8134599786a1422ecdce74c832c1f7b20a","title":"TrueIdentity Page","path":"/lrsiem/7.20.0/trueidentity-page","children":[]}]},{"id":"ci_5c7f3719b149ee58d7db65e76e2c6dbaac92a44bd8b70111b10c3ccdab23cd84","title":"Panels","path":"/lrsiem/7.20.0/panels","children":[{"id":"ci_0de77c623d76dc98441439c8362ea800aaee083a82f47bf88709d40539c0f59c","title":"About the Analyzer Grid","path":"/lrsiem/7.20.0/about-the-analyzer-grid","children":[]},{"id":"ci_9129d822659edd31093a358a79c54e6ee1557d55eda8f9f431f97dc18b25256a","title":"Current Case Panel","path":"/lrsiem/7.20.0/current-case-panel","children":[]},{"id":"ci_49e5b1eef370f699bcf80b322596252e65bb9b81e6d70168a510b7bd776e8832","title":"Inspector","path":"/lrsiem/7.20.0/inspector","children":[]}]},{"id":"ci_99367ff636cdb93798db177a5f8175b0cd7bf7910ed4e83e0504c2f960a2d442","title":"Tools","path":"/lrsiem/7.20.0/tools","children":[{"id":"ci_93a8bb77a41a90ca402eb584d5e16bb2d73e5eb47b7adcf77343afe20c1433c9","title":"About Widgets","path":"/lrsiem/7.20.0/about-widgets","children":[]},{"id":"ci_dd36eacc74eb2a21373c652f5973c02fc1e111f37723adad1574a6bb77d818c9","title":"Breadcrumbs","path":"/lrsiem/7.20.0/breadcrumbs","children":[]},{"id":"ci_8548656ce1c04e26afd1a39e8a63b22719bd62d60c02358d5827f311c619251f","title":"Hotkeys","path":"/lrsiem/7.20.0/hotkeys","children":[]},{"id":"ci_ac4c28651537f1e43463a72e0d0168636c02834e1a14c5114bdeff498aabfdfb","title":"Icons","path":"/lrsiem/7.20.0/icons","children":[]},{"id":"ci_df38d5f945cb3c73dfca5207f240bd67c26ac7be72953d125fce8b9d2d33cc9d","title":"Search Tools","path":"/lrsiem/7.20.0/search-tools","children":[]},{"id":"ci_2af160abb268ab7ee8a5664a709f83e750935f9fffce6f3d93cd525dd28f4d01","title":"Taskbar","path":"/lrsiem/7.20.0/taskbar","children":[]},{"id":"ci_26d3976c0097dd0a996a62e5bc712fd2bd8bfa027f030477f3e2aa306781e8ef","title":"Typeahead Filters","path":"/lrsiem/7.20.0/typeahead-filters","children":[]}]}]},{"id":"ci_bcd87aa2d150fd0281efbdf75698c74eafdf5b69a829ac28e3dca11293c6ec35","title":"User Settings","path":"/lrsiem/7.20.0/user-settings","children":[{"id":"ci_f29d36d14b5a54be97b5c10eb3aa87d13ec5508788f599a7ec8f767a0cc45c48","title":"Access Web Console Help","path":"/lrsiem/7.20.0/access-web-console-help","children":[]},{"id":"ci_a20d2ecfc73a14247bba05a5fdbeac8b90cbf1764c6781f96cba912dc9af6e83","title":"Change the Default Web Console Search Timeout Period","path":"/lrsiem/7.20.0/change-the-default-web-console-search-timeout-period","children":[]},{"id":"ci_c3aa0f8f58ca5f02a91cc256bd0db5035fa114d38adc89ea381403904ccd7c2c","title":"Change the Web Console NGINX Configuration to Modify Available Ciphers","path":"/lrsiem/7.20.0/change-the-web-console-nginx-configuration-to-modify-available-ciphers","children":[]},{"id":"ci_17729a25c4f56093b98d662b9e4bcdadf632b65ed3b395c12f294365b3260ed7","title":"Change Web Console Password","path":"/lrsiem/7.20.0/change-web-console-password","children":[]},{"id":"ci_665b71eac99f46f68c40af51ab7d8c290f51bb766d19e85b6a5166ae75381735","title":"Configure Navigation Warning","path":"/lrsiem/7.20.0/configure-navigation-warning","children":[]},{"id":"ci_c86938bcd8379b186765ab7863f0c59c4926b1be7c5c7d2ba65ac24a79beb226","title":"Configure Search Results","path":"/lrsiem/7.20.0/configure-search-results","children":[]},{"id":"ci_a3dd9edd13aa4f39a67d94724bc6525d752161fc50f7c144091fae64bd37fb31","title":"Select Query Location","path":"/lrsiem/7.20.0/select-query-location","children":[]},{"id":"ci_516c2a37459d4d4c3965f83959b15bfb9a6f2cf01ba5a1c09759cdb1804eef34","title":"Set the Date Time Format","path":"/lrsiem/7.20.0/set-the-date-time-format","children":[]},{"id":"ci_601d36335db81a4b23961a8901d95cd7bf720a5449fb2771df2b53951905c4b1","title":"Set Your Drilldown Preference","path":"/lrsiem/7.20.0/set-your-drilldown-preference","children":[]},{"id":"ci_22842170f1a200fb00020e7d7fd6ca6ce3ceee3ed07c7b7ea2949e53111d4680","title":"Switch Between Day and Night Modes","path":"/lrsiem/7.20.0/switch-between-day-and-night-modes","children":[]}]},{"id":"ci_f6d8a5ae694d6d6a8cfff1282947dab2b4ba5da8e7ab22941c96818c6181b16b","title":"Widgets","path":"/lrsiem/7.20.0/widgets","children":[{"id":"ci_9cc5efaf8fdb404c211931307ed111c87707cd34a55fda99f447364c32983b5f","title":"Customize Dashboard Widgets","path":"/lrsiem/7.20.0/customize-dashboard-widgets","children":[{"id":"ci_132c3c8fe74e6b1aaab1a37947f0a4198b7b758d0c72b4c22172ece94f62b1c9","title":"Add Widgets","path":"/lrsiem/7.20.0/add-widgets","children":[]},{"id":"ci_3a0d4a9fc29b62213c023a7fe13c46449346b5275cf6707b98771aa0fadcda68","title":"Configure Widget Settings","path":"/lrsiem/7.20.0/configure-widget-settings","children":[]},{"id":"ci_a61eae5320af8709519acdce965a98a0732f7797102236c555f985abf1ff4da7","title":"Copy Widgets","path":"/lrsiem/7.20.0/copy-widgets","children":[]},{"id":"ci_6baf4f21af1c2749703d8922ca66a8a5022a9d14bcd8938c9f43c35bf872b48f","title":"Delete Widgets from a Dashboard Layout","path":"/lrsiem/7.20.0/delete-widgets-from-a-dashboard-layout","children":[]},{"id":"ci_409a823dfe3a05f53c26768156df547b2257f338d1d847861b6f8baa66fa5e66","title":"Move Widgets","path":"/lrsiem/7.20.0/move-widgets","children":[]},{"id":"ci_30a8a171597cb1f41bfb9a3034061bad5db14ca00471c59c4b5e601c30a7d0f4","title":"Rename Widgets","path":"/lrsiem/7.20.0/rename-widgets","children":[]},{"id":"ci_fd84db34cfa0dfccb63e1ae73f37c709710e49f3c43a9593865de7f86eb968b2","title":"Resize Widgets","path":"/lrsiem/7.20.0/resize-widgets","children":[]}]},{"id":"ci_e0e54a60e618ec799534f8d08c386f67fd0618a6682bcab1f4577ca4fba80b38","title":"Component Status Widget","path":"/lrsiem/7.20.0/component-status-widget","children":[]},{"id":"ci_55476baa3dde1bae05b8f74fb646a10ea09587de8074c7f3f8a4630125f931ab","title":"Current Processing Rate Widgets","path":"/lrsiem/7.20.0/current-processing-rate-widgets","children":[]},{"id":"ci_e879ab6139c8eb6b0f31e4fbf746e8f944ed1bbd783171593b5dcceae6e63c67","title":"Data Processing Trend Widgets","path":"/lrsiem/7.20.0/data-processing-trend-widgets","children":[]},{"id":"ci_7cc18fcf00c98bcefa750cc2bfd6425e2858696c9606a9bc03447af50bdf0807","title":"Node-Link Graph Widgets","path":"/lrsiem/7.20.0/node-link-graph-widgets","children":[]},{"id":"ci_9040066b7607ed071d1752f4dd1fcbfa7bd515913cdd1e9295b8d4d4536cb2da","title":"System Database Usage Widget","path":"/lrsiem/7.20.0/system-database-usage-widget","children":[]},{"id":"ci_be7f52cfb3007b4fb7cfac7655ddaa70b945ea1791870a821468b32b1ad42e5e","title":"Threat Activity Map","path":"/lrsiem/7.20.0/threat-activity-map","children":[{"id":"ci_78827c4853238a8107c9c7bcb17cb679a3406a1ed756e097cde5361f82fa4922","title":"Configure Threat Activity Map Widget Settings","path":"/lrsiem/7.20.0/configure-threat-activity-map-widget-settings","children":[]},{"id":"ci_0056e3426f552846ee71ca8c9750156c765afee9c32e36d64259ca4847da29db","title":"Drill into Threat Activity Map Node Data","path":"/lrsiem/7.20.0/drill-into-threat-activity-map-node-data","children":[]},{"id":"ci_92786f75f9a8d4f21d16fb6ceb0c91ee3f1cd50f0e4c1083b02c94d87991e123","title":"Troubleshoot Threat Activity Map","path":"/lrsiem/7.20.0/troubleshoot-threat-activity-map","children":[]},{"id":"ci_d909d8577ea085fd7ff244e8de5f75fcf8a96d6c7274ebf9cf789be3f3129ae6","title":"Zoom In and Out on the Map","path":"/lrsiem/7.20.0/zoom-in-and-out-on-the-map","children":[]}]},{"id":"ci_901d9fab4308d9bbfbdddbaf65d150a1e19ae0b304e7e65f2bfdd4a75fc4931d","title":"Timeline Widget","path":"/lrsiem/7.20.0/timeline-widget","children":[]},{"id":"ci_45801c96432e81acebfcaa9b8bbbff5a7e593e9b7ace6f4895fa90344f40987d","title":"TopX Widgets","path":"/lrsiem/7.20.0/topx-widgets","children":[{"id":"ci_d2ca11e4e8002e8f783d3c916b9a4342d1799c6ceee73e33c893aa247e79d279","title":"Configure TopX Widget Data Settings","path":"/lrsiem/7.20.0/configure-topx-widget-data-settings","children":[]},{"id":"ci_d459a3fa409b873f7429a0ec1111c19aa785ef6e6ee662d41743a6f5ea81d07b","title":"Configure TopX Widget Graph & Options Settings","path":"/lrsiem/7.20.0/configure-topx-widget-graph-options-settings","children":[]},{"id":"ci_37e73269491e627a03ad5cc26a8c500422ea630fc6816b960034c238167b53b6","title":"Drill into Chart Metadata from the Dashboards","path":"/lrsiem/7.20.0/drill-into-chart-metadata-from-the-dashboards","children":[]},{"id":"ci_ac16e12dae0584e80e257fc8e5f4371c3ef30e076419ba261782c835cef525cc","title":"Filter Data by Time Range on the Dashboards and Analyze Pages","path":"/lrsiem/7.20.0/filter-data-by-time-range-on-the-dashboards-and-analyze-pages","children":[]},{"id":"ci_458e1d18f121079f9f17da2c137487668114886fb67f810ad7492fae6778598c","title":"Resize TopX Data Labels on Bar Charts","path":"/lrsiem/7.20.0/resize-topx-data-labels-on-bar-charts","children":[]}]}]}]},{"id":"ci_1bd17159aa145473d6dd5ba5b791c12644acbc29304ef29ce9879af27e15b791","title":"LogRhythm Schema Dictionary and Guide","path":"/lrsiem/7.20.0/logrhythm-schema-dictionary-and-guide","children":[{"id":"ci_7c6e5fbae94fbd826f308680a5150b85e9cc74726a2b9d3aadb976e25eaeb9af","title":"Application Tab","path":"/lrsiem/7.20.0/application-tab","children":[{"id":"ci_361c6aa1bb4b3ff0fbd3685e3eaf501e52f04997d2b556930ad51f7a07a0fb33","title":"Action [7.2]","path":"/lrsiem/7.20.0/action-7-2","children":[]},{"id":"ci_fe12711987a6655859562a3d134ddee02415d024e0ca5c64039ab6e22805363e","title":"Amount","path":"/lrsiem/7.20.0/amount","children":[]},{"id":"ci_ebbd0955f2ac600e9a50737838fd476a8cd4f5301e0a9ad2d757b345df67ab6c","title":"Command","path":"/lrsiem/7.20.0/command","children":[]},{"id":"ci_8e3a1b3f1ad21c7958498d2826c7c769c45c49318b1d325049de7b9b10f5a57a","title":"Hash [7.2]","path":"/lrsiem/7.20.0/hash-7-2","children":[]},{"id":"ci_8b93c59925d6d13fbb4870014a2f8410e3a237c58e111a0487df2e8dca661922","title":"IANA Protocol Name","path":"/lrsiem/7.20.0/iana-protocol-name","children":[]},{"id":"ci_21409f857d924004f29f0b0d8ec807e44ff9564003c720749df50e1091b5a0e2","title":"IANA Protocol Number","path":"/lrsiem/7.20.0/iana-protocol-number","children":[]},{"id":"ci_e8aab8e85ff37e405ace2a9b6a60b1a80620c57d6c6d61ead189bd203aa33d19","title":"Object","path":"/lrsiem/7.20.0/object","children":[]},{"id":"ci_acab03a40fb141de46b83dbc214c7ff33bc55e7ea79b153f2ac258708f6b647e","title":"Object Name","path":"/lrsiem/7.20.0/object-name","children":[]},{"id":"ci_f2d47ed6f25b4ef4075e41d03ce6b8f5729ea1b0166be9ae3a7e71f6b2c94496","title":"Object Type [7.2]","path":"/lrsiem/7.20.0/object-type-7-2","children":[]},{"id":"ci_eebbe8e35bb7eaf15c140a5ae3d68be521ff3971e730185a8db6704076f26dad","title":"Parent Process ID [7.2]","path":"/lrsiem/7.20.0/parent-process-id-7-2","children":[]},{"id":"ci_2ff8aeba6446a08cff3d442a0eb2c19b4afaca2d614e20931d0c23183c3fe859","title":"Parent Process Name [7.2]","path":"/lrsiem/7.20.0/parent-process-name-7-2","children":[]},{"id":"ci_e43aa0efe74709be61d2869989c202689ad6a0fef8f76e56fc783079db19567b","title":"Parent Process Path [7.2]","path":"/lrsiem/7.20.0/parent-process-path-7-2","children":[]},{"id":"ci_496d6b9cd7a269b6d49dc327d8b52f95447f8efa8b7c6bb307e9bdf23a930e1a","title":"Policy [7.2]","path":"/lrsiem/7.20.0/policy-7-2","children":[]},{"id":"ci_12889d6d677c6cf29cf21736856676752d4434d93e6967dd5f39aa16e9e38558","title":"Process ID","path":"/lrsiem/7.20.0/process-id","children":[]},{"id":"ci_41cb77eb83d74cc149d3ced858f04801b495f6c00caff4118c52c90fe192765d","title":"Process Name","path":"/lrsiem/7.20.0/process-name","children":[]},{"id":"ci_b5d0b091478c921cdc717a1293729b045b6c19caba91d6f5d18bf6b1a3d31003","title":"Quantity","path":"/lrsiem/7.20.0/quantity","children":[]},{"id":"ci_a153450dea40cbe76d8413fa96a20d18bf5dd114a430ce22e64195eba3b484a3","title":"Rate","path":"/lrsiem/7.20.0/rate","children":[]},{"id":"ci_8755110b12a60f5d926b998d34598d3a0b0ac8180d358c1b93185b9ddea2ac1c","title":"Reason [7.2]","path":"/lrsiem/7.20.0/reason-7-2","children":[]},{"id":"ci_9691d34da9cab05aa62fd8795af7d7cd486dbaf3ca0c3501875ec9bf43cd9127","title":"Response Code [7.2]","path":"/lrsiem/7.20.0/response-code-7-2","children":[]},{"id":"ci_ac7ae1d497ccd51b15374b483f5d443a60986507dfa0fae8d83df3877057da4d","title":"Result [7.2]","path":"/lrsiem/7.20.0/result-7-2","children":[]},{"id":"ci_5bbc6433995452647fffe762982896f1a45e9c633ec0673b733147256ad4ca66","title":"Session","path":"/lrsiem/7.20.0/session","children":[]},{"id":"ci_c32118f4cbc51a780c514c426ccfb534abc4d591e3204be41fe8288b33363c3a","title":"Session Type [7.2]","path":"/lrsiem/7.20.0/session-type-7-2","children":[]},{"id":"ci_16c1f7ebb0a6c74786b31fd3c28aefadcbac6aac26f1fe26f36fa873d3a1e41f","title":"Size","path":"/lrsiem/7.20.0/size","children":[]},{"id":"ci_6513c67cffb6cd6db6861375f92f43ecc4a8a91c129602c9181c6ac4887ba1ed","title":"Status [7.2]","path":"/lrsiem/7.20.0/status-7-2","children":[]},{"id":"ci_155d15e7d13f591effe91308066b12b66d715d6a406764c5572c898310017607","title":"Subject","path":"/lrsiem/7.20.0/subject","children":[]},{"id":"ci_b855d00290bcd3f4461ff652d0f12c6f913d7564eecf1a5fe1ffa30efab5e7ec","title":"URL","path":"/lrsiem/7.20.0/url","children":[]},{"id":"ci_b5af06a32f799ac55543351066611b7e1ee84891673b172b528070f8f0d4326d","title":"User Agent [7.2]","path":"/lrsiem/7.20.0/user-agent-7-2","children":[]},{"id":"ci_a5ee659ec39940e42198e55e24c264923c3ecb005b09cdef381f7689459155bd","title":"Version","path":"/lrsiem/7.20.0/version","children":[]}]},{"id":"ci_7455fda2eba0e8cacb7a2bc2d56c9909f312629641219bcd08cc804d3e197e33","title":"Kbytes/Packets Tab","path":"/lrsiem/7.20.0/kbytes-packets-tab","children":[{"id":"ci_04fbb7014695973b0c6fa03bc846706eaa1d0c379708a925ede5222b6cf1df3f","title":"[prefix] [Bits/Bytes] [blank/In/Out]","path":"/lrsiem/7.20.0/prefix-bits-bytes-blank-in-out","children":[]},{"id":"ci_92e973308da5e5838d488594e960074a84a47c806f34da46f74e696f1e7f3a09","title":"Packets [Total/In/Out]","path":"/lrsiem/7.20.0/packets-total-in-out","children":[]}]},{"id":"ci_303bd52513e1626fba599e8f4861d69dbf716761e62417706d036b9927c5126e","title":"Classification Tab","path":"/lrsiem/7.20.0/classification-tab","children":[{"id":"ci_a53e0889c8675017146bb759b955c01a13561710149da3847eb84a33cef5111b","title":"CVE [7.2]","path":"/lrsiem/7.20.0/cve-7-2","children":[]},{"id":"ci_32dad94a5a8d942a958519584c648aaeb1d10e04d806fdf5beb0ad148ae128d9","title":"Severity","path":"/lrsiem/7.20.0/severity","children":[]},{"id":"ci_2659c88683b72574bbb210b9dcece076635ce408d2daadb028b80b81e6cb05c3","title":"Threat ID [7.2]","path":"/lrsiem/7.20.0/threat-id-7-2","children":[]},{"id":"ci_582eee13f95127088b612c84d9d5e5cdcdf3eff8bff5621db89a6fa31d6cb161","title":"Threat Name [7.2]","path":"/lrsiem/7.20.0/threat-name-7-2","children":[]},{"id":"ci_582cdfb65d2a7dcec5e055bd790a5fdc712be2228caa81a53a8b3ee88c424589","title":"Vendor Info [7.2]","path":"/lrsiem/7.20.0/vendor-info-7-2","children":[]},{"id":"ci_870728435c5de092ace6312f8534db2c101ce04f2690186cff25d59721ae5c82","title":"Vendor Message ID","path":"/lrsiem/7.20.0/vendor-message-id","children":[]}]},{"id":"ci_1109a081f640d8cadebe68bd68d829ad7bf650f0b014c346862d6a87119472bb","title":"Host Tab","path":"/lrsiem/7.20.0/host-tab","children":[{"id":"ci_a8d299039f73606dd782ce8bcb19eac9fe733844920365f21b22f3b8606f46ad","title":"DIP/DestinationIP/Impacted IP","path":"/lrsiem/7.20.0/dip-destinationip-impacted-ip","children":[]},{"id":"ci_6fc56f467b43ecdfc2fdeb3a634019667f4454d6d85ac194a2d44706df2562a1","title":"DIPv4","path":"/lrsiem/7.20.0/dipv4","children":[]},{"id":"ci_5463ca8c9da3ebd573009d043a1a873b36dd2ac19d0926edabab37e252ec8b28","title":"DIPv6","path":"/lrsiem/7.20.0/dipv6","children":[]},{"id":"ci_9d25b770f55714ee16f76e0112dc2f244c40af91604839f4d04a6dbfdcb71f9b","title":"DIPv6E","path":"/lrsiem/7.20.0/dipv6e","children":[]},{"id":"ci_a2d7b94f87fd03f16365593f067fb9cb4f38bdc1655e03de49434453c8b8a7d7","title":"Impacted Hostname","path":"/lrsiem/7.20.0/impacted-hostname","children":[]},{"id":"ci_99126fe479fcfae1f880bcb0f3471b2fb68f1669dd2dcd569aa243aa07bf99cf","title":"Impacted Hostname or IP","path":"/lrsiem/7.20.0/impacted-hostname-or-ip","children":[]},{"id":"ci_a62a3adc750ac5a239be775bda07ee8f96e9d41c68d812d93f63107fe127459a","title":"Impacted Interface","path":"/lrsiem/7.20.0/impacted-interface","children":[]},{"id":"ci_f52209cb0f6e3df4c1774a7a3a6aa03aad60c8d3bb3b4e15ad758b6d9c83f498","title":"Impacted MAC Address","path":"/lrsiem/7.20.0/impacted-mac-address","children":[]},{"id":"ci_7f8beb04e3dc01aa44e6e66fdd14525fb97a379947466b2c36e35d0e63c32130","title":"Impacted NAT IP","path":"/lrsiem/7.20.0/impacted-nat-ip","children":[]},{"id":"ci_27436a4f47664adca6e1044f1cdadb3cfa53a54ab680c62d1facdfdb03d05a1b","title":"IP Address (Origin)","path":"/lrsiem/7.20.0/ip-address-origin","children":[]},{"id":"ci_105b36eb7cb10c518c4b29dd88e33cc7ae8a0bb422bf65738699690c6b0acbd4","title":"Origin Hostname","path":"/lrsiem/7.20.0/origin-hostname","children":[]},{"id":"ci_73b36196b426f1923d6c84b8473cefe8994c121b18150ab3cc3cf3ad5ba1d925","title":"Origin Hostname or IP","path":"/lrsiem/7.20.0/origin-hostname-or-ip","children":[]},{"id":"ci_2866c02f3e8c46d54b8ca4bdabe6c7ce6fa9966ea8634bf14ea82d773e0e21e6","title":"Origin Interface","path":"/lrsiem/7.20.0/origin-interface","children":[]},{"id":"ci_5109c9c46672bad122ea3e56eccc7755ea4198158152a5f0b4308493d7bebbc2","title":"Origin MAC Address","path":"/lrsiem/7.20.0/origin-mac-address","children":[]},{"id":"ci_d70e90d778bd1a5305bc1d0f20b228365b546135e059200aafe3510b3f3291af","title":"Origin NAT IP","path":"/lrsiem/7.20.0/origin-nat-ip","children":[]},{"id":"ci_9e75a3325e2f4696e46ba85c0b5fd3a050800eed464c418a84acd0f3ac6fbde8","title":"Serial Number [7.2]","path":"/lrsiem/7.20.0/serial-number-7-2","children":[]},{"id":"ci_dbda6763a62d9acac4a420d13a5267b9d7427035f18a008fab095c4cb9573181","title":"SIPv4","path":"/lrsiem/7.20.0/sipv4","children":[]},{"id":"ci_f8bf6d6d28ecb8d535d9ac34f3ac1d3126fc1788224df5637578b5d13870493d","title":"SIPv6","path":"/lrsiem/7.20.0/sipv6","children":[]},{"id":"ci_4fcdeeda0e44e6381722eb0b85e72e1907c5e9bd435ec064a706d73fadb072ed","title":"SIPv6E","path":"/lrsiem/7.20.0/sipv6e","children":[]}]},{"id":"ci_0445a35587efc4f1047a037d9d715274f491dba801ec9c4e31a6dda3a9dd5d17","title":"Identity Tab","path":"/lrsiem/7.20.0/identity-tab","children":[{"id":"ci_ccfac7a4308de5b933acfb13112817452379d8b3bc22dec6cf62b099c7d0c9bd","title":"Account > User (Impacted)","path":"/lrsiem/7.20.0/account-user-impacted","children":[]},{"id":"ci_4b549cff1b82276739b319d475f6153b8af0b22e6217b4828ee0cd1e1ec5b574","title":"Group","path":"/lrsiem/7.20.0/group","children":[]},{"id":"ci_027b696c07c7176ff422deb9debfa501e487512260353272c6ad053424add888","title":"Login > User (Origin)","path":"/lrsiem/7.20.0/login-user-origin","children":[]},{"id":"ci_ab634968c9af73cae626bc08e04ac8067306eb9918e1d2cf1e12d4b1bd5baf49","title":"Recipient","path":"/lrsiem/7.20.0/recipient","children":[]},{"id":"ci_e8f00457cdf38a2ce0eed3dc64de0e7a4dc19bdb245607fdafdd7ece290666da","title":"Sender","path":"/lrsiem/7.20.0/sender","children":[]}]},{"id":"ci_e772f2a2194ab89fc6b37eaf8e876ab219f82d8a821d38ff69ab3d4584f0ae89","title":"Location Tab","path":"/lrsiem/7.20.0/location-tab","children":[]},{"id":"ci_0687772ef289171f1d21ca1a25453faebee072c10541f124cdbd4acbb6b1f6c3","title":"Log Tab","path":"/lrsiem/7.20.0/log-tab","children":[]},{"id":"ci_ffc84946e70ebf9eae424acdf8b0c3bc1702357991c781e3eb77b2ccb3ef62e6","title":"Network Tab","path":"/lrsiem/7.20.0/network-tab","children":[{"id":"ci_c26bc37b864228f71ceb99341f1a6fff1f6efc5df5b10330f058ed91f026ad69","title":"Domain (Origin) [7.4]","path":"/lrsiem/7.20.0/domain-origin-7-4","children":[]},{"id":"ci_46ac1f1d68e05737575756654c4a98486145b545fc69c629dc701d56ce9a5597","title":"Domain [7.2] (Domain (Impacted))","path":"/lrsiem/7.20.0/domain-7-2-domain-impacted","children":[]},{"id":"ci_c8a52dc6ec265608c0aabe57f7a07320b4d45f97822114d43f4e0feebe5e50d9","title":"Impacted NAT Port","path":"/lrsiem/7.20.0/impacted-nat-port","children":[]},{"id":"ci_0c21c7d9c85361328cf4091b54e71c50e294fca797bbe8da09f0f4bbf7873c7d","title":"Impacted Port","path":"/lrsiem/7.20.0/impacted-port","children":[]},{"id":"ci_7b129f9e6412283e7821becc5abe2e2118365b7dc3fd710ed8d382b25f8538d3","title":"Origin NAT Port","path":"/lrsiem/7.20.0/origin-nat-port","children":[]},{"id":"ci_ba4ae8f48bd654e93b951c6af4e203146af055da2f4e7f73a2ab46e505a47aa8","title":"Origin Port","path":"/lrsiem/7.20.0/origin-port","children":[]}]},{"id":"ci_1fb34ff770a95cbdc7a6946bd415c46808bdfcf2e3557173c065b7c91b3ae274","title":"Other MPE Fields","path":"/lrsiem/7.20.0/other-mpe-fields","children":[{"id":"ci_9c8718a7aad6f72edc4294705a7d9e1246fc219f6d00b61152ba159cc6e9f7c4","title":"[Tag1-Tag5]","path":"/lrsiem/7.20.0/tag1-tag5","children":[]},{"id":"ci_c26edc607d92113e642be598546c2ca78c85c9c834230d2af7b0ba8425726ca7","title":"Items In","path":"/lrsiem/7.20.0/items-in","children":[]},{"id":"ci_fea98a4bddc318204896aa5b51ee79fcde74492950b4925ce6a4203c6b91e33a","title":"Items Out","path":"/lrsiem/7.20.0/items-out","children":[]}]},{"id":"ci_f6b080685b2389c3c5578ec23688d41cfe1d8aaa383cb616fa8adfffdf1add81","title":"Derived Data","path":"/lrsiem/7.20.0/derived-data","children":[{"id":"ci_56dae01cd8ce62a309fb486df436c53135eebd969efb06517c58a5f8e3a14d5c","title":"Identity-Derived Data","path":"/lrsiem/7.20.0/identity-derived-data","children":[]},{"id":"ci_9557c8f1baaefd73676992f79244eb1bb9b2c754564bf1b801e9405d5b2c541d","title":"Log-Derived Data","path":"/lrsiem/7.20.0/log-derived-data","children":[]}]}]},{"id":"ci_ba5c3c9c7c3e1ee6bf817d680b3d16d7961be092996b61ec141db8e3848556a6","title":"Other LogRhythm Applications","path":"/lrsiem/7.20.0/other-logrhythm-applications","children":[{"id":"ci_55f3db95e9a2f0d0d914ba9bf79ae7993672e82b03891383335f9d13778f6594","title":"LogRhythm Intelligence","path":"/lrsiem/7.20.0/logrhythm-intelligence","children":[{"id":"ci_adbc6379108babb2325d6669d881c57b11031813160fab6403bcbd5f65513dac","title":"LogRhythm Intelligence Threat Summary","path":"/lrsiem/7.20.0/logrhythm-intelligence-threat-summary","children":[]},{"id":"ci_2236f6fc12b9f8eda6a8f779b54174d13fe817e34fc9e7050d253e64c2a3d9dd","title":"LogRhythm Intelligence Cloud Data Security","path":"/lrsiem/7.20.0/logrhythm-intelligence-cloud-data-security","children":[]}]},{"id":"ci_3c66b45f84006820d126e5747c8b7eadebf19cee06b6ba1acf49b0e2ee3f31b8","title":"Threat Intelligence Service","path":"/lrsiem/7.20.0/threat-intelligence-service","children":[{"id":"ci_bf45b0b6337ce218c413f1a4036c58d551d98e42f992dfb8755217f35e9fffd3","title":"Install and Deploy the Threat Intelligence Service","path":"/lrsiem/7.20.0/install-and-deploy-the-threat-intelligence-service","children":[{"id":"ci_8f74cbd02f911ba670de2c05d75647104f95a634032fe22ecf1a2eab909b5074","title":"Run the Threat Intelligence Service Installer","path":"/lrsiem/7.20.0/run-the-threat-intelligence-service-installer","children":[]},{"id":"ci_3070b7cf97023830dcc3480cd31576201a69d03d2ff5a1077b87c491d41dba71","title":"Modify, Repair, or Remove the Threat Intelligence Service","path":"/lrsiem/7.20.0/modify-repair-or-remove-the-threat-intelligence-service","children":[]},{"id":"ci_d609aae2908cb6aeaac273cacf017f468206a96fdf9baa15ea9aced0d8d02e2e","title":"Enable and Import the Threat Intelligence Service Modules","path":"/lrsiem/7.20.0/enable-and-import-the-threat-intelligence-service-modules","children":[]},{"id":"ci_08eccbd5cb39997624ef5e2dbd58992ebc1b436e0563303c29f9aebd4e57cb1d","title":"Associate Vendor Lists with LogRhythm Lists","path":"/lrsiem/7.20.0/associate-vendor-lists-with-logrhythm-lists","children":[]},{"id":"ci_1bee154f8da3c852faa370bac529fa84bc3fa9a76ce419daa1d2fe378613d90f","title":"Enable Threat List AIE Rules","path":"/lrsiem/7.20.0/enable-threat-list-aie-rules","children":[]},{"id":"ci_613bb16446e6dcdcd586dbf42163dadbac2c384c05c37a24b0a305879a35880e","title":"Start the LogRhythm Threat Intelligence Service","path":"/lrsiem/7.20.0/start-the-logrhythm-threat-intelligence-service","children":[]},{"id":"ci_2f4a6ff595a1242bdc5ab1089e29bf0a9a354127664deabe252bb26010a36874","title":"Vendor Lists","path":"/lrsiem/7.20.0/vendor-lists","children":[{"id":"ci_df004b5c07edea8ae98bb92d189a8f61b99b9ed71de4dee23bfb45ce3297de46","title":"BrightCloud","path":"/lrsiem/7.20.0/brightcloud","children":[]},{"id":"ci_1c0bbab72ea4799be15b947c0e267063f65db28367844081c31b1c1304445d34","title":"CrowdStrike","path":"/lrsiem/7.20.0/crowdstrike","children":[]},{"id":"ci_b5db41465a53b53766fb322aec0233fc7044fb460c395d284272e91380a50974","title":"Cisco AMP Threat Grid","path":"/lrsiem/7.20.0/cisco-amp-threat-grid","children":[]},{"id":"ci_e94aa052154ef31e67e68b70c254b4c19dab0636a4a55a3cccfba58884b3b302","title":"Symantec","path":"/lrsiem/7.20.0/symantec","children":[]},{"id":"ci_7207bab97d5083b72179e91704973439298688cc839b0b53482d54189f8939aa","title":"Open Source","path":"/lrsiem/7.20.0/open-source","children":[]},{"id":"ci_16558356b5c07b01ca6c64978347b861c589423789b52cb3f386c35a15d5c151","title":"Custom Providers","path":"/lrsiem/7.20.0/custom-providers","children":[]}]}]},{"id":"ci_9aeec07b2473fa361c7eeaec14b8f481c51872de5bb0fdc7317c170865327f75","title":"Threat Intelligence Service User Guide","path":"/lrsiem/7.20.0/threat-intelligence-service-user-guide","children":[{"id":"ci_7bd0051747512ba1fa5afee9275f7f2502bbfe036b3b2c250313bf328856bfe9","title":"Launch the Service Manager","path":"/lrsiem/7.20.0/launch-the-service-manager","children":[]},{"id":"ci_ef025dae688d57a11f37cd892e03f84fb2a4e905a828f8b892fc0843439b823c","title":"Configure the Connection to LogRhythm","path":"/lrsiem/7.20.0/configure-the-connection-to-logrhythm","children":[]},{"id":"ci_6a96345501a1a6a1caac8b3ed1d6dce29b8bf27a4d20ebbf5a4619da13ec246b","title":"Configure Proxy Settings","path":"/lrsiem/7.20.0/configure-proxy-settings","children":[]},{"id":"ci_efa4ee88dae225e0fee73a94d1b8578af8696c0969c92d2bc4f38293a0f914ee","title":"Configure Vendor Threat Feeds","path":"/lrsiem/7.20.0/configure-vendor-threat-feeds","children":[]},{"id":"ci_9d5267819347549376e26a533d6f77b60acdffdc95693a9c382e8d23d300157b","title":"Add a Custom STIX/TAXII Provider","path":"/lrsiem/7.20.0/add-a-custom-stix-taxii-provider","children":[{"id":"ci_6493f34bee361ab93777fc3493031069cdd6f197d5e8f949bfcb8899b9c6d99b","title":"Add a STIX Feed in TIS","path":"/lrsiem/7.20.0/add-a-stix-feed-in-tis","children":[]},{"id":"ci_896a50a7220896bf2f9725aaf87de5378a5c8326416fd0d30183c40fb4b0e4ac","title":"Configure CustomObjectType in STIX/TAXII Feeds in TIS","path":"/lrsiem/7.20.0/configure-customobjecttype-in-stix-taxii-feeds-in-tis","children":[]}]},{"id":"ci_e49550fd58044fde2bc00f26f329fd37248f88c67735917f4e5f8b84ec173aae","title":"Start and Stop the Service","path":"/lrsiem/7.20.0/start-and-stop-the-service","children":[]},{"id":"ci_ba2d3822c0eccf145a09fe2df21fe32eb687a488d0fd6262bd102dc94efd780c","title":"Configure the Threat Intelligence Service Whitelist","path":"/lrsiem/7.20.0/configure-the-threat-intelligence-service-whitelist","children":[]},{"id":"ci_d493d42dcf371a5aa9280321b3017a29c589135a6d923ee5b1c8bc2d6eac9df2","title":"URL Normalization","path":"/lrsiem/7.20.0/url-normalization","children":[]},{"id":"ci_47529525366ceff4d6069ce93ea7f2c93ed1d92b1c7e48f591216e5bb53ebfc2","title":"Request Response Logging","path":"/lrsiem/7.20.0/request-response-logging","children":[]},{"id":"ci_0d58ec80d9c6d59a7ae43836e4f0b2e961511a10ff111cccfe2d5bc8706647d3","title":"View Log Files","path":"/lrsiem/7.20.0/view-log-files","children":[]},{"id":"ci_6875e5ed6b04417f6bddb23d59f5134649dbc74350e048a27d3d2345dad21ec9","title":"Troubleshoot the Threat Intelligence Service","path":"/lrsiem/7.20.0/troubleshoot-the-threat-intelligence-service","children":[{"id":"ci_8dc1f9fa4f9db2c41ae744f5ff5296ffd166edc60cfbea1e38630ac86495755d","title":"Firewall Blocking Open Source URLs in TIS","path":"/lrsiem/7.20.0/firewall-blocking-open-source-urls-in-tis","children":[]},{"id":"ci_b9feba2f4acea0b7b948a6720a86de3598fdc84095608fc64e51597d3eb983bd","title":"Log Files in TIS","path":"/lrsiem/7.20.0/log-files-in-tis","children":[]},{"id":"ci_f46242a2cb561f227ca8dd4f42e75402f77ae30a88097b7f749a6b13f8c2de73","title":"Resource Utilization in TIS","path":"/lrsiem/7.20.0/resource-utilization-in-tis","children":[]},{"id":"ci_a18a36d444d246ea9feb00907af81995565fa5a9cd3048b4e45351eb4f3deaca","title":"Threat Intelligence Service Will Not Start","path":"/lrsiem/7.20.0/threat-intelligence-service-will-not-start","children":[]}]}]}]},{"id":"ci_c713fba6d16c564a058980d520aeae91a1ac90dac7a8f11b3fe9793c275e2ecf","title":"LogRhythm Diagnostics Tool","path":"/lrsiem/7.20.0/logrhythm-diagnostics-tool","children":[{"id":"ci_eda3484e51b9a589a6820dbd0ccd64c75bcd8e62bb15aa708841cc6b2bba5a5e","title":"Install the Diagnostics Agent and Diagnostics Tool","path":"/lrsiem/7.20.0/install-the-diagnostics-agent-and-diagnostics-tool","children":[]},{"id":"ci_c7536ded19ccfe115bbbcc2d9ac9d1cf9001c7425bcf9b8f7e65e925db24b035","title":"Configure Collection on the Diagnostics Tool","path":"/lrsiem/7.20.0/configure-collection-on-the-diagnostics-tool","children":[]},{"id":"ci_f7101677e079c73a12bfac4a93b3846dae31797f0ed6823c868f826176648799","title":"Tabs in the Diagnostic Tool","path":"/lrsiem/7.20.0/tabs-in-the-diagnostic-tool","children":[]},{"id":"ci_9b02f235a757413d63b6140fb063c67fddb70a8d1940ba261f494a8c9161f595","title":"Log Files and Data Collected by the Diagnostic Tool","path":"/lrsiem/7.20.0/log-files-and-data-collected-by-the-diagnostic-tool","children":[]},{"id":"ci_d3d8c7ade25b83ffacb0d8a07b965af20cf8771f419143684b00cf3fe2631edd","title":"Detailed .zip File Contents From the Diagnostics Tool","path":"/lrsiem/7.20.0/detailed-zip-file-contents-from-the-diagnostics-tool","children":[]}]},{"id":"ci_f7382bb138273c7f36ab52b34e923d491bfd1424522ea26c52e5ea37e60e39d8","title":"LogRhythm Echo","path":"/lrsiem/7.20.0/logrhythm-echo","children":[{"id":"ci_1611b354391a1525021daac7c089a7d5fb470a88f3e4e91fc52bcdb6839d8663","title":"Install or Upgrade LogRhythm Echo","path":"/lrsiem/7.20.0/install-or-upgrade-logrhythm-echo","children":[]},{"id":"ci_8055ea2fc6b2a7b01589a0a1e63d72ad533eb4d50857e03d64f2a19d97d4247c","title":"Configure LogRhythm Echo","path":"/lrsiem/7.20.0/configure-logrhythm-echo","children":[]},{"id":"ci_bb7799d4307c3d2b8fde60d8a9c5a5b5911483e9a10f0caeb77b394e69fbb0bb","title":"Manage LogRhythm Echo Use Cases","path":"/lrsiem/7.20.0/manage-logrhythm-echo-use-cases","children":[]},{"id":"ci_f8e79ef12b25497de2c8aad0e51341f5bcd9fb910998c3f54e5e305a6db14ffe","title":"Run LogRhythm Echo Use Cases","path":"/lrsiem/7.20.0/run-logrhythm-echo-use-cases","children":[]},{"id":"ci_054a610af1f7428138766dab2485a812ea8c52f43028b38e5da8e2591290b857","title":"Schedule LogRhythm Echo Use Cases","path":"/lrsiem/7.20.0/schedule-logrhythm-echo-use-cases","children":[]},{"id":"ci_6987ba2bdc21442ba600c3e095686565e0a0251c14bac1574fbe97f1487ff627","title":"LogRhythm Echo API","path":"/lrsiem/7.20.0/logrhythm-echo-api","children":[]},{"id":"ci_98372c90904fdeaccf6f40b4c78920d7ed25617f3b1c85debdc72d43c27c44a2","title":"LogRhythm Echo Troubleshooting","path":"/lrsiem/7.20.0/logrhythm-echo-troubleshooting","children":[]},{"id":"ci_17c24b409a19fdf074f80b7c071e3a3b7afcc3e2b406e474c349f03c27baec0c","title":"LogRhythm Echo Use Case DB","path":"/lrsiem/7.20.0/logrhythm-echo-use-case-db","children":[]},{"id":"ci_a38476d9bf53b2e0c53a3f3c761c4fddd64f39bb18447f3e1dea88d4f8f2c2c8","title":"LogRhythm Echo Use Cases and Their AIE Rules, Lists, and SmartResponses","path":"/lrsiem/7.20.0/logrhythm-echo-use-cases-and-their-aie-rules-lists-and-smartresponses","children":[]}]},{"id":"ci_24f59fae1f6338ada744d635ecffaa7459b6819fe2ff859e2002a6c485b4bc6b","title":"TrueIdentity Sync Client User Guide","path":"/lrsiem/7.20.0/trueidentity-sync-client-user-guide","children":[{"id":"ci_a61fcc3fd633674fd1fff873dd20ec0614b550664bacc7f592d421f3492b6f05","title":"TrueIdentity Sync Client Release Notes","path":"/lrsiem/7.20.0/trueidentity-sync-client-release-notes","children":[]},{"id":"ci_51d23c33c7838bd60a7a08a41cb3304adbadeff07aa7df63a99fcd673e471966","title":"Install the TrueIdentity Sync Client","path":"/lrsiem/7.20.0/install-the-trueidentity-sync-client","children":[]},{"id":"ci_4e1851c4a8c38a06e05dff7e08c2fe62f6919b0ec6ac03d1f735aa21d11e6ff6","title":"Create Custom Certificates","path":"/lrsiem/7.20.0/create-custom-certificates","children":[]},{"id":"ci_c298c1a90ac4a44756f69090d6d2c57d6313184de4366caf33817a3c16b8441e","title":"Generate LR API Token","path":"/lrsiem/7.20.0/generate-lr-api-token","children":[]},{"id":"ci_3951ee5c1501d04b45f4f5089da07909b1d526b4fbc67ec8f1b20f85564b6833","title":"Launch the TrueIdentity Sync Client","path":"/lrsiem/7.20.0/launch-the-trueidentity-sync-client","children":[]},{"id":"ci_12c9c58236b1c2b70d58015a5c0068459c3a26f07d4a2bfe59f50aef05763a24","title":"Add a TrueIdentity Sync Job","path":"/lrsiem/7.20.0/add-a-trueidentity-sync-job","children":[]},{"id":"ci_3ee25cda1cd91acb25aa49dd8bd3bef9138e7e7de476960e52b92a2d3bb96618","title":"View Synchronized TrueIdentities","path":"/lrsiem/7.20.0/view-synchronized-trueidentities","children":[]},{"id":"ci_8e97f10bc327f4747c928dffe1b6ee6c3bc0a1cf72a51c933bab313875641597","title":"Troubleshoot the TrueIdentity Sync Client","path":"/lrsiem/7.20.0/troubleshoot-the-trueidentity-sync-client","children":[]}]},{"id":"ci_597344742ae0ef57f25c325dab2eca7964c29c390d878ed6f87695b4a7145506","title":"Using Kibana with LogRhythm SIEM","path":"/lrsiem/7.20.0/using-kibana-with-logrhythm-siem","children":[]},{"id":"ci_418b6fa6c748ff46aca00333960848d39dc8546c255c8e859432b875b3190a45","title":"DX Upgrade Checker","path":"/lrsiem/7.20.0/dx-upgrade-checker","children":[]}]},{"id":"ci_1ec98bdac1ed23e79aaf73b6a11526aee4c19061d901b2772e36432351ebc85f","title":"Understand the LogRhythm Architecture","path":"/lrsiem/7.20.0/understand-the-logrhythm-architecture","children":[{"id":"ci_6247dcf57ea1e3c7c97b57e967dfbccf9fcd537875e2a7117b960b2024955016","title":"Licensing","path":"/lrsiem/7.20.0/licensing","children":[]},{"id":"ci_8fd96971120d2fe5d03a73bd7591d9c6a6bbd89eb4f5f2b8942566f2ab8dba81","title":"Log Processing","path":"/lrsiem/7.20.0/log-processing","children":[{"id":"ci_d37df38ad143ae59245ddf247e5a6aac75b858d5f56a9b0d9e665a47b271f4f3","title":"Audit Classifications","path":"/lrsiem/7.20.0/audit-classifications","children":[]},{"id":"ci_6cdfc92987b1ae6110e6d554e5c1b3ec64b14de5b339f93fb483dd1e1fafd023","title":"Configuration and Log Processing","path":"/lrsiem/7.20.0/configuration-and-log-processing","children":[]},{"id":"ci_b8bc18449c60c9fb6af41c5323fa9198d47dd807030b865af7f86dcebec7d587","title":"Operations Classifications","path":"/lrsiem/7.20.0/operations-classifications","children":[]},{"id":"ci_6d163eea39bb93720f5217494ce37897ff52fe8704330c146e9dbd2690392d5e","title":"Security Classifications","path":"/lrsiem/7.20.0/security-classifications","children":[]}]},{"id":"ci_65c8b36502fafd66743e24c3261101b0a0ec4f9b2acb0ed5e659d32925058bcd","title":"LogRhythm SIEM Databases","path":"/lrsiem/7.20.0/logrhythm-siem-databases","children":[]},{"id":"ci_4bbf29926412edfa84e1101c44956efdbba21678e3f841c5315ac1355c54cd7d","title":"Logs, Events, and Alarms","path":"/lrsiem/7.20.0/logs-events-and-alarms","children":[]},{"id":"ci_38c7d495650fbf9e8bfcadf5e0b1a2afaf8f3e9463a60b2bce82e62c7ef3e26b","title":"Networking and Communication","path":"/lrsiem/7.20.0/networking-and-communication","children":[]},{"id":"ci_ef0ecc260762c91673ee5de7af2aca743fdae75bf7550c592b873bc637da500e","title":"Component Reference","path":"/lrsiem/7.20.0/component-reference","children":[]}]},{"id":"ci_50797bbc963a552fdc9cbba363b68f2c6993a70798cee329b8ef151c483d3f8c","title":"Find More Information","path":"/lrsiem/7.20.0/find-more-information","children":[{"id":"ci_a4a40789f6398128a7506ba8b8378ab702e372071198305d11041680406b95ea","title":"Customer Support Guide","path":"/lrsiem/7.20.0/customer-support-guide","children":[]},{"id":"ci_8bc4ff74520ea91cee958d45a75b83810ed292e1b51fd3ebef23678d02f776b2","title":"End of Life Policies for Software and Hardware","path":"/lrsiem/7.20.0/end-of-life-policies-for-software-and-hardware","children":[]},{"id":"ci_2eb27bd9182be2e9b8e6593111dbd8af38b4db2cf06dceba87c1ba9770c5f9a3","title":"Glossary of LogRhythm Products and Components","path":"/lrsiem/7.20.0/glossary-of-logrhythm-products-and-components","children":[]},{"id":"ci_0050a6e47f292e6a2a0395fe3db54a2f8f9b63f243a5523f416f3f645f2bfe1d","title":"Open Source License Acknowledgements","path":"/lrsiem/7.20.0/open-source-license-acknowledgements","children":[]},{"id":"ci_df947ed854a8983e3af93f6e80862bec8e7a018ed5f463d72335546bebb8ab8f","title":"Upgrade FAQ and Determining the Correct Upgrade Path","path":"/lrsiem/7.20.0/upgrade-faq-and-determining-the-correct-upgrade-path","children":[]}]},{"id":"ci_46305a678b029f32fb99500e1a09002724a12945b0dbf58ef1c4433274bb2b56","title":"Download PDFs","path":"/lrsiem/7.20.0/download-pdfs","children":[]}]