[{"id":"ci_6313d47c926acc14c797ab678092a64056139fea94da42a14d7c851c084fb258","title":"LogRhythm Release Notes","path":"/lrsiem/7.21.0/logrhythm-release-notes","children":[{"id":"ci_59b6a645e9ff54f304f4fadf46bc465554ab0ab34c593b107fa0afbf019d4613","title":"7.21.0.97 Release Notes - 6 August 2025","path":"/lrsiem/7.21.0/7-21-0-97-release-notes-6-august-2025","children":[]},{"id":"ci_1a8f1aeeefb39514001f5efc16dcc35e07aa5ad48ecb6f116d17ab77ea2743fd","title":"7.21.0 GA Release Notes - 1 July 2025","path":"/lrsiem/7.21.0/7-21-0-ga-release-notes-1-july-2025","children":[]},{"id":"ci_380b6f59a6c5b437645e6d1da15f356878293d135c65c522f9e02ee74394814e","title":"7.20.0.71 Release Notes - 23 April 2025","path":"/lrsiem/7.21.0/7-20-0-71-release-notes-23-april-2025","children":[]},{"id":"ci_3a07dd856d625d9e52ebd128916bce6d5517371a61c17c2431feb9bd873ba520","title":"7.20.0 GA Release Notes - 1 April 2025","path":"/lrsiem/7.21.0/7-20-0-ga-release-notes-1-april-2025","children":[]},{"id":"ci_59d8f4d8cd1dd8a9518e19d6a43e9ecf968fb44477aa36042a0dd9ec1bc19c6e","title":"7.19.0.54 Release Notes - 3 February 2025","path":"/lrsiem/7.21.0/7-19-0-54-release-notes-3-february-2025","children":[]},{"id":"ci_35d768e1112147bca0fd3e56916d5873d4fabdc15b92e642916adaf0721c5922","title":"7.19.0 GA Release Notes - 7 January 2025","path":"/lrsiem/7.21.0/7-19-0-ga-release-notes-7-january-2025","children":[]},{"id":"ci_39dd8640940a87f90642fea71838538b888da6a54665c20ca24c3790700480a5","title":"7.18.0.48 Release Notes - 7 November 2024","path":"/lrsiem/7.21.0/7-18-0-48-release-notes-7-november-2024","children":[]},{"id":"ci_3a292ac078009a871e58839d47771bbce34a5760933a613435a886e1e5ef6466","title":"7.18.0.46 Release Notes - 31 October 2024","path":"/lrsiem/7.21.0/7-18-0-46-release-notes-31-october-2024","children":[]},{"id":"ci_5c0bc917508a7236f926ff4d386c4d5c4be266d5965d970e9522150705028826","title":"7.18.0 GA Release Notes - 1 October 2024","path":"/lrsiem/7.21.0/7-18-0-ga-release-notes-1-october-2024","children":[]},{"id":"ci_b3b36e5fa4e6853dabbc9e0a5b61f2cb7951257453685f81278ae57cc5d5e646","title":"7.17.0.55 Release Notes - 12 August 2024","path":"/lrsiem/7.21.0/7-17-0-55-release-notes-12-august-2024","children":[]},{"id":"ci_d35721e0b72f8b2a8e908aa40b7d1210ce5ebd1404e47ee6118e329908873501","title":"7.17.0 GA Release Notes - 1 July 2024","path":"/lrsiem/7.21.0/7-17-0-ga-release-notes-1-july-2024","children":[]},{"id":"ci_2b7b56f55ab9a52c15ea92e97511dc32861e8e2a739a5411632c9ce7e4d95fef","title":"7.16.0.45 Release Notes - 24 April 2024","path":"/lrsiem/7.21.0/7-16-0-45-release-notes-24-april-2024","children":[]},{"id":"ci_98b5c84a81f474a060bb66e27ecbacd91051e02b48baaa620d2294ca84f782be","title":"7.16.0 GA Release Notes - 1 April 2024","path":"/lrsiem/7.21.0/7-16-0-ga-release-notes-1-april-2024","children":[]},{"id":"ci_a31cb9cacef183109292606ad9d5d4f0d6641f9be08498c4fcd3ce54fd83fb43","title":"7.15.0.64 Release Notes - 5 February 2024","path":"/lrsiem/7.21.0/7-15-0-64-release-notes-5-february-2024","children":[]},{"id":"ci_9462c8ff6116aab7799fc61b446a6a9d809f62fcd6398078b6713b5ac3b7dc4e","title":"7.15.0 GA Release Notes - 4 January 2024","path":"/lrsiem/7.21.0/7-15-0-ga-release-notes-4-january-2024","children":[]},{"id":"ci_53b1d3e74e19810e5159070ca03ce29c093db4644f7e5e7cc046bd1916bdb582","title":"7.14.0.107 Release Notes - 18 October 2023","path":"/lrsiem/7.21.0/7-14-0-107-release-notes-18-october-2023","children":[]},{"id":"ci_247f4a2f6ce466a2a98aced2851f199b8082be274192d4e3bfeeccdce0121f10","title":"7.14.1 Release Notes - 13 November 2023","path":"/lrsiem/7.21.0/7-14-1-release-notes-13-november-2023","children":[]},{"id":"ci_d7610ed38152dece1f92606de83668f0c05f28dcca4bf34e331e7f0bbbd8558a","title":"7.14.0 GA Release Notes - 2 October 2023","path":"/lrsiem/7.21.0/7-14-0-ga-release-notes-2-october-2023","children":[]},{"id":"ci_52b45d3585a5d871d5b3c4cd1e7b1ea7196cca1edb7da13f75cbb7e2a35d5988","title":"7.13.0.78 Release Notes - 2 August 2023","path":"/lrsiem/7.21.0/7-13-0-78-release-notes-2-august-2023","children":[]},{"id":"ci_716b2bbe5c169a790ccd8051bf648c297a5aafff5b9b22dd8b30dfafd93de338","title":"7.13.0.76 Release Notes - 17 July 2023","path":"/lrsiem/7.21.0/7-13-0-76-release-notes-17-july-2023","children":[]},{"id":"ci_283197165abe3c981be59915f910c556e9a925661d736fa5d1f35f672059b2f8","title":"7.13.0 GA Release Notes - 29 June 2023","path":"/lrsiem/7.21.0/7-13-0-ga-release-notes-29-june-2023","children":[]}]},{"id":"ci_d8931a22a4f4e4d7f064fbf65f66ec879238d5a9c3ad3f2b113592a5becf9bf2","title":"Get Started with LogRhythm SIEM","path":"/lrsiem/7.21.0/get-started-with-logrhythm-siem","children":[{"id":"ci_768d77e0d183f757647692cdcc4d55c0810b1b4635d2e20ea7c4ef95ff834fdf","title":"Log in to the Client Console","path":"/lrsiem/7.21.0/log-in-to-the-client-console","children":[]},{"id":"ci_b64a52c869134ee44720de64ff6a9a8308824d8dda28e317e93a91fd09a9f5ae","title":"Complete the New Deployment Wizard","path":"/lrsiem/7.21.0/complete-the-new-deployment-wizard","children":[]},{"id":"ci_d08a662a5e500026580b3cd4b42abd3d562986697da3ee391aa30123fd38fec1","title":"Assign LogRhythm Licenses","path":"/lrsiem/7.21.0/assign-logrhythm-licenses","children":[]},{"id":"ci_b2b197ef274cef76818841148958aa3a63960d8cdddfa1bd47289391bfbab299","title":"Log in to the Web Console","path":"/lrsiem/7.21.0/log-in-to-the-web-console","children":[]},{"id":"ci_de5dbb82ceb6ecdd22ac69600907f7ce265af78d97b111e799c949bb709fd6d8","title":"Verify the Web Console Connection Status","path":"/lrsiem/7.21.0/verify-the-web-console-connection-status","children":[]},{"id":"ci_378dc504fc52e4452da273f22e897d22baf692c5a644a69641e8ddb51defc52a","title":"Configure NetMon to Integrate with the Web Console","path":"/lrsiem/7.21.0/configure-netmon-to-integrate-with-the-web-console","children":[]}]},{"id":"ci_0b2ca64ba3653143263d3b73f5256ca1bacf44ed9cfb902f6e8a48a246975065","title":"Client Console Administrator Guide","path":"/lrsiem/7.21.0/client-console-administrator-guide","children":[{"id":"ci_efad29fcc13d1c69142bdb363ade43f946f0e181cf6241e17178b0c679fb8df4","title":"Advanced Intelligence Engine","path":"/lrsiem/7.21.0/advanced-intelligence-engine","children":[{"id":"ci_502f9d116f44a3e9071eed43216cd7ad1cfa9decb0e54e5519fc13398b010230","title":"Add AI Engine Servers","path":"/lrsiem/7.21.0/add-ai-engine-servers","children":[]},{"id":"ci_044fa2141031ee2d72a441b7265ec2992a901c4b3906cf529f8d9745b70e3960","title":"Apply Recommended Values to an AI Engine Server","path":"/lrsiem/7.21.0/apply-recommended-values-to-an-ai-engine-server","children":[]},{"id":"ci_fb66dd3b23cf3ac52ce5e72ca1bfde1500f114c7ab83195a12013861d33751bf","title":"Configure the Advanced Intelligence Engine","path":"/lrsiem/7.21.0/configure-the-advanced-intelligence-engine","children":[]},{"id":"ci_27eedbfec3c72be35d4f84e83a065769269493e4e4a854829e5b1571209c5c38","title":"Create New AI Engine Rules","path":"/lrsiem/7.21.0/create-new-ai-engine-rules","children":[]},{"id":"ci_2a95a935a92910790a475f6c99f9f3c11fd1e44160a5559abb0d3741252f4a41","title":"Define AI Engine Linked Data Block Relationships","path":"/lrsiem/7.21.0/define-ai-engine-linked-data-block-relationships","children":[]},{"id":"ci_8e3355693059a5ea6f0a9c42d1ff9662be64a73d3f2e72ee9cf4b88b0010b807","title":"Define AI Engine Rule Block Relationships","path":"/lrsiem/7.21.0/define-ai-engine-rule-block-relationships","children":[]},{"id":"ci_37111dff5113c2a580b2ffc93020e39b37d3908a92b29fc2faf722fec5594f94","title":"Drill Down on AI Engine Results","path":"/lrsiem/7.21.0/drill-down-on-ai-engine-results","children":[]},{"id":"ci_3354e7fde12cae697f85829e9701beaac95675327d1b6a7b4dd720e7ce484798","title":"Import or Export AI Engine Rules from the Grid","path":"/lrsiem/7.21.0/import-or-export-ai-engine-rules-from-the-grid","children":[]},{"id":"ci_31bf0d566a7c8f86cc949ad217e03089e0474bbbfaad74f66ef3349a8f5980b5","title":"Modify AI Engine Rules","path":"/lrsiem/7.21.0/modify-ai-engine-rules","children":[]},{"id":"ci_4879f9954719c8980099840b5704c6ea7216857f9e0c204fb3afed85282a4497","title":"Restart AI Engine Servers","path":"/lrsiem/7.21.0/restart-ai-engine-servers","children":[]},{"id":"ci_952aab48f8a17978167545c1714cb4cb8b40d11d4d92f5e7e63d80a200970a04","title":"Revert an AI Engine Server to a Previous Configuration","path":"/lrsiem/7.21.0/revert-an-ai-engine-server-to-a-previous-configuration","children":[]},{"id":"ci_a3bb6bdbd095923faec2ddde65063789cfb82995f163d68edce9e20c04137c66","title":"Update the IP Address of an AI Engine","path":"/lrsiem/7.21.0/update-the-ip-address-of-an-ai-engine","children":[]},{"id":"ci_256824950a1690f8a97afd3e8c4a0d6d7119518aff69eb0841efc269a0e01b1f","title":"Use AI Engine Rule Sets","path":"/lrsiem/7.21.0/use-ai-engine-rule-sets","children":[]},{"id":"ci_f794415b31f38617f544371156be4fcf1436b90c697c2a5bc398e920ab169204","title":"Use AI Engine Workloads","path":"/lrsiem/7.21.0/use-ai-engine-workloads","children":[]},{"id":"ci_9751001cb98f23201ac3d2e6644591e0c6dfe53e7a263d5aeda7b147461eb3cd","title":"Use Saved AI Engine Filters","path":"/lrsiem/7.21.0/use-saved-ai-engine-filters","children":[]},{"id":"ci_ddb9a3b4ed0fb2ad57d172f4e8829ea5bc83e216ee29e7ba251f70e760d5171a","title":"Use the AI Engine Local Configuration Manager","path":"/lrsiem/7.21.0/use-the-ai-engine-local-configuration-manager","children":[]},{"id":"ci_11967e1bd6860fd66024267484c7c1c0ba7fbafb1afe8d3a94be3c96f369a0d5","title":"View AI Engine Generated Alarms","path":"/lrsiem/7.21.0/view-ai-engine-generated-alarms","children":[]},{"id":"ci_dd366007913d95ace29a864d2bf0d1998bf132f5a4926cb6983c643876d7889c","title":"View AI Engine Rules","path":"/lrsiem/7.21.0/view-ai-engine-rules","children":[]},{"id":"ci_229b98be50b5e24d34546106f53e75271e4d51a81d19c1a9526bc0ba7896117b","title":"Work with Existing AI Engine Rules","path":"/lrsiem/7.21.0/work-with-existing-ai-engine-rules","children":[]}]},{"id":"ci_2c72de9ce0243f51b97938aa04dba916cf4d410ba762a38a71fd952d3926ea69","title":"Alarm Rules","path":"/lrsiem/7.21.0/alarm-rules","children":[{"id":"ci_031f23061d67d4a5e95f299519cb3d603fcb007ab8fef66bfb71f1a082c9663e","title":"Alarm Notification Policies","path":"/lrsiem/7.21.0/alarm-notification-policies","children":[{"id":"ci_636e21bbc528e59925bd31c8623247bac0cbf486f8e0427cabb41be9827704ec","title":"Create Group Notifications for Alarms","path":"/lrsiem/7.21.0/create-group-notifications-for-alarms","children":[]},{"id":"ci_ba72fe75433b1235072c60260723cec0e73c8ae42fd6742216a5a0e65b6e8755","title":"Create New Email Alarm Notification Policies","path":"/lrsiem/7.21.0/create-new-email-alarm-notification-policies","children":[]},{"id":"ci_0b241e5e4cff9fd2b1e6e07ef4219b92cb6930127f152315e4686734abd2ea3d","title":"Create New SNMP Alarm Notification Policies","path":"/lrsiem/7.21.0/create-new-snmp-alarm-notification-policies","children":[]},{"id":"ci_6d913eeb7056c7cceab30a6947274f142cd8e792d7ee261420c0632b825b69bc","title":"Create New Text File Alarm Notification Policies","path":"/lrsiem/7.21.0/create-new-text-file-alarm-notification-policies","children":[]},{"id":"ci_3bd87a90776487780d21a3e95e8c2fd540295a78f0afb7faf01ce880399b72db","title":"Define a Text File Notification Policy","path":"/lrsiem/7.21.0/define-a-text-file-notification-policy","children":[]}]},{"id":"ci_1bb5390ef1c2c811c14e70cde5144a959d6619e5610dd964da7d08c66641e1da","title":"Create Alarm Rules","path":"/lrsiem/7.21.0/create-alarm-rules","children":[]},{"id":"ci_283a3c6346fd518cad9f68b05722a8454a017754145ff26e092d7576f11b1b13","title":"Create Alarm Rules for Known Logs","path":"/lrsiem/7.21.0/create-alarm-rules-for-known-logs","children":[]},{"id":"ci_248871beedba09d706abcad528d0a105a82110f10018f01080cd888a81ec4dae","title":"Enable and Disable Alarm Rules","path":"/lrsiem/7.21.0/enable-and-disable-alarm-rules","children":[]},{"id":"ci_7601e2835b15dcc3ac1f4b53baef2529fa3b1f4b604d65a085146dcd556c1de7","title":"Modify Alarm Rule Notifications in Batch","path":"/lrsiem/7.21.0/modify-alarm-rule-notifications-in-batch","children":[]},{"id":"ci_b818826c4eb319baeec2bbb97cfbdccbde894d1a41d7feac4c6afd8e735914af","title":"Modify Alarm Rules","path":"/lrsiem/7.21.0/modify-alarm-rules","children":[]},{"id":"ci_90568399a5749908eeeb01d072b34b009c3dedf5b28ec5c7fe158db05d4d66ce","title":"Retire or Activate Alarm Rules","path":"/lrsiem/7.21.0/retire-or-activate-alarm-rules","children":[]}]},{"id":"ci_615e0c4df61bbbedee827fc2d68fd546d9452c9b21932c7cc410242650c4f7b2","title":"Automatic Host Contextualization","path":"/lrsiem/7.21.0/automatic-host-contextualization","children":[{"id":"ci_415e9f1f2e704d953cb5b49403979e2090002d6c2abd918b259a56b80cb51ea8","title":"Disable Automatic Host Contextualization","path":"/lrsiem/7.21.0/disable-automatic-host-contextualization","children":[]},{"id":"ci_21b285fe2a0a93bba87753846a646eef243dda3b3b1fdf6b82228f5d6501583b","title":"Map Ports","path":"/lrsiem/7.21.0/map-ports","children":[]}]},{"id":"ci_8eb35c1ff05c1e6edfd869eb56292fcc142d262c4c550801ce2d3b0c5b320932","title":"Data Archives and Restoration","path":"/lrsiem/7.21.0/data-archives-and-restoration","children":[{"id":"ci_4eb84a4ae3fea56caf9b882d83f9a5572d5ae6c46b40f18e84063c42b598b88e","title":"Add a Data Processor to Restore Archives","path":"/lrsiem/7.21.0/add-a-data-processor-to-restore-archives","children":[]},{"id":"ci_104e408c060ebf6e67516489d7aa60da96ed422cbfe9e87d07e22bb260c06fd4","title":"Backup and Recovery Procedures","path":"/lrsiem/7.21.0/backup-and-recovery-procedures","children":[{"id":"ci_bee369a57f27122cfd817e84e7c1b57c1c49e34756add5440bfab87e48c936f1","title":"Back Up LogRhythm Archives","path":"/lrsiem/7.21.0/back-up-logrhythm-archives","children":[]},{"id":"ci_44be7985dc763933fc75a51a396e126d9982cc647478a615b1e4a39f655b4f07","title":"Configure Automated Platform Manager Database Backups","path":"/lrsiem/7.21.0/configure-automated-platform-manager-database-backups","children":[]},{"id":"ci_bd2d12ae5c310f6278ffe48fcc798145ef9d7d5111d18df9c09c5d5b8e71c7b1","title":"Perform a Manual Platform Manager Backup","path":"/lrsiem/7.21.0/perform-a-manual-platform-manager-backup","children":[]},{"id":"ci_746a0c7d2cbca7c32018f82af47ad2bd6cb3999c80f81b4b3abf8809a87b96ec","title":"Restore From a Database Backup","path":"/lrsiem/7.21.0/restore-from-a-database-backup","children":[]},{"id":"ci_a229fc05db5f893613b0f43d8f613571fd91c6bade264105b0d48cc73040c8e2","title":"Restore Service State","path":"/lrsiem/7.21.0/restore-service-state","children":[]},{"id":"ci_f777313dc6b0a7ebcd38bd24fc8626ea4e63d9c2262820d19ed495c32b041df0","title":"Use a Dark Spare Backup Appliance","path":"/lrsiem/7.21.0/use-a-dark-spare-backup-appliance","children":[]}]},{"id":"ci_7b798a92afa203f6a11af5123073a73ed72d554b8d8f948616792469eb8eb4b0","title":"Configure Object Access Auditing for LogRhythm Archive Files","path":"/lrsiem/7.21.0/configure-object-access-auditing-for-logrhythm-archive-files","children":[]},{"id":"ci_0d680067667ce43ab0c212cf00d951ddc7344034487f8d73eed31abe90260617","title":"Restore Platform Managers","path":"/lrsiem/7.21.0/restore-platform-managers","children":[]},{"id":"ci_54763b9b37fc9526e2ed356b63b8e18307dd3e93adc236006a96330020beabed","title":"SecondLook","path":"/lrsiem/7.21.0/secondlook","children":[{"id":"ci_ddc03efed6abafa693e2ce946452e238cf5abb983ccfa4f38d9570146f138113","title":"Create a SecondLook Restore","path":"/lrsiem/7.21.0/create-a-secondlook-restore","children":[]},{"id":"ci_7217473a08a50a52b6f6760356ffbf8417b54329a0a6f5457f4662a954275781","title":"Run a Saved SecondLook Restore","path":"/lrsiem/7.21.0/run-a-saved-secondlook-restore","children":[]}]},{"id":"ci_e1bdb8b3164308c9b2de8a5b6b8f67978ef70bacd6f23b5eaac86d528df791ea","title":"Use Intelligent Indexing","path":"/lrsiem/7.21.0/use-intelligent-indexing","children":[]},{"id":"ci_25ce131eecaa0b4e87117c2afc53dc66a50fbf8f6664bdcb2f588c2c0df2a596","title":"Change Archive Location","path":"/lrsiem/7.21.0/change-archive-location","children":[]}]},{"id":"ci_fc406c6153850dba3d67e1a91d90ddf6d076afa6d7673cb76097fd48402aeb31","title":"Data Indexer","path":"/lrsiem/7.21.0/data-indexer","children":[{"id":"ci_bb9df75c9e958f5e00e5b4796c80e276969732d64675c14dcc06bb09ec831775","title":"Add a Data Indexer Node","path":"/lrsiem/7.21.0/add-a-data-indexer-node","children":[]},{"id":"ci_70f70ca578b324ff969f510b0466d7c208bbd428d7cc7548833a14096ece924b","title":"Apply System Updates to a Data Indexer","path":"/lrsiem/7.21.0/apply-system-updates-to-a-data-indexer","children":[]},{"id":"ci_5cfbbf0fb15232910d3ed44148e24654d045da64647226bf233552262bbe9325","title":"Configure the Data Indexer","path":"/lrsiem/7.21.0/configure-the-data-indexer","children":[]}]},{"id":"ci_c7d0cbde0a842f1a52f9df148514f4e1f36c7ebe4906fbe71410150a845c9f0c","title":"Data Processor","path":"/lrsiem/7.21.0/data-processor","children":[{"id":"ci_e25e7119e4fa44fa28aa2e07c16f06277a39b5c17de95dea58e914fdf51f1abb","title":"Add a Data Processor","path":"/lrsiem/7.21.0/add-a-data-processor","children":[]},{"id":"ci_08c2ee4cdecbae411df87cadee0066ae589d1f6cba0496919dee20d6986dc13b","title":"Apply Recommended Data Processor Values","path":"/lrsiem/7.21.0/apply-recommended-data-processor-values","children":[]},{"id":"ci_e6a22039a198f9079711bc3be4bc1fd7dca7ecc3a2b242f41ffa644bc1b7be90","title":"Configure the Mediator for Automatic Startup","path":"/lrsiem/7.21.0/configure-the-mediator-for-automatic-startup","children":[]},{"id":"ci_3c71019a25cc2ed6275e9778dfdce85fd5471700bfadea41bde586aa5490a862","title":"Create a Custom Certificate for Communication Between the Data Processor and AI Engine","path":"/lrsiem/7.21.0/create-a-custom-certificate-for-communication-between-the-data-processor-and-ai-engine","children":[]},{"id":"ci_15d11e997a9a2df6f019fd84cc552aee98fe31f6a54e6ff26cdb590fce8236c4","title":"TrueIdentity Entity Segregation","path":"/lrsiem/7.21.0/trueidentity-entity-segregation","children":[]},{"id":"ci_73b715459d8d19f7fb41bcd6987dabd6bf08470a3301b6b491e0bf3104a3b2b8","title":"Filter LogRhythm Diagnostic Events","path":"/lrsiem/7.21.0/filter-logrhythm-diagnostic-events","children":[]},{"id":"ci_9a7caa296e06d4be2bd38f5db06968124f08c86f02b7b6968a67ae3af0f63221","title":"Modify Data Processor Advanced Properties","path":"/lrsiem/7.21.0/modify-data-processor-advanced-properties","children":[]},{"id":"ci_e3716a30b0bca80b6b098c90b109a5746ae31ec6180f793eeac2ef44b4edac0b","title":"Modify Data Processor Basic Properties","path":"/lrsiem/7.21.0/modify-data-processor-basic-properties","children":[]},{"id":"ci_a022a39f2799bd636cd6776ad85b9db4dbe2f78d4c23dba4a0f114f13382854e","title":"Retire a Data Processor","path":"/lrsiem/7.21.0/retire-a-data-processor","children":[]},{"id":"ci_b09a896dca6b054bee324e6c28bd6f29b9c10ffaa213d727d46bf46b31400b34","title":"Revert to a Previous Data Processor Configuration","path":"/lrsiem/7.21.0/revert-to-a-previous-data-processor-configuration","children":[]},{"id":"ci_a04e3cf575b7b071daee4609d6eda6de3817eb48dd41074edd282dfefb60aa6b","title":"Set Data Processor Messages Per Second Value","path":"/lrsiem/7.21.0/set-data-processor-messages-per-second-value","children":[]},{"id":"ci_48aa6c0412ffdce7b03bffb8843a68acdd7912c5db2a7b0496e4077e2d49c8e2","title":"Start, Stop, and Restart Data Processor Services","path":"/lrsiem/7.21.0/start-stop-and-restart-data-processor-services","children":[]},{"id":"ci_17042afc0385d2085ead3ede36dedf13ef4a42b4cab733f1781668291bf80d3c","title":"Throttle the Mediator","path":"/lrsiem/7.21.0/throttle-the-mediator","children":[]},{"id":"ci_cf6f276b56213e6eee1dc153eb8000c6353f3461cb65c2706e7b98fa9b772e7a","title":"Update the IP Address of a Data Processor","path":"/lrsiem/7.21.0/update-the-ip-address-of-a-data-processor","children":[]},{"id":"ci_3c607c94f38755e92076452f9bfe2a86b48ca3acff5cdefd975d676417f7efa8","title":"Use the Data Processor Configuration Manager","path":"/lrsiem/7.21.0/use-the-data-processor-configuration-manager","children":[]}]},{"id":"ci_5707040ea502e9514b1789d8b1127739e0a62ff388f441ffeaf91c17d4fdf749","title":"Deployment Health","path":"/lrsiem/7.21.0/deployment-health","children":[{"id":"ci_5f2aafe99cbe5d1eff5cdfd0c8dacc2dd0d7c996f1a86c96e464a8ca512c454b","title":"Centralized Service Metrics","path":"/lrsiem/7.21.0/centralized-service-metrics","children":[{"id":"ci_2f8654c3cc1ad5f986cd55c56b91ea0324cf5a79796e0b739b2857bdff93660c","title":"Install and Work With Centralized Service Metrics","path":"/lrsiem/7.21.0/install-and-work-with-centralized-service-metrics","children":[]},{"id":"ci_d293b53ad358ed9e97f12ecba8ccba459c1898df51663fb801d95d91e8950dcd","title":"Troubleshoot Centralized Service Metrics","path":"/lrsiem/7.21.0/troubleshoot-centralized-service-metrics","children":[]}]},{"id":"ci_9a78bb71c8e38595edc7688bebd323eda173c823e3616462a3950b9b102062bf","title":"Deployment Monitor","path":"/lrsiem/7.21.0/deployment-monitor","children":[]},{"id":"ci_79a8e833707bc36eadd9594a2b1dd2de55640f005b4c218a958bf0777a6f328d","title":"Log Processing Reports","path":"/lrsiem/7.21.0/log-processing-reports","children":[{"id":"ci_c45db344f2bce8b618b85c5ba26aeb971049f20843fa76817110e4e1892fd41f","title":"LPS Detail Report","path":"/lrsiem/7.21.0/lps-detail-report","children":[]},{"id":"ci_93fde924eb927ce0fed62b87c64e9b2097d45cf63a22febae5e763a6c83b0c6c","title":"LPS Policy Sorting Stats Report","path":"/lrsiem/7.21.0/lps-policy-sorting-stats-report","children":[]}]},{"id":"ci_83f66ae2c92ebe0f78e697575cb14a87d92c635359bf8556aae769ed3bea2c1d","title":"Performance Counters","path":"/lrsiem/7.21.0/performance-counters","children":[{"id":"ci_e82023f0ace57258ed7ffb67f63ece34e8f23906f399e3a2146bd97d8e9ec62a","title":"Performance Counters—LR AI Engine Communication Manager","path":"/lrsiem/7.21.0/performance-counterslr-ai-engine-communication-manager","children":[]},{"id":"ci_84b6a193f93bb1ee6d66d2b3a331fe4339690e6f97e9b232b6e9a67307d20c46","title":"Performance Counters—LR AI Engine Data Provider","path":"/lrsiem/7.21.0/performance-counterslr-ai-engine-data-provider","children":[]},{"id":"ci_ef8922a094e2193faedc7d1df8e411b453a252bcd05f01252235700d37fa9256","title":"Performance Counters—LR AI Engine Server","path":"/lrsiem/7.21.0/performance-counterslr-ai-engine-server","children":[]},{"id":"ci_e3065471f9110401bb9724d37512df289afee955b8f0a65bc2dd3eff3db1f28c","title":"Performance Counters—LR Alarming and Response Manager","path":"/lrsiem/7.21.0/performance-counterslr-alarming-and-response-manager","children":[]},{"id":"ci_1c52e57da0d0ea2a89c81f09b12066c7daf5652ab1cc7d58eab389e65d7a164d","title":"Performance Counters—LR Mediator, Log Distribution Services","path":"/lrsiem/7.21.0/performance-counterslr-mediator-log-distribution-services","children":[]},{"id":"ci_8b0538ab583cc94b6c78f087a6fc699718da27fd7107de2aa609e40a4d9bd53e","title":"Performance Counters—LR Mediator, LDS, Sender","path":"/lrsiem/7.21.0/performance-counterslr-mediator-lds-sender","children":[]},{"id":"ci_a3ba28cb9f407bba0dc142c227ea5e5c8c73f139f6a84e4fc695585cbe7ded75","title":"Performance Counters—LR Mediator, LogMart","path":"/lrsiem/7.21.0/performance-counterslr-mediator-logmart","children":[]},{"id":"ci_21fadf9004fb51cd4880c50837d3cb5f67a5cfd735010240311fe5b56181890b","title":"Performance Counters—LR Mediator, Processing","path":"/lrsiem/7.21.0/performance-counterslr-mediator-processing","children":[]},{"id":"ci_eda842294f5441c13170a4969a2dc84c5daed81422639172d27238875619087c","title":"Performance Counters—LR Mediator, Stats","path":"/lrsiem/7.21.0/performance-counterslr-mediator-stats","children":[]},{"id":"ci_fdac25e9e26887e5de49cc2bdff8ff54057b4caa8d76be68abafd357231219ac","title":"Performance Counters—LR Mediator, True Source","path":"/lrsiem/7.21.0/performance-counterslr-mediator-true-source","children":[]},{"id":"ci_620bbc2591f0abb8b7d7a17eb0429742aad347251a81a8ca79da48ac1e3acd4e","title":"Performance Counters—LR Messaging (DP to DX)","path":"/lrsiem/7.21.0/performance-counterslr-messaging-dp-to-dx","children":[]},{"id":"ci_1efb7cfc0cc07041da960d6bd5b3437af279bbeb1a8ff5f657052c1e35292032","title":"Performance Counters—LR System Monitor","path":"/lrsiem/7.21.0/performance-counterslr-system-monitor","children":[]},{"id":"ci_aea94e56fe36eb6ada06b637cc1c8f695f8c9552fc233ff0fa098ca6ddfa7410","title":"View and Add Performance Counters","path":"/lrsiem/7.21.0/view-and-add-performance-counters","children":[]}]}]},{"id":"ci_cd1e7e211d6d939916702d31ca490ea33f2a5d8b77a5130689cb2cb6a88c4c14","title":"Deployment Manager","path":"/lrsiem/7.21.0/deployment-manager","children":[]},{"id":"ci_3b901fee35230c6882abe96b8f6fccee11175b42c104a8adedcec677fbcb06e2","title":"Deployment Security","path":"/lrsiem/7.21.0/deployment-security","children":[{"id":"ci_9096c04e15a0ce783af7e177bb898c8a19d775ab7bdc9f784b2e5e6368198174","title":"Common Criteria Audit Data Generation","path":"/lrsiem/7.21.0/common-criteria-audit-data-generation","children":[{"id":"ci_e430b7aa662c179d0ade68b146c2e34fe1fb7b66e8fabd93ff8be737fd2dd382","title":"Set Up the Audit Functionality","path":"/lrsiem/7.21.0/set-up-the-audit-functionality","children":[]},{"id":"ci_37a97807b76007691690397150af00dcec8e8e58197c60316ba79731ceb34fdd","title":"Set up Discretionary Access Controls on the Trace Folder on an NTFS File System","path":"/lrsiem/7.21.0/set-up-discretionary-access-controls-on-the-trace-folder-on-an-ntfs-file-system","children":[]},{"id":"ci_62074435a1dd8986ea195300762cc142418075615316d3d2267483da146478e1","title":"Configure Windows Task to Alarm on Audit Trace Failure","path":"/lrsiem/7.21.0/configure-windows-task-to-alarm-on-audit-trace-failure","children":[]},{"id":"ci_8756ea6f04bceb7230c6ff43f343ba8f6375bdf3ee4d04ab30a4cb60b0402b70","title":"Configure SQL Server to Run Under Domain Account","path":"/lrsiem/7.21.0/configure-sql-server-to-run-under-domain-account","children":[]},{"id":"ci_e85f3aa14053e8bbea89ed8a80b0fb09bbaf8c1e5f28c55e588b8944d807ab07","title":"SQL Server Trace File Converter (TFC) User Guide","path":"/lrsiem/7.21.0/sql-server-trace-file-converter-tfc-user-guide","children":[{"id":"ci_794ffd2ee0f7956c26363ff04846873cf979ebc9ee9eceb735d5550949ceefad","title":"Download the SQL TFC Installer","path":"/lrsiem/7.21.0/download-the-sql-tfc-installer","children":[]},{"id":"ci_668176cb5d325d91f19be84683a74b435bff7accfb9008812160ee4690a5ee2b","title":"Install the SQL Server TFC Server","path":"/lrsiem/7.21.0/install-the-sql-server-tfc-server","children":[]},{"id":"ci_597d73091d180994505db6f1145d9d4709893af903265ad7897de266d8b25f85","title":"Configure SQL Server TFC","path":"/lrsiem/7.21.0/configure-sql-server-tfc","children":[]},{"id":"ci_6f74781c42c2d5c3677ab760212668175f184e7649fc02f6db27edd999f64ded","title":"Add a SQL Server TFC Log Source","path":"/lrsiem/7.21.0/add-a-sql-server-tfc-log-source","children":[]}]}]},{"id":"ci_f606ab8dc1971d2c797ea124b8c4aa8bb88546539417e5e25d5a0aebf2e77bb6","title":"Common Criteria","path":"/lrsiem/7.21.0/common-criteria","children":[{"id":"ci_5cebf0aa0ae2c28c1a3b3d4d35239308c2ccead8bb9fc3a6b8f0f90401ae5e79","title":"Web Console Compliance","path":"/lrsiem/7.21.0/web-console-compliance","children":[{"id":"ci_c4f4cf238b91e82fa7b91e9796861baaba073cb1b2e8f565594489470be0c617","title":"Auto Logout for Idle Users (US9521)","path":"/lrsiem/7.21.0/auto-logout-for-idle-users-us9521","children":[]},{"id":"ci_65f917ffc0ff77a3f5738f3085fac5d6f8880ba24baf1e8e7aab069211d94afe","title":"Nginx File Configuration Updates (US9305)","path":"/lrsiem/7.21.0/nginx-file-configuration-updates-us9305","children":[]},{"id":"ci_421f3d04623abb6fdc403da9c5254ede973e088786b1576a23578f507e8847ac","title":"Requirements","path":"/lrsiem/7.21.0/requirements","children":[]},{"id":"ci_1bffeef58b32c892a6e209ea93323894ee2bdb0f530207db4f3a4665132936a4","title":"Warning Banner on Login Page (US9518)","path":"/lrsiem/7.21.0/warning-banner-on-login-page-us9518","children":[]},{"id":"ci_5b7909b45d38a4b8624ff9fcb14df20f77660bcfd7e52795ed3737d3cd975132","title":"Web Console FIPS Compliance Configuration (US9525)","path":"/lrsiem/7.21.0/web-console-fips-compliance-configuration-us9525","children":[]},{"id":"ci_330799e3e9752f6a05be9efe3b495c88261a0f4fac66f6ea82d33ae625cd9616","title":"Web Console Logout Button (US9519)","path":"/lrsiem/7.21.0/web-console-logout-button-us9519","children":[]}]}]},{"id":"ci_41fd1782219c5246287df6908fe0ffa35cdd7113569651115a9bfd1a1cad93d4","title":"Federal Information Processing Standards (FIPS)","path":"/lrsiem/7.21.0/federal-information-processing-standards-fips","children":[{"id":"ci_62c88738ec3a7f1f37b2e9917ce0f82f805794050a6af981364eb00e4abec339","title":"Configure User Access Control for FIPS Mode","path":"/lrsiem/7.21.0/configure-user-access-control-for-fips-mode","children":[]},{"id":"ci_03eb0bb42277f8d19ea771ba1ef667cf2f4caa0063077335d00e753ef31b7192","title":"Configure LogRhythm XM for FIPS Mode","path":"/lrsiem/7.21.0/configure-logrhythm-xm-for-fips-mode","children":[]},{"id":"ci_c0b99905fcdd451673ca7039ca07a0ece2cc5df4dddead9dd7dfed4a07caff22","title":"Configure LogRhythm DPAWC + DX for FIPS Mode","path":"/lrsiem/7.21.0/configure-logrhythm-dpawc-dx-for-fips-mode","children":[{"id":"ci_65f51392e91be598ddce76ab1db77061db00b4faee94ab93fa44ef55f3f5b9fb","title":"Configure LogRhythm DPAWC","path":"/lrsiem/7.21.0/configure-logrhythm-dpawc","children":[]},{"id":"ci_c0aeec96de203ab9f1e7aacd44f793aa31bc17be23672b5ddfee486d73cbc259","title":"Configure LogRhythm DX","path":"/lrsiem/7.21.0/configure-logrhythm-dx","children":[]},{"id":"ci_4f23cece9064ed589555a29de8f850b46649e53f355c6eb207065f1dbf901813","title":"Establishing IPsec Communications between Windows & Linux OS","path":"/lrsiem/7.21.0/establishing-ipsec-communications-between-windows-linux-os","children":[{"id":"ci_3d5420e482c7cf1aa4fa92b4036f66ce99261b1d99ab232bb99c5ec151a35cd5","title":"Windows OS IPsec Configuration","path":"/lrsiem/7.21.0/windows-os-ipsec-configuration","children":[{"id":"ci_e9626ab476216999260975f5c3ea397ed2702c388933c64c929428fee593e5d5","title":"Create a Custom MMC Console","path":"/lrsiem/7.21.0/create-a-custom-mmc-console","children":[]},{"id":"ci_8fa3f284a1cfcb6b19c4b23b1a5e7d7ae244547fdce086a599e113242aac2bb4","title":"Enable Audit Policy for Your Computer","path":"/lrsiem/7.21.0/enable-audit-policy-for-your-computer","children":[]},{"id":"ci_0178d456811836b68a6323a853f96cc81cbe3613170a861a01ddb9c6871d1e3c","title":"Build a Custom IPsec Policy","path":"/lrsiem/7.21.0/build-a-custom-ipsec-policy","children":[]},{"id":"ci_1addb96f826cace51a07881dc26f4af4a226e3d0167e49d86f09d973041d4cd4","title":"Configure an IPsec Filter List","path":"/lrsiem/7.21.0/configure-an-ipsec-filter-list","children":[]},{"id":"ci_36980c901bc094cb0f9558262acf22d2b2d6d42bf87c046790ae25185a6287e5","title":"Configure an IKE Authentication Method","path":"/lrsiem/7.21.0/configure-an-ike-authentication-method","children":[]}]},{"id":"ci_454ca807ce54864824c1357ef616bd5477dee51abb3286a8a905d42711586380","title":"Linux/CentOS IPsec Configuration","path":"/lrsiem/7.21.0/linux-centos-ipsec-configuration","children":[{"id":"ci_cc8aaa4f2267d638729ac1307a7730513bb2c96c3d9adaa54dcdb33ca6173d9d","title":"Configure IPsec on Linux Machine","path":"/lrsiem/7.21.0/configure-ipsec-on-linux-machine","children":[]},{"id":"ci_55b5566a786d151b5c9e3804033d6b33d1172580ffa1adfdc65b90afa62ca518","title":"Put Linux/CentOS into FIPS Mode","path":"/lrsiem/7.21.0/put-linux-centos-into-fips-mode","children":[]}]},{"id":"ci_8fa3f41b44c53960ea6df4a2ff54dd05178c376244370b7e3748fe189c32ae9e","title":"Test Your Custom IPsec Policy on both Computers","path":"/lrsiem/7.21.0/test-your-custom-ipsec-policy-on-both-computers","children":[]}]}]},{"id":"ci_7035f770f0e4ce63c3078793f517e71c354b14109ab4185b943f0994bde06c7c","title":"Force Encrypted Connections for SQL (Recommended)","path":"/lrsiem/7.21.0/force-encrypted-connections-for-sql-recommended","children":[]},{"id":"ci_847ac68e420b17b21c16f520e43d9aa3711be95f72efefbbb1015ff2af33f08d","title":"Deploy LogRhythm in a FIPS-Enabled Domain","path":"/lrsiem/7.21.0/deploy-logrhythm-in-a-fips-enabled-domain","children":[]},{"id":"ci_0e729af6248cd3d1dd5582cfafc18854be575fd9245becd62485bc9cec968770","title":"Put Windows into FIPS Mode","path":"/lrsiem/7.21.0/put-windows-into-fips-mode","children":[]},{"id":"ci_d8f57a6074aed8c066794b4d3a200491360d9f572818f6867c047b558ec61007","title":"Configure LogRhythm Services and the Windows Data Indexer for FIPS Mode","path":"/lrsiem/7.21.0/configure-logrhythm-services-and-the-windows-data-indexer-for-fips-mode","children":[]}]},{"id":"ci_6e76162a1ff88ece7f6f2a205342a1bd80e892a261b1d5389e14c51e075b385e","title":"Integrated Security","path":"/lrsiem/7.21.0/integrated-security","children":[{"id":"ci_f0d57ca73828bf2694dd08742cf76dda78f482376fa3c2ec8a04d5a022b1dc2b","title":"Create Accounts for LogRhythm Components","path":"/lrsiem/7.21.0/create-accounts-for-logrhythm-components","children":[]},{"id":"ci_406490ce7adc1dce9f02b37cc22f44fa0e9aa051f03d06fefcb6fc294d01dc4f","title":"Configure Database Access","path":"/lrsiem/7.21.0/configure-database-access","children":[]},{"id":"ci_13fa258836a0ef85eef1a3086a32f8ed438a6ecbe9238e22f96372d0246964e5","title":"Shut Down LogRhythm Services","path":"/lrsiem/7.21.0/shut-down-logrhythm-services","children":[]},{"id":"ci_538a5aee42b56804a66dd13c3f06a874f9d3e2c93188c4e22667be09b85d26f7","title":"Reconfigure LogRhythm Services to Use Integrated Security","path":"/lrsiem/7.21.0/reconfigure-logrhythm-services-to-use-integrated-security","children":[]},{"id":"ci_f511547a8bce4510783ea3e11a97d21aa5bbc609bcc350137766608ddc568a8a","title":"Enable Mixed Authentication Mode","path":"/lrsiem/7.21.0/enable-mixed-authentication-mode","children":[]},{"id":"ci_585206b36f7df54c0e93e62189c34a79e5f3aff2822e22e3171fba0149b975eb","title":"Restart LogRhythm Services","path":"/lrsiem/7.21.0/restart-logrhythm-services","children":[]}]},{"id":"ci_8e49e0fa010924101b0ef53dbb2ac90eccd5ccc6a05e5da25e08921d579c97e8","title":"Least Privileged User","path":"/lrsiem/7.21.0/least-privileged-user","children":[{"id":"ci_168e54ec3414ec8e5caf3e62b3e2bef5fe7713698a713221c07a9cbd4f684ea2","title":"Configuring LogRhythm Permissions","path":"/lrsiem/7.21.0/configuring-logrhythm-permissions","children":[]},{"id":"ci_24c8836026e9577837883f72fa50d378902f73938521766a103d631947d3ea20","title":"Least Privileged User: DP, Mediator Server","path":"/lrsiem/7.21.0/least-privileged-user-dp-mediator-server","children":[]},{"id":"ci_9acceea07bf814fa25826ffd50858f9da31146ffd975ecb8d600467a4f8b2c0d","title":"Least Privileged User: DX, Linux","path":"/lrsiem/7.21.0/least-privileged-user-dx-linux","children":[]},{"id":"ci_53ab896533cad3ae6e3a9f0d210b62a236209777942d99b1e84de1873d42c2b6","title":"Least Privileged User: DX, Windows","path":"/lrsiem/7.21.0/least-privileged-user-dx-windows","children":[]},{"id":"ci_b01438ddf0d6d45d5a47fdcad52dfbd583e6e2bee8810ed8fbb79ed49dd92c92","title":"Least Privileged User: PM, Advanced Intelligence Engine","path":"/lrsiem/7.21.0/least-privileged-user-pm-advanced-intelligence-engine","children":[]},{"id":"ci_ce84eedfe168cc314a4255dc3f350c4fb46c3f350d4809ab408e6959c8014ca7","title":"Least Privileged User: PM, AIE Communication Manager","path":"/lrsiem/7.21.0/least-privileged-user-pm-aie-communication-manager","children":[]},{"id":"ci_ffde3f0d8c16ed61d647cb7964ef362bec79b20bae238d5e08d1d4ac889d268b","title":"Least Privileged User: PM, Alarming and Response Manager","path":"/lrsiem/7.21.0/least-privileged-user-pm-alarming-and-response-manager","children":[]},{"id":"ci_ce2f0f1e7e3fba0f562e3039baf0671f77eb58e452731532fc58ca3684dc9247","title":"Least Privileged User: PM, Disaster Recovery","path":"/lrsiem/7.21.0/least-privileged-user-pm-disaster-recovery","children":[]},{"id":"ci_b6a4750370a3f38e4cdfcb881758b9aca8c5a800d42188ebb09971629dccddc4","title":"Least Privileged User: PM, High Availability","path":"/lrsiem/7.21.0/least-privileged-user-pm-high-availability","children":[]},{"id":"ci_a0146f55e20d1a0e2539744c378cfa5b628c9a211ad5f699d135fb9ce20d8e4f","title":"Least Privileged User: PM, Job Manager","path":"/lrsiem/7.21.0/least-privileged-user-pm-job-manager","children":[]},{"id":"ci_5f44b1cc9cbd16347bdd11ca0cbecd5a898e60a46f11c37186f931aec6a0a4de","title":"Least Privileged User: PM, Web Console","path":"/lrsiem/7.21.0/least-privileged-user-pm-web-console","children":[]},{"id":"ci_0c7f43b3e519290b9be006dedbbf8a4de991d0d23ef173739cc02a8dc5eb9368","title":"Least Privileged User: SysMon, Linux, Unix","path":"/lrsiem/7.21.0/least-privileged-user-sysmon-linux-unix","children":[]},{"id":"ci_d2301fadf2ce9ebcecbce6386577f9123d70f19b77e9aa1cb33addd792b64ea8","title":"Least Privileged User: SysMon, Windows","path":"/lrsiem/7.21.0/least-privileged-user-sysmon-windows","children":[]}]},{"id":"ci_a475ff49bd351924efc34e998a1b96afbd231de3b438a1be4b8ea3d1862301e3","title":"Public Key Infrastructure (PKI) Support","path":"/lrsiem/7.21.0/public-key-infrastructure-pki-support","children":[{"id":"ci_708871de3078d695a8673db8a0751ce50c63ce4766b753ff1c706b4622724dd7","title":"Certificate Configuration for LogRhythm Component Connections","path":"/lrsiem/7.21.0/certificate-configuration-for-logrhythm-component-connections","children":[]},{"id":"ci_aedb918e034e0df7c18a80b3b3d4f2e9a890f39bcd78759838806fa0d78c2971","title":"Create a Certificate for Microsoft SQL Server Connections","path":"/lrsiem/7.21.0/create-a-certificate-for-microsoft-sql-server-connections","children":[]},{"id":"ci_b16c72046b9d6f72d26ea4184c0ad5d4150620374858f23921cfd7722f23a527","title":"Create Client and Server Certificates","path":"/lrsiem/7.21.0/create-client-and-server-certificates","children":[]},{"id":"ci_1341a0f2a38fb13131ec23638cc3cc6667820f72ce183b6d2942b33f54a7748c","title":"Verify Certificates","path":"/lrsiem/7.21.0/verify-certificates","children":[]},{"id":"ci_e3f1e62c214d803182177c540e8a4ba6e7c78165c1f070a1d1c921a1de57caf8","title":"View an Example of Configuring Mutual Authentication in LogRhythm","path":"/lrsiem/7.21.0/view-an-example-of-configuring-mutual-authentication-in-logrhythm","children":[]},{"id":"ci_a309ef5680071dfaba0b5c0dbb8ebfd581d97781ba72ebafc8c04d7383cc2208","title":"View an Example of Configuring Certificates for AI Engine","path":"/lrsiem/7.21.0/view-an-example-of-configuring-certificates-for-ai-engine","children":[]}]},{"id":"ci_08da75d524d6bbb8ede67761aa33dff223f7f74f051ebcfdf44a5919263f1873","title":"Security Banners","path":"/lrsiem/7.21.0/security-banners","children":[{"id":"ci_c6a86e7eac351ab340b0de3dd963f382a351a708b54ae6d0fe65908e656f051f","title":"Configure the Session-Timeout Error Message","path":"/lrsiem/7.21.0/configure-the-session-timeout-error-message","children":[]},{"id":"ci_24d221eacf5918f2a42b8313e94113ef2d1d39cc0dc35665f6fdddee6f5e95e0","title":"Configure the Start-Up Warning","path":"/lrsiem/7.21.0/configure-the-start-up-warning","children":[]}]},{"id":"ci_3bf567bf335e186eb185a9e0e9360a890a6a08b66698449d4ef04745ad3147c2","title":"LogRhythm Default Passwords","path":"/lrsiem/7.21.0/logrhythm-default-passwords","children":[]},{"id":"ci_1079c07b8910e1cfe92d81c3b5ca4a993e21d13b4997e6815c1e644ccfb79bb1","title":"Enhanced Auditing","path":"/lrsiem/7.21.0/enhanced-auditing","children":[{"id":"ci_91df1cd2252fa786d22921b0e881b91bff81d10e4c8b6a5e4e686457757e3dd1","title":"Collect Enhanced Audit Logs","path":"/lrsiem/7.21.0/collect-enhanced-audit-logs","children":[]}]},{"id":"ci_2050f73a961ce6cf3ab554e94c23fe4cde59067308b3abe3859d31971c3b2c10","title":"Query Auditing","path":"/lrsiem/7.21.0/query-auditing","children":[]}]},{"id":"ci_dedcf589d58477e1718cb2ffb3e85b1f262fd40bc87f48627bbd5306eb26092b","title":"Endpoint Monitoring","path":"/lrsiem/7.21.0/endpoint-monitoring","children":[{"id":"ci_58fe4bbd4c7794897dafdfe499d6f7ec50c289dc8b2237029021cd716611561b","title":"Data Loss Defender (DLD)","path":"/lrsiem/7.21.0/data-loss-defender-dld","children":[{"id":"ci_d465afe8b0e0e3b7539f63321509aa97892710ca1e9e2ebff4b8bb149b52cea1","title":"Create DLD Policies","path":"/lrsiem/7.21.0/create-dld-policies","children":[]},{"id":"ci_73ecfbecdebe1e1f1e1f3ab69022c230e7bb263f6e90599b419bad2d1732c140","title":"Delete DLD Policies","path":"/lrsiem/7.21.0/delete-dld-policies","children":[]},{"id":"ci_ee817162424938f495aba23184a4d24a03973560a0538c71701583dfa7a4e8c5","title":"Enable DLD for an Agent","path":"/lrsiem/7.21.0/enable-dld-for-an-agent","children":[]},{"id":"ci_3dc09f156e32674638e49fd3b2a66b18cacb12bd4d4572a63df213cc90e78d90","title":"Modify DLD Policies","path":"/lrsiem/7.21.0/modify-dld-policies","children":[]}]},{"id":"ci_9ce9ee49e3d19f35d305f394ad3127dab9152a39954411af8dee540bef6f4497","title":"File Integrity Monitor (FIM)","path":"/lrsiem/7.21.0/file-integrity-monitor-fim","children":[{"id":"ci_80f2338e72de4ba02d301fcda983c76dee5d045daa00683911b9d61c116127c5","title":"Create File Integrity Monitor Policies","path":"/lrsiem/7.21.0/create-file-integrity-monitor-policies","children":[]},{"id":"ci_2ba70e80e5cabb5a434fb5fd4ac73a159d8948cadb589a934d390016fe2c224b","title":"Create Inclusions and Exclusions for FIM","path":"/lrsiem/7.21.0/create-inclusions-and-exclusions-for-fim","children":[]},{"id":"ci_621ce08222e1cd12378eab1ee26b2961fed209af2b46227656c5b8614812462c","title":"Associate a File Integrity Monitor Policy With an Agent","path":"/lrsiem/7.21.0/associate-a-file-integrity-monitor-policy-with-an-agent","children":[]},{"id":"ci_cadaafb4a13c16538dbaa74cc4e8b8a0af54d56178ed84e652cce023d0cf5938","title":"Modify File Integrity Monitor Policies","path":"/lrsiem/7.21.0/modify-file-integrity-monitor-policies","children":[]},{"id":"ci_0bf5d3641d5a830339b913f224bc00b81d203d58c86bf9ebfd80ddfbba6a0d56","title":"Clone File Integrity Monitor Policies","path":"/lrsiem/7.21.0/clone-file-integrity-monitor-policies","children":[]},{"id":"ci_8209925c0f12da18687a86022186fc3f336790ceed665c619b73e914ae641b8d","title":"Delete File Integrity Monitor Policies","path":"/lrsiem/7.21.0/delete-file-integrity-monitor-policies","children":[]}]},{"id":"ci_1370897cefae1319d0e83480392254ea2497007d05898e9f896d34b29f668360","title":"Network Connection Monitor (NCM)","path":"/lrsiem/7.21.0/network-connection-monitor-ncm","children":[{"id":"ci_911785215a53fe65d01b9eaaa00754fe43deb5e9783ec4802265b04e64e31aa8","title":"Enable NCM for an Agent","path":"/lrsiem/7.21.0/enable-ncm-for-an-agent","children":[]}]},{"id":"ci_f3a1245601f9dc500d5694323f4627d841b4aabe7a2c7175c5763930f0feb979","title":"Process Monitor","path":"/lrsiem/7.21.0/process-monitor","children":[{"id":"ci_7475d6a436fe81fc7934f51b26807483d40c7e8a98a01be1d1df306f079ed994","title":"Enable Process Monitor for an Agent","path":"/lrsiem/7.21.0/enable-process-monitor-for-an-agent","children":[]}]},{"id":"ci_9450e789a618f25c2e97ea4cada28a93e78f206c68aec0e21416509c5421ef9b","title":"Registry Integrity Monitor (RIM)","path":"/lrsiem/7.21.0/registry-integrity-monitor-rim","children":[{"id":"ci_ec09e18d186aa8fa89a9ab71c8829796d46787f81360aad5e2bb62b0e8c0ed73","title":"Associate Items to RIM Policies","path":"/lrsiem/7.21.0/associate-items-to-rim-policies","children":[]},{"id":"ci_83f5f3cf428e6dc6a0b0d72669003ee40030125065fcaf03929f09ab5f62a840","title":"Associate RIM Policies to Windows System Monitor Agents","path":"/lrsiem/7.21.0/associate-rim-policies-to-windows-system-monitor-agents","children":[]},{"id":"ci_5459967f01713dabee5cc85999f6105c5fe67c508d9bfb30044e970127ec9d6f","title":"Configure RIM Policy Items","path":"/lrsiem/7.21.0/configure-rim-policy-items","children":[]},{"id":"ci_9d614fc37851866caf02ecff2be2f134f2b2a49df812990fd24eaf38233fadff","title":"Create RIM Policies","path":"/lrsiem/7.21.0/create-rim-policies","children":[]},{"id":"ci_387a95e4df6c9abbc3ae653a5e342d802f50bc9aab80ef7a5d1ad5988ecf8d93","title":"Delete RIM Policies","path":"/lrsiem/7.21.0/delete-rim-policies","children":[]},{"id":"ci_d14608985f27034aa75eedb114f304648d9edd02be68a959f0143de0c329bc32","title":"Delete RIM Policy Items","path":"/lrsiem/7.21.0/delete-rim-policy-items","children":[]},{"id":"ci_08002bc1424f0a5c7bbb919930ad5cbb0dec546942bc33ee480aa45cc9a02d79","title":"Modify RIM Policies","path":"/lrsiem/7.21.0/modify-rim-policies","children":[]},{"id":"ci_0eeba75b63ae056aaad9209d93fb0f506ae23c1590d1d22ee98ec68a0fe9232c","title":"Modify RIM Policy Items","path":"/lrsiem/7.21.0/modify-rim-policy-items","children":[]}]},{"id":"ci_eb907f0de4279c030cb520835cff89e2698cb7f422d32cac0d34cebfa5d7b66d","title":"User Activity Monitor (UAM)","path":"/lrsiem/7.21.0/user-activity-monitor-uam","children":[{"id":"ci_9e66295d6665b8da8798571e942933fef6bb49bef61052a321a3adbdb0620fa9","title":"Enable UAM for an Agent","path":"/lrsiem/7.21.0/enable-uam-for-an-agent","children":[]},{"id":"ci_7f51de18b1f8ab2e8f715c3cafca35638e886c39bcd2208f70fdbd2230dc6722","title":"Include UAM in File Integrity Monitor","path":"/lrsiem/7.21.0/include-uam-in-file-integrity-monitor","children":[]}]}]},{"id":"ci_bc3ef6f896b7e31b0cc762e2445ac121e8710b75a6940cb27031725474e97115","title":"Entities","path":"/lrsiem/7.21.0/entities","children":[{"id":"ci_0fa78d08fb1bfd26076b741b19e8a1b087fa54693642a4d6b5d2c20dc0d10dee","title":"Add a Single Entity","path":"/lrsiem/7.21.0/add-a-single-entity","children":[]},{"id":"ci_e6ae8d995dc5f629ca6a7916782f014627e1c4337f41902837413afd8b34417f","title":"Bulk Import Entities From a File","path":"/lrsiem/7.21.0/bulk-import-entities-from-a-file","children":[]},{"id":"ci_68522988d51067c73ac61df4cc7b9e03572ec1aee12b5d12a00707f54bf42296","title":"Delete Entities","path":"/lrsiem/7.21.0/delete-entities","children":[]},{"id":"ci_5bfa01e4abfaebe8c9974918f19287ec09bcc604b953ebf8e6f30fb84937be1d","title":"Modify Entities","path":"/lrsiem/7.21.0/modify-entities","children":[]},{"id":"ci_32d1249f8f5dff4e79d6a4c405fdfb968e5d9b55df7ab1c57c4b831a9165b989","title":"Run the Entities Reorganization Wizard","path":"/lrsiem/7.21.0/run-the-entities-reorganization-wizard","children":[]}]},{"id":"ci_2a9afa403384f77bea3600b4c0a04ebdfb327725cf6a883064d4ffabfd9fa2b9","title":"Global Log Processing Rules","path":"/lrsiem/7.21.0/global-log-processing-rules","children":[{"id":"ci_7593085673c3c898962075061ee3415ceaf54a746ced51beea55bd53603d1647","title":"Create Global Log Processing Rules","path":"/lrsiem/7.21.0/create-global-log-processing-rules","children":[]},{"id":"ci_957c2a0ca46e43562f9f31e576bb2a0e55ffe01ca0ef14837b7e70a2cd402f77","title":"Modify Global Log Processing Rules","path":"/lrsiem/7.21.0/modify-global-log-processing-rules","children":[]}]},{"id":"ci_e4e6bb3e287b21bee08dfd06e6f261093d506c68de594786be32ed1e83a01367","title":"Host Records","path":"/lrsiem/7.21.0/host-records","children":[{"id":"ci_3d972cf6f3325d2646cd402c9e31295b5898c7f298a2dfaa097f8bffeda01b20","title":"Add Host Records Manually","path":"/lrsiem/7.21.0/add-host-records-manually","children":[]},{"id":"ci_3307d83b7fa9b4ef2927e288dca9efd77764031c118f410e907a35415ff0912a","title":"Add Hosts From Clipboard","path":"/lrsiem/7.21.0/add-hosts-from-clipboard","children":[]},{"id":"ci_bdc6e9d01b48e887099e7817ce4b0e5342d67e612ef1c73bec3f654ac87302a3","title":"Add Hosts From File","path":"/lrsiem/7.21.0/add-hosts-from-file","children":[]},{"id":"ci_8f063f44425b429de3cb865ad720b8062608bcc0a7d3072a4d38aafd85584f53","title":"Add Origin Hosts or Impacted Hosts as Known Hosts","path":"/lrsiem/7.21.0/add-origin-hosts-or-impacted-hosts-as-known-hosts","children":[]},{"id":"ci_13f82068f8c2d2f380bca5526222ed84431cefb07e75a596f92d94c26e0752d0","title":"Add or Remove Multiple Host Roles","path":"/lrsiem/7.21.0/add-or-remove-multiple-host-roles","children":[]},{"id":"ci_e6bc1466c8587495b1c556d6b56a4a76e8083ea1b3513252dd72b1a2617a0245","title":"Export Multiple Host Roles to File","path":"/lrsiem/7.21.0/export-multiple-host-roles-to-file","children":[]},{"id":"ci_713de22ec3327be91a6d0bb6c1553060963ee7c6bd844563d1693bf7c7a2b2db","title":"Modify Properties for a Single Host Record","path":"/lrsiem/7.21.0/modify-properties-for-a-single-host-record","children":[]},{"id":"ci_48748f81ed3d60b5aa20a4db8e9ec6104e90ea6f532e1fbd24f7feab409a6fa8","title":"Modify Properties for Multiple Host Records","path":"/lrsiem/7.21.0/modify-properties-for-multiple-host-records","children":[]},{"id":"ci_cc5502fa57ae7dbc07353e1324e36659673fc7be6b648cb54e5b3a8718d05e62","title":"Resolve Known Hosts","path":"/lrsiem/7.21.0/resolve-known-hosts","children":[]},{"id":"ci_2a724e7fee6f4aab4871be45d922e19afdf9e47beb14136abeaebd38e3649e21","title":"Retire Host Records","path":"/lrsiem/7.21.0/retire-host-records","children":[]},{"id":"ci_d8026c789be784719c9b5165cc45572b675228353442378c47db3466a561139f","title":"Search for Hosts","path":"/lrsiem/7.21.0/search-for-hosts","children":[]},{"id":"ci_8fd869de9d5b6f51f682e9a17b44bf3cef50364b4b110bd062818c56fd4eab03","title":"Windows Host Wizard","path":"/lrsiem/7.21.0/windows-host-wizard","children":[{"id":"ci_d65ab07c86f56f6eb401e68db123aceb54192811f64e8f3b0f3987c0bdaf1ce1","title":"Configure Initial Host Settings in Windows Host Wizard","path":"/lrsiem/7.21.0/configure-initial-host-settings-in-windows-host-wizard","children":[]},{"id":"ci_fdfc1d5c83f8a774e26fc4c629fa10aa019eaeb9bef6e104fdada2057fb47eaa","title":"Import Computers for Log Collection","path":"/lrsiem/7.21.0/import-computers-for-log-collection","children":[]},{"id":"ci_c8764fd6690eed00c8400f0129a4a860202d2f2e558f733836f174e367948e27","title":"Perform Optional Configuration for Remote Log Collection","path":"/lrsiem/7.21.0/perform-optional-configuration-for-remote-log-collection","children":[]},{"id":"ci_604d8d144b4676168136c52cb483b142bbe202a397f12b93e566eacbfe64d7dc","title":"Query Computers with Windows Host Wizard","path":"/lrsiem/7.21.0/query-computers-with-windows-host-wizard","children":[]},{"id":"ci_c25fe7f35a6e817f6a3eaf65e9c6e0b61f3f913f1332bc58f9b5e5b9bc6e6929","title":"Review Computers with Windows Host Wizard","path":"/lrsiem/7.21.0/review-computers-with-windows-host-wizard","children":[]},{"id":"ci_5fbdb0ac265b82a4c2b3d8617c1190622c4da0ecc9145daf05b984d9e64f9309","title":"Scan a Domain for Computers","path":"/lrsiem/7.21.0/scan-a-domain-for-computers","children":[]},{"id":"ci_e58d9761f7a1707bca58a91ed33b1c96bf44325d857e7a810016beb9b9b085fe","title":"Work with Hosts and Agents in Windows Host Wizard","path":"/lrsiem/7.21.0/work-with-hosts-and-agents-in-windows-host-wizard","children":[]}]}]},{"id":"ci_9876aaa57c3777d0e27f2e9d7bef64cda348911085fd18b2b5d7b375d4487af7","title":"Knowledge Base","path":"/lrsiem/7.21.0/knowledge-base","children":[{"id":"ci_af5f7d421f8ea7cda02f3168451f646e44cb819d235ffe0d8a919bde2d96d64b","title":"Back Up the EMDB","path":"/lrsiem/7.21.0/back-up-the-emdb","children":[]},{"id":"ci_7cec156d519abe6eaae3a5c368e2874d2c1d5d0d455c166a891f3a4cd9761759","title":"Configure Knowledge Base Synchronization Settings","path":"/lrsiem/7.21.0/configure-knowledge-base-synchronization-settings","children":[]},{"id":"ci_3889aa7b30d29336ed95dd65432dde9bf922d30c824ac94610eb59d8fc38c50b","title":"Download the Knowledge Base File","path":"/lrsiem/7.21.0/download-the-knowledge-base-file","children":[]},{"id":"ci_7b72d8cd951c2f85fca20244d2f55972a36d86254cdc6a332c6722e96efdab87","title":"Import a Knowledge Base","path":"/lrsiem/7.21.0/import-a-knowledge-base","children":[]},{"id":"ci_6aeddcc3cf61532468db108020970d004ce79d22ce230f6e7a02e468a0dac628","title":"Knowledge Base Manager","path":"/lrsiem/7.21.0/knowledge-base-manager","children":[{"id":"ci_b2aa2e58c920989ee0579b2538ff67bf3267b61e8c7b58d542685f4f01b6c763","title":"Disable Knowledge Base Modules","path":"/lrsiem/7.21.0/disable-knowledge-base-modules","children":[]},{"id":"ci_d759c54331e98e67f6d40df11335861c11b362eeec13d8e4ac7460f08a771b52","title":"Enable Knowledge Base Modules","path":"/lrsiem/7.21.0/enable-knowledge-base-modules","children":[]},{"id":"ci_9f5e8c70061311f1ec1ae02dac57ccff30b6700118b000ea1b397750fcc2c2c1","title":"Export Knowledge Base Module Information to a File","path":"/lrsiem/7.21.0/export-knowledge-base-module-information-to-a-file","children":[]},{"id":"ci_b7e72b776fdeebab126ba12da3992b0de9d9bea2df5b89e2879698336d64bdd6","title":"Migrate Common Events","path":"/lrsiem/7.21.0/migrate-common-events","children":[]},{"id":"ci_4752716e9551e6f065303b3d3393dd2b30f3119f8830a44e081483b082782e78","title":"Modify the Properties of Knowledge Base Modules","path":"/lrsiem/7.21.0/modify-the-properties-of-knowledge-base-modules","children":[]},{"id":"ci_884df6fb86b84454ab47da0bb732a9cd5799d8dc0d69a254368c76505a2e8aac","title":"View Knowledge Base Module Dependent Objects","path":"/lrsiem/7.21.0/view-knowledge-base-module-dependent-objects","children":[]}]}]},{"id":"ci_68c55e07634a9e48559700631947581b5945ce93d0b2bfe9a3fce469f446aad3","title":"Log Distribution Services","path":"/lrsiem/7.21.0/log-distribution-services","children":[{"id":"ci_ae1b42348f89601ac6fdef4d4836a93cd753bf082254e5547d57e840a7936bea","title":"Log Distribution Receiver Manager","path":"/lrsiem/7.21.0/log-distribution-receiver-manager","children":[{"id":"ci_272262947712a23178e05ddbdfd7ef0e4680b167575694bcea12edc5b7bcf585","title":"Create Log Distribution Receivers","path":"/lrsiem/7.21.0/create-log-distribution-receivers","children":[]},{"id":"ci_8826fca7a4e621e3d6deab933f5dbad49411b31a7193b29ccb9cd91f76405170","title":"Enable Log Distribution Receivers","path":"/lrsiem/7.21.0/enable-log-distribution-receivers","children":[]},{"id":"ci_d868aa47f18c8e521e80f154dc8587efe31975df2a328d91f71de03fff446a07","title":"Modify Log Distribution Receivers","path":"/lrsiem/7.21.0/modify-log-distribution-receivers","children":[]}]},{"id":"ci_19eca4520f1954fbeaa4d3d9bf056408ca42fddb7f6c7558e1b37ccfa298c2e2","title":"Log Distribution Policy Manager","path":"/lrsiem/7.21.0/log-distribution-policy-manager","children":[{"id":"ci_c7fed0e081d7628a8268ecfbbd5b2f8059deecf477ef952ef30193522d625476","title":"Create Log Distribution Service Policies","path":"/lrsiem/7.21.0/create-log-distribution-service-policies","children":[]},{"id":"ci_148c668378a03492cd3b5c5105c651cb42caa8bba73ac31bd41d3bfec82aee2b","title":"Enable or Disable Log Distribution Service Policies","path":"/lrsiem/7.21.0/enable-or-disable-log-distribution-service-policies","children":[]},{"id":"ci_2b24a490e4c7c3edd33fbeb4a5658f612e554bf10d1b55c1ca9aa806c847bc0d","title":"Modify Log Distribution Service Policies","path":"/lrsiem/7.21.0/modify-log-distribution-service-policies","children":[]}]},{"id":"ci_6a32379750e48f7aeebfbaa49eb580bad042bbf390fd31f6ebfd456ca43e72a0","title":"LogRhythm Log Distribution Services Version 2","path":"/lrsiem/7.21.0/logrhythm-log-distribution-services-version-2","children":[{"id":"ci_3a377ebf68f3139b70103ad51cc8260ee1b9eedcbdc008f2ec5ee58c050b0077","title":"Determine When to Switch to Log Distribution Services v2","path":"/lrsiem/7.21.0/determine-when-to-switch-to-log-distribution-services-v2","children":[]},{"id":"ci_46643809f2908c92e4fc9a2fc93605815cdbd3a037a2a1e10004c579ce44fbf2","title":"Enable Log Distribution Services v2","path":"/lrsiem/7.21.0/enable-log-distribution-services-v2","children":[]},{"id":"ci_a05c8f70ff6beb0095f806723b1f881d957fcf6ab481738432d060097f88077c","title":"Troubleshoot Log Distribution Services v2","path":"/lrsiem/7.21.0/troubleshoot-log-distribution-services-v2","children":[]}]},{"id":"ci_cf285eab2d703f7f126f01d3a37871dcbd30d9a8d06ce22b482ef5955e102f5b","title":"Modify Log Distribution Service Properties in Data Processors","path":"/lrsiem/7.21.0/modify-log-distribution-service-properties-in-data-processors","children":[]}]},{"id":"ci_66f213524e601ce95ee0b5766ef9ac5ad63f853190ff36fdbdeafdfe553f6f02","title":"Log Processing Policies","path":"/lrsiem/7.21.0/log-processing-policies","children":[{"id":"ci_84277e9929fa118bea1113d3a39e20458fcd53d2616cd3732fd6cc2b555a7f47","title":"Create Log Processing Policies","path":"/lrsiem/7.21.0/create-log-processing-policies","children":[]},{"id":"ci_30532f5009f9b9a241a049acaadde32c78e77fb90cfbd631abd4808401b51204","title":"Assign Log Processing Policies","path":"/lrsiem/7.21.0/assign-log-processing-policies","children":[]},{"id":"ci_8fe86270459dffe555ccb8e73670e84158e70611d9fcd2aaa392d78c97638436","title":"Modify Log Processing Policies","path":"/lrsiem/7.21.0/modify-log-processing-policies","children":[]},{"id":"ci_8191cd3b8b1309dde87bbdc68c72eb1008daf2f1a01ec7581601f7909576cd2d","title":"Delete Log Processing Policies","path":"/lrsiem/7.21.0/delete-log-processing-policies","children":[]},{"id":"ci_e07c4f48517eaebee5b84fb65090644351693a48006b6af442f01c787eaedf12","title":"Troubleshoot MPE Rule Performance","path":"/lrsiem/7.21.0/troubleshoot-mpe-rule-performance","children":[]}]},{"id":"ci_f5ee46bf9c1d5fc97cf97ce40d3989bed54ef3357daaba67eaa532e9fb7f0286","title":"Log Sources","path":"/lrsiem/7.21.0/log-sources","children":[{"id":"ci_d732a8825c12e2544136925704707c51449185cce6003754c4a1a73689f9cc15","title":"Work With Log Sources","path":"/lrsiem/7.21.0/work-with-log-sources","children":[{"id":"ci_a6793c785a5d2e2a3bc73796504c0191fe64c8fb3451ec76115ee677ea80265b","title":"Add a Single Log Source","path":"/lrsiem/7.21.0/add-a-single-log-source","children":[]},{"id":"ci_8c3f0efc04ecc1900839a2e9dd571b41d7295ad3925eb7cc156382f6acdbde28","title":"Add Multiple Log Sources","path":"/lrsiem/7.21.0/add-multiple-log-sources","children":[]},{"id":"ci_e0ef274ad0970a0a86a37b11215973dc3b2640cd7e5979184371e59300463440","title":"Associate New Log Sources","path":"/lrsiem/7.21.0/associate-new-log-sources","children":[]},{"id":"ci_acad28c8b5749660cd867967461c9cfc324704fd38cf3ccc481bf3897d40d936","title":"Collect Local Event Logs with the Server Service Disabled","path":"/lrsiem/7.21.0/collect-local-event-logs-with-the-server-service-disabled","children":[]},{"id":"ci_34cd961a8047b63361db20464963448fe5c889f1b13207bfb1d3549a67f800bf","title":"Configure Log Sources Automatically","path":"/lrsiem/7.21.0/configure-log-sources-automatically","children":[{"id":"ci_86b1c3ac76aac8d5c83527ad118fc98dc2eca9136fe26d78741225b3bcd995c7","title":"Add and Delete SNMP Connections","path":"/lrsiem/7.21.0/add-and-delete-snmp-connections","children":[]},{"id":"ci_dc16b510a148627a969b8440b020da6216829b74a785aa55046cf61a360c59b4","title":"Enable Automatic Log Source Configuration","path":"/lrsiem/7.21.0/enable-automatic-log-source-configuration","children":[]},{"id":"ci_21135ab95e1a92d065256982046b4e042ec3356834924d37c17f9a3b9634e66f","title":"Use the Advanced Criteria Manager","path":"/lrsiem/7.21.0/use-the-advanced-criteria-manager","children":[]}]},{"id":"ci_a35ce1bfeef26cce59856de676f1dbe0aaf5bdc22d15c2b1a568edc363aa5b44","title":"Configure Support for Multi-Line Logs","path":"/lrsiem/7.21.0/configure-support-for-multi-line-logs","children":[]},{"id":"ci_a8b5e296a6a6bff2f2e75411f22bfb18695323c72f2ecd0d96fc3d9779a4ab2b","title":"Export Log Sources","path":"/lrsiem/7.21.0/export-log-sources","children":[]},{"id":"ci_ae8d65d98d151fcf454f16ad0ba2f46dfdc9b3de44262e35babd55943a60d4d4","title":"Modify a Single Log Source","path":"/lrsiem/7.21.0/modify-a-single-log-source","children":[]},{"id":"ci_f6dedbdc9b1438b4fee8e8f0d78a608fec5c3afe185cfae6c3bce518a57d8d08","title":"Modify Event Settings","path":"/lrsiem/7.21.0/modify-event-settings","children":[]},{"id":"ci_6c13b925dfe6adea8588290727183b401b6fb097ca7d6f1676f5554e6bf51805","title":"Modify Multiple Log Sources","path":"/lrsiem/7.21.0/modify-multiple-log-sources","children":[]},{"id":"ci_c5269d2a0bb6216a079445894d761a3f825c36cb2ca96cc822dbd6307bbe54ff","title":"Move Log Sources to New Hosts","path":"/lrsiem/7.21.0/move-log-sources-to-new-hosts","children":[]},{"id":"ci_23398d6d614e6a8b786b76aaaf819cb32693db44010a3d05b0e2db7f0a6c2568","title":"Preregister Log Sources","path":"/lrsiem/7.21.0/preregister-log-sources","children":[]},{"id":"ci_b21dbdfa54519a569e6e3e2099d86e982e71afba77f5a5f4d156e479a92470e8","title":"Resolve Log Source Hosts","path":"/lrsiem/7.21.0/resolve-log-source-hosts","children":[]},{"id":"ci_b7dcf575cfaab4d0221d6d75867289b68c883b8fc1fd500d8f4b5e6772dd4f62","title":"Retire or Activate Log Sources","path":"/lrsiem/7.21.0/retire-or-activate-log-sources","children":[]}]},{"id":"ci_4afcb0d1ce49ee26a0f612dee06af4a6cdf678f318fd5898517eb8c60ea8522b","title":"Log Source Types","path":"/lrsiem/7.21.0/log-source-types","children":[{"id":"ci_a74922cb0af91e289edc1cd1b1313be3f1d8d1a8a94580ae878daa9d2d47e22b","title":"Create Custom Log Source Types","path":"/lrsiem/7.21.0/create-custom-log-source-types","children":[]},{"id":"ci_f4c27d3af3018650a896db5dc0a482a4ab6c43a04e7e4550f12e4aa68c171641","title":"Delete Custom Log Source Types","path":"/lrsiem/7.21.0/delete-custom-log-source-types","children":[]},{"id":"ci_ec97d05452c4313e6951263ef088905c87a28d08b1e5e1af75e4ed5c6438a904","title":"Modify Custom Log Source Type","path":"/lrsiem/7.21.0/modify-custom-log-source-type","children":[]},{"id":"ci_343a4a71d54cd2933e6d95fb8123e444f43fb531c2631e891648ffe9e9fb6c58","title":"Modify Type for Pending Log Source","path":"/lrsiem/7.21.0/modify-type-for-pending-log-source","children":[]}]},{"id":"ci_da2f589fa11f867beda3b9c8fffa5ccfcb1d8936d7a0c62105d0dabce618470b","title":"Data Masking","path":"/lrsiem/7.21.0/data-masking","children":[{"id":"ci_3e474b0a3568a6cde0fa12222dff65265824159870c712fda526571c1aa840e0","title":"Add New Data Masking Rules","path":"/lrsiem/7.21.0/add-new-data-masking-rules","children":[]},{"id":"ci_3bc59a8e1ff72cbd941ff4951a6b6d133a06dcaf3992cdf3e5915bdd7ab1eb89","title":"Import and Export Data Masking Rules","path":"/lrsiem/7.21.0/import-and-export-data-masking-rules","children":[]},{"id":"ci_59bb8f12b41e12d79b954edf2710d6819bac3339fa8d2e5f91a3980cabed40e3","title":"Enable and Disable Data Masking Rules","path":"/lrsiem/7.21.0/enable-and-disable-data-masking-rules","children":[]},{"id":"ci_1ae3151d48fe3c5e659e7cec7932f8688091bec4dd3223f2801561fceac59734","title":"Reorder Data Masking Rules","path":"/lrsiem/7.21.0/reorder-data-masking-rules","children":[]},{"id":"ci_fbf363973a65eab9cce4836aa2ca21b77ad6ecc0be01a4d6af1ffd8817a3c479","title":"Delete Data Masking Rules","path":"/lrsiem/7.21.0/delete-data-masking-rules","children":[]}]},{"id":"ci_ad5e7c1dc7944e3b90f84234b426bcfacfb6cca567c73e0596e66731204bb685","title":"Log Source Identification and Acceptance","path":"/lrsiem/7.21.0/log-source-identification-and-acceptance","children":[{"id":"ci_ae690fccf33179eddaeb9de40f8d225fbc3c9104379d5e325b7daa8eaf79a5c6","title":"Accept New Log Sources","path":"/lrsiem/7.21.0/accept-new-log-sources","children":[]},{"id":"ci_cd61a44a92ae01c88a0c14040a6f361885e51b24267b69af1203d258a0ad060f","title":"Accept New Log Sources Automatically","path":"/lrsiem/7.21.0/accept-new-log-sources-automatically","children":[{"id":"ci_c3f16eda310d0c52d9951a53829a3d2fa7b49494ad48f4fdf05f2cb7ea7413dc","title":"Create IP Range Log Source Acceptance Rules","path":"/lrsiem/7.21.0/create-ip-range-log-source-acceptance-rules","children":[]},{"id":"ci_867a208ebcb4c8ff850ecddf71e52ccc359c0b8b3657a3d90271a17134b716da","title":"Create Pattern Match Log Source Acceptance Rules","path":"/lrsiem/7.21.0/create-pattern-match-log-source-acceptance-rules","children":[]},{"id":"ci_d97cd7d6c29a16dae628c224aafeff886aec94c78d0c43adbe1ba9c849e09230","title":"Manage Automatic Log Source Acceptance Rules","path":"/lrsiem/7.21.0/manage-automatic-log-source-acceptance-rules","children":[]}]},{"id":"ci_3ee01dda6f292e42928f87306a807e5ca84a88bd7e22db366876f63cc13ccf29","title":"Set the Log Source Identification Search Scope","path":"/lrsiem/7.21.0/set-the-log-source-identification-search-scope","children":[]},{"id":"ci_4bfcfcaebff4cf83f19285ee11473b5c5300fc9e3a5ee485702d57e2821473e7","title":"View Log Source Acceptance Properties","path":"/lrsiem/7.21.0/view-log-source-acceptance-properties","children":[]}]},{"id":"ci_d1ff3d192be76b3e355b25f2b17544acc6603605fca6e2dbb2631fc22496ee2d","title":"Log Sources and Agents","path":"/lrsiem/7.21.0/log-sources-and-agents","children":[{"id":"ci_c72fc69d52a55017b42842acf76fca04266a69e2df70a74c940ea0efbc2de2a5","title":"Limit the Number of Agents Available for Batch Updates","path":"/lrsiem/7.21.0/limit-the-number-of-agents-available-for-batch-updates","children":[]},{"id":"ci_87322924c68bbdb31e9fb45ca9f74c7c192c46f9b15da999908dc3bc3c0d2d8d","title":"Move Log Sources Between Agents","path":"/lrsiem/7.21.0/move-log-sources-between-agents","children":[]}]},{"id":"ci_3edaea81aba9ea9b9c336731ff6b9d8c829433b9bcad529237cd69f887163957","title":"Flat File Collection","path":"/lrsiem/7.21.0/flat-file-collection","children":[{"id":"ci_db0d7f528a941c40cb851ed43710c3a3ee5aaf36ba99cdf5527aa47ac87c7898","title":"Configure a Host for Local Flat File Collection","path":"/lrsiem/7.21.0/configure-a-host-for-local-flat-file-collection","children":[]},{"id":"ci_c9bc2f955379c2e7feefec60b2fd366eb20f5cc26248430c91cdf32bf7294d9d","title":"Configure an Agent for IIS Log Collection","path":"/lrsiem/7.21.0/configure-an-agent-for-iis-log-collection","children":[]},{"id":"ci_6b6459c266eb41b74bf19ca703516e7b8b81734f8c61f389da57749ad8d4225e","title":"Convert Flat File to Epoch Time","path":"/lrsiem/7.21.0/convert-flat-file-to-epoch-time","children":[]},{"id":"ci_506b5d2ec448093caa016cfcd18576e05df56f0a57187578344aebd155a5ca4c","title":"Supported Date Parsing Formats","path":"/lrsiem/7.21.0/supported-date-parsing-formats","children":[]}]},{"id":"ci_0ae355cb687c2d994bf0e43f100d9defacb036a20d36d86bdda361132f35a84c","title":"UDLA Collection","path":"/lrsiem/7.21.0/udla-collection","children":[{"id":"ci_b81ec48c003be79d806b4305f04a3ae473d9e47a886ffb281dbcfbdc15d54aa0","title":"Configure UDLA Log Collection","path":"/lrsiem/7.21.0/configure-udla-log-collection","children":[]},{"id":"ci_6b902c4c99e85a50b98e74a2905b5e33967d35b5dfe7d3724507e1745fc435fd","title":"Create a Sample McAfee ePolicy Orchestrator (ePO) Event Log Source","path":"/lrsiem/7.21.0/create-a-sample-mcafee-epolicy-orchestrator-epo-event-log-source","children":[]},{"id":"ci_ab9f6da1db0a313b542951b9bd10ae65e6ad5c07512e641c87eb2947a365dc03","title":"Create a Sample Oracle 10g Audit Trail UDLA Log Source","path":"/lrsiem/7.21.0/create-a-sample-oracle-10g-audit-trail-udla-log-source","children":[]},{"id":"ci_e9398202e852d7ee873faf563564534332559a3cb19b1d232e9b9038bfd09bb0","title":"Export and Import UDLA Log Source Configurations","path":"/lrsiem/7.21.0/export-and-import-udla-log-source-configurations","children":[]},{"id":"ci_027f2dd29d8166d0cb47aa8b9ada1d79238e34ef05e9a560138eec1cf33a59bb","title":"Override UDLA SQL","path":"/lrsiem/7.21.0/override-udla-sql","children":[]}]},{"id":"ci_0b6aeb93126bf2f54d5b775fac2c3b8cfba069483857ca87a0458841667d312b","title":"Log Source Virtualization","path":"/lrsiem/7.21.0/log-source-virtualization","children":[{"id":"ci_dd977ae0ffb0a775646b29d4c27350e8cb7033cf90df0eea29fc40ba8508f3b1","title":"Create Log Source Virtualization Templates","path":"/lrsiem/7.21.0/create-log-source-virtualization-templates","children":[]},{"id":"ci_b81e496a6ae51e70a171c937255aa467b5107eca68da9d603fceeb1bbd1f8c35","title":"Create Virtual Log Sources","path":"/lrsiem/7.21.0/create-virtual-log-sources","children":[]},{"id":"ci_0cae2d3ffb298e23d05955bf488a2e22f7f1ca62189b160e1abc08f1239d285e","title":"Delete Log Source Virtualization Templates","path":"/lrsiem/7.21.0/delete-log-source-virtualization-templates","children":[]},{"id":"ci_28cdf1e2ff2122527207c90e59e89cafa39526f746619edecd49016c1be819a8","title":"Delete Virtual Log Sources","path":"/lrsiem/7.21.0/delete-virtual-log-sources","children":[]},{"id":"ci_afee845fa29d6a56a38cfe0fcad502397075a3ee262bd7e8e04e0e6c8b8369eb","title":"Enable Virtualization on a Single Log Source","path":"/lrsiem/7.21.0/enable-virtualization-on-a-single-log-source","children":[]},{"id":"ci_6e0159ec0490ab73b4d5f205d0364da4fd7e5c652141e75de5cdc461e46228bc","title":"Enable Virtualization on Multiple Log Sources","path":"/lrsiem/7.21.0/enable-virtualization-on-multiple-log-sources","children":[]},{"id":"ci_89bc42180a8f756ddca473ee20723ebb63fb8c354efd7886c4601c4275d1e15f","title":"Export Log Source Virtualization Templates","path":"/lrsiem/7.21.0/export-log-source-virtualization-templates","children":[]},{"id":"ci_acf5fb3243578956649877d281aa47729b07db9f7939c29249d3773c958f3c2a","title":"Filter Virtual Logs at the Agent","path":"/lrsiem/7.21.0/filter-virtual-logs-at-the-agent","children":[]},{"id":"ci_6c868f050d3f9725697abe07b8270c2a2819d9331d46df38a97293c4eedfa77c","title":"Import Log Source Virtualization Templates","path":"/lrsiem/7.21.0/import-log-source-virtualization-templates","children":[]},{"id":"ci_eec983ccb5bfbf8aa2d2eb3f48ed599b67e5c0ef285496752bc605ffd6051fde","title":"Modify Catch-All Sources on a Batch of Parent Log Sources","path":"/lrsiem/7.21.0/modify-catch-all-sources-on-a-batch-of-parent-log-sources","children":[]},{"id":"ci_57563d54aa79be5764f29ee156461c30c50fea3ee7f2e6a5393bf1036167f163","title":"Modify Log Source Virtualization Templates","path":"/lrsiem/7.21.0/modify-log-source-virtualization-templates","children":[]},{"id":"ci_4945af386de6733a26beab44ea161f1a9853603f8178bee1aff7e3670b08c61d","title":"Modify Virtual Log Sources","path":"/lrsiem/7.21.0/modify-virtual-log-sources","children":[]}]}]},{"id":"ci_6ce1475f5339756141cad70d62e5ad222039fa5350b6740b0c41019bf8064ea1","title":"Network Monitor","path":"/lrsiem/7.21.0/network-monitor","children":[{"id":"ci_03f1b3ae17d7fe62d1e246ca38a70765eb73b907b4d2d502cfe3c284c5e95c45","title":"Add NetMon in the Client Console","path":"/lrsiem/7.21.0/add-netmon-in-the-client-console","children":[]},{"id":"ci_8d9fffbb530191950e07476707f298ef73518dbf3c067b4977ca2bf0935304c8","title":"Configure NetMon in the Client Console","path":"/lrsiem/7.21.0/configure-netmon-in-the-client-console","children":[]},{"id":"ci_34f6704fd3a8c05b9d33adf2bc348aaa967513f6470b22d47bd32d3192a45372","title":"Delete NetMon in the Client Console","path":"/lrsiem/7.21.0/delete-netmon-in-the-client-console","children":[]},{"id":"ci_3d7694a78073aba7feebec21be48e8f4b0a170a1ad93952920052168f5c5b699","title":"Modify NetMon in the Client Console","path":"/lrsiem/7.21.0/modify-netmon-in-the-client-console","children":[]},{"id":"ci_2edebdd4c4b433224ccb325747850f92277f4c2eacb0956527ddf221bad37969","title":"Monitor NetMon in the Client Console","path":"/lrsiem/7.21.0/monitor-netmon-in-the-client-console","children":[]}]},{"id":"ci_2392ab34c326d8874c1888c73a3d7d8ed937432c7c0aba22ca56b1945dcb4ca0","title":"Network Records","path":"/lrsiem/7.21.0/network-records","children":[{"id":"ci_4ad37443f937ae724836cd6b435787252e8bdecc19a8125d88cac5e8c98250eb","title":"Add Network Records from File","path":"/lrsiem/7.21.0/add-network-records-from-file","children":[]},{"id":"ci_acda6a863435871263b75f7678bcaa784916045ab676562fac1875d414f42ceb","title":"Manually Add Network Records","path":"/lrsiem/7.21.0/manually-add-network-records","children":[]},{"id":"ci_cdb14327c0c42bd91d6a5048be288d481d6d039701621f3e9a33a65facba8722","title":"Modify Properties for a Single Network","path":"/lrsiem/7.21.0/modify-properties-for-a-single-network","children":[]},{"id":"ci_c5cbfe9c48d2281a9612e5e24fb02bf6387f06653c4d7d26b7bb36224d9af4df","title":"Modify Properties for Multiple Network Records","path":"/lrsiem/7.21.0/modify-properties-for-multiple-network-records","children":[]},{"id":"ci_78c74e6dc2e2cd9fb7a24a535b2bb8ed5943f506611f237d10d51a5d2da27ee1","title":"Resolve Known Networks","path":"/lrsiem/7.21.0/resolve-known-networks","children":[]},{"id":"ci_85e39759c21f4afdde6fcb4affd7a5e99c1317ffdab33b18e684aad6d56dac8c","title":"Retire Network Records","path":"/lrsiem/7.21.0/retire-network-records","children":[]},{"id":"ci_6f3e4a75f1ba534111a3cec5ced19f3a04a679a55f61b8e8d553261fb6a0143b","title":"Search for Networks","path":"/lrsiem/7.21.0/search-for-networks","children":[]}]},{"id":"ci_9cf8efefc38dab8c2afd13ab4ffa46944f12b32ceb39fa8183e5a4e94781eb06","title":"Object Permissions Manager","path":"/lrsiem/7.21.0/object-permissions-manager","children":[{"id":"ci_531468970e865fbd94abcd6ff94f28d77e1b4f55dba74a17435ff9d1e29d4efd","title":"Modify Objects' Security Settings","path":"/lrsiem/7.21.0/modify-objects-security-settings","children":[]}]},{"id":"ci_3f20841907c821da31dfdafce10c16610b519355f0a2ad69721d48482edd9a73","title":"People and Users","path":"/lrsiem/7.21.0/people-and-users","children":[{"id":"ci_279a567b3da004aa054217763eedb5baa80de23a5d7c9dbc1f22ea6d360c54bf","title":"Add Person Records or Roles","path":"/lrsiem/7.21.0/add-person-records-or-roles","children":[]},{"id":"ci_1e8e8a4830c31f420c15240ab3f297e5039734b557545cded5dd94a072999568","title":"Assign Active Directory Credentials to Local Users","path":"/lrsiem/7.21.0/assign-active-directory-credentials-to-local-users","children":[]},{"id":"ci_d884d73ed0ed9b3ede33b981fc3ae2af930539a5e80ed17df264ebc7ce73c2cf","title":"Create User Accounts for Person Records or Roles","path":"/lrsiem/7.21.0/create-user-accounts-for-person-records-or-roles","children":[]},{"id":"ci_5c7a6a28336b722d00c358addbf549a3e2a14b3c064b4a57ca360492ad1ff758","title":"Direct Requests to the Case API URL","path":"/lrsiem/7.21.0/direct-requests-to-the-case-api-url","children":[]},{"id":"ci_576e5da87a308bf638944cafde34b8a375269be3343053f74d2af45d196ea71e","title":"Disable Person Records or Roles","path":"/lrsiem/7.21.0/disable-person-records-or-roles","children":[]},{"id":"ci_834fe479082f000890e40a0b1befce6de983657a37a93d1444db4783cd3fcaf6","title":"Modify Logins for Person Records or Roles","path":"/lrsiem/7.21.0/modify-logins-for-person-records-or-roles","children":[]},{"id":"ci_6c67305b91115341909320923f9807006a66206a8927735142e5688d4f7a5557","title":"Modify Person Records or Roles","path":"/lrsiem/7.21.0/modify-person-records-or-roles","children":[]},{"id":"ci_f648a5d39a67431583ae552359ddb8c77146b9b6654d9e07b6bafbb44e1ccbd2","title":"Rename LogRhythm Users","path":"/lrsiem/7.21.0/rename-logrhythm-users","children":[]},{"id":"ci_02e69f4daddead03453aef876a9008d1e0c2440813228358b9b8a12e28cb42e5","title":"Reset Multi-Factor Authentication Access to the Web Console","path":"/lrsiem/7.21.0/reset-multi-factor-authentication-access-to-the-web-console","children":[]},{"id":"ci_e0650d547a3458e6106d9ad665e412f6f37b9584a4726d4c1a625a6b4a7c288d","title":"User Profile Manager","path":"/lrsiem/7.21.0/user-profile-manager","children":[{"id":"ci_0307158472b6b0633d322dd00ea4b0d8ef10cfb970ab97107c7aab65d4f0d6bc","title":"Create a New User Profile","path":"/lrsiem/7.21.0/create-a-new-user-profile","children":[]},{"id":"ci_880d6f2c862180c3c76a6deea110e6ddf38bd4e3f6648edc42a9160a44be414e","title":"Manage User Profile SmartResponse Access Rights","path":"/lrsiem/7.21.0/manage-user-profile-smartresponse-access-rights","children":[]},{"id":"ci_e76ca7d937a5d5716f0f1bb5e8e63600d25278d98750366b57ec5c73d0d897fc","title":"Modify User Profile Data Processor Access Rights","path":"/lrsiem/7.21.0/modify-user-profile-data-processor-access-rights","children":[]},{"id":"ci_8ded6fef09fad14428eac2c1dbd5f3df21b7aebbe05dcec89e752421b477c263","title":"Modify User Profile Effective Log Sources Settings","path":"/lrsiem/7.21.0/modify-user-profile-effective-log-sources-settings","children":[]},{"id":"ci_7fe2d753e34a30a0628010f6522daee7ecebd5acb0f518592a1fb3bbcdd5fdac","title":"Modify User Profile Entities Settings","path":"/lrsiem/7.21.0/modify-user-profile-entities-settings","children":[]},{"id":"ci_03b3e59209ab6220fdb82569b4db0063bef6fc24f8de6cc641c46b86f1c7af2e","title":"Modify User Profile General Settings","path":"/lrsiem/7.21.0/modify-user-profile-general-settings","children":[]},{"id":"ci_106947f68c71be95397758d811afc746c242371269b38de15ff49e97794b59e3","title":"Modify User Profile Log Sources Access Rights","path":"/lrsiem/7.21.0/modify-user-profile-log-sources-access-rights","children":[]},{"id":"ci_855d128ece7908c1f9067a5348d60f9118faa921bcfe17ed5f6a7d988892a0c8","title":"Manage User Profile Notification Group Access Rights","path":"/lrsiem/7.21.0/manage-user-profile-notification-group-access-rights","children":[]},{"id":"ci_e4454dfc708fceba1bf3cb21ba64cc9d612bda1ae0ef6ab697e99de4de6af681","title":"Modify User Profile Management Permissions","path":"/lrsiem/7.21.0/modify-user-profile-management-permissions","children":[]}]}]},{"id":"ci_0d06a5480e534a0c3bef97375c9addc47158b8812ba014236c8f3083604b2a0a","title":"Platform Manager","path":"/lrsiem/7.21.0/platform-manager","children":[{"id":"ci_63348ae43790300c682b0bc0acaf49b3b271fee97ebaab33a27fc32971d05f77","title":"Alarming, Reporting, and Response Manager Services","path":"/lrsiem/7.21.0/alarming-reporting-and-response-manager-services","children":[{"id":"ci_bdd372e4ef28ef70c9ace508865a9769652ba93a6975cd10cf674408b0cfbb62","title":"Apply Recommended Platform Manager Values","path":"/lrsiem/7.21.0/apply-recommended-platform-manager-values","children":[]},{"id":"ci_5286270bf3d517c95320790b84f43df61c6bfa9b4564284affddb796d209d3b9","title":"Integrate LogRhythm and McAfee ePolicy Orchestrator","path":"/lrsiem/7.21.0/integrate-logrhythm-and-mcafee-epolicy-orchestrator","children":[]},{"id":"ci_6d67e4a0dfee91e16219e22240c3f9aa95addc27f67639ee571c56706b128bab","title":"Modify Platform Manager Advanced Properties","path":"/lrsiem/7.21.0/modify-platform-manager-advanced-properties","children":[]},{"id":"ci_556dad3728fd05461cd7b061d8c600a0d62925ec7fffd429587783595178da6c","title":"Modify Platform Manager Basic Properties","path":"/lrsiem/7.21.0/modify-platform-manager-basic-properties","children":[]},{"id":"ci_b41c8d145b6ae21ca3f48ba3a10b6b4d9bcbdabf44066601c014f6eb63df8252","title":"Revert to a Previous Platform Manager Configuration","path":"/lrsiem/7.21.0/revert-to-a-previous-platform-manager-configuration","children":[]},{"id":"ci_a2be18a966d6022484b43e965e9244966e2ea997c145e229fb7c86153f2e5bf0","title":"Specific SMTP Servers to Allow for Failover","path":"/lrsiem/7.21.0/specific-smtp-servers-to-allow-for-failover","children":[]},{"id":"ci_200d198971fab2b05a8e38b8768e48f8d5ed82825a948b53e093f92c0dfeb89e","title":"Start, Stop, and Restart Platform Manager Services","path":"/lrsiem/7.21.0/start-stop-and-restart-platform-manager-services","children":[]}]},{"id":"ci_3f9432274c2ad1681d23aebdb20bf80ef8dd09626b9b41761a15142fbfcdd86b","title":"Global Risk Based Priority","path":"/lrsiem/7.21.0/global-risk-based-priority","children":[{"id":"ci_f8cd7d633631c44154ccdc015ed42daafab0bfcd59b9f6ac195fafee95ef0863","title":"Determine the MPE RBP Manually","path":"/lrsiem/7.21.0/determine-the-mpe-rbp-manually","children":[]},{"id":"ci_a1944b98f260a2a5a994bc79e232601bca7f23a0b7bd80d6f2592150eb8a765c","title":"Modify AIE Risk Based Priority Settings","path":"/lrsiem/7.21.0/modify-aie-risk-based-priority-settings","children":[]},{"id":"ci_513cf75b6f99aacd041bd5f7fd1a5f5d3468b108748c93eeff8e468a7b858a83","title":"Modify the Default Destination Risk Level","path":"/lrsiem/7.21.0/modify-the-default-destination-risk-level","children":[]},{"id":"ci_ff3212af8556ea5962144ec082c873f78006ae32cf0260fd451e1a5bb53a4e43","title":"Modify the Default Source Threat Level","path":"/lrsiem/7.21.0/modify-the-default-source-threat-level","children":[]},{"id":"ci_4cb1b1d033ff7a82ee7cf8788ce4467077153b71dbfc51aed5b28f026a291065","title":"Modify the MPE Risk Based Priority Settings","path":"/lrsiem/7.21.0/modify-the-mpe-risk-based-priority-settings","children":[]},{"id":"ci_c4b5dec3e1f408fd749ae098176637142618737a1eab8f49eaa7bb2ab5fd071f","title":"Risk Based Priority Calculator","path":"/lrsiem/7.21.0/risk-based-priority-calculator","children":[{"id":"ci_764f3a109139c05d5292652608a9accd99dae39cd0643615f2d10005d67277a6","title":"Install the RBP Calculator","path":"/lrsiem/7.21.0/install-the-rbp-calculator","children":[]},{"id":"ci_859b92bd1501c67196a600f35ff81898507c51e5baecc8170e698be7a9c9bacd","title":"Determine MPE or AIE Risk Based Priority With The RBP Calculator","path":"/lrsiem/7.21.0/determine-mpe-or-aie-risk-based-priority-with-the-rbp-calculator","children":[]},{"id":"ci_0509f86be5d6a9040e198a1653a6a0ff9d8eb5fcd369d45e7934691a16b675b0","title":"Transfer AIE RBP Calculator Values to a LogRhythm Deployment","path":"/lrsiem/7.21.0/transfer-aie-rbp-calculator-values-to-a-logrhythm-deployment","children":[]},{"id":"ci_c1d0f0d4cd07583822a7ccd34fdc056c330e39392640647c6a243ef8ade6d3e2","title":"Host, Network, and Default DRL and STL Settings","path":"/lrsiem/7.21.0/host-network-and-default-drl-and-stl-settings","children":[{"id":"ci_471825d989a5989a833ee44d601561bb277a764234fa24012f4e35f7b1fda42c","title":"Known Host and Network Search Algorithm","path":"/lrsiem/7.21.0/known-host-and-network-search-algorithm","children":[]}]},{"id":"ci_53c3567433961b55097bcd6f20811c5ecf9c0a2e862d7bc95b8154a2e9dfd3a0","title":"Message Processing Engine RBP Algorithm","path":"/lrsiem/7.21.0/message-processing-engine-rbp-algorithm","children":[]},{"id":"ci_490571dc93c65ca022a57b377902bce19a3d8150e86bef26ccb9f24b4934a649","title":"AI Engine RBP Algorithms","path":"/lrsiem/7.21.0/ai-engine-rbp-algorithms","children":[]}]}]},{"id":"ci_4f59a62581b91d9e96a5993f834839a67e7af062abd521f48169d8d53c16c04f","title":"Job Manager Services","path":"/lrsiem/7.21.0/job-manager-services","children":[{"id":"ci_805d43f6b93736a70ab4803442686aca28ed3dd43e2a5bfdd03c9005a9ecc95b","title":"Modify Job Manager Advanced Properties","path":"/lrsiem/7.21.0/modify-job-manager-advanced-properties","children":[]},{"id":"ci_aa33e191c870e061db5dbcbbc7c4fe8d99e3123d3cc0ce98f6ddf4933a8d3095","title":"Modify Job Manager Basic Properties","path":"/lrsiem/7.21.0/modify-job-manager-basic-properties","children":[]},{"id":"ci_95205266f2eb7ab82b73f3fc618a465d6706e8e3477d6843448e98d04fd10ba1","title":"Start, Stop, and Restart Job Manager Services","path":"/lrsiem/7.21.0/start-stop-and-restart-job-manager-services","children":[]},{"id":"ci_ee0e91d1e32ad49c068e671ce70f693facc703eca650328c2b82a3d75c9fa578","title":"Use the Job Manager Configuration Manager","path":"/lrsiem/7.21.0/use-the-job-manager-configuration-manager","children":[]}]},{"id":"ci_043401b06bad4cc229866e633242caf782e1a5992781320932cf2185e7410d61","title":"System Management Settings","path":"/lrsiem/7.21.0/system-management-settings","children":[{"id":"ci_4658b98711ee91e43b5e78f7cf754188f7842c5145ef4b73265c88757256f3e7","title":"Active Directory Domain Manager","path":"/lrsiem/7.21.0/active-directory-domain-manager","children":[{"id":"ci_61632ed418e083f94ab0726832123e01ad7d762ae7d5bc92ffa2e239b3bbd417","title":"Add Active Directory Groups as Filters","path":"/lrsiem/7.21.0/add-active-directory-groups-as-filters","children":[]},{"id":"ci_4e97826af2707d45928d201a713e88de2dcae4de3ddf508c22766ba95388df3e","title":"Add New Active Directory Domains","path":"/lrsiem/7.21.0/add-new-active-directory-domains","children":[]},{"id":"ci_cfa922d1be5ca13b1f1fd54058f30297cb9cc393429d769df077f2b5b4f39e6c","title":"Check the Active Directory Synchronization Status","path":"/lrsiem/7.21.0/check-the-active-directory-synchronization-status","children":[]},{"id":"ci_29be8cf26993e95ff052003125d28c7ac0afa796ae2b2a33a4ed1216e72c8f5f","title":"Modify Active Directory Domains","path":"/lrsiem/7.21.0/modify-active-directory-domains","children":[]},{"id":"ci_63917f9b04261a87a626a8b92a10226c5b38b6dd98fe09f5beb3ffc1e1ada88f","title":"Retire or Activate Active Directory Domains","path":"/lrsiem/7.21.0/retire-or-activate-active-directory-domains","children":[]},{"id":"ci_1688c40faa1500b7e8b2f8c2a1ffe723057fec555d80c2d0ecd6997ce10107f7","title":"Run Active Directory Browser Investigations","path":"/lrsiem/7.21.0/run-active-directory-browser-investigations","children":[]}]},{"id":"ci_10ed07fc17719ba3c512e09379a8f05cff06c4ef846bcc17850b606d13d6c833","title":"Configure Global Maintenance Settings","path":"/lrsiem/7.21.0/configure-global-maintenance-settings","children":[]},{"id":"ci_8bf48490fbda02658ee5a193dfdfb89116db0b800551fcbd8b4186357c2b1bd8","title":"Set or Modify Data Management Settings","path":"/lrsiem/7.21.0/set-or-modify-data-management-settings","children":[]},{"id":"ci_b3f09ca2cf166319e7de0b25f381ab9a60c4908e62cf3a5ec711ac8c4dc8e416","title":"Enable Intelligent Indexing Globally","path":"/lrsiem/7.21.0/enable-intelligent-indexing-globally","children":[]}]},{"id":"ci_ce80aba7632104cfc356ec29508c01f5ccd1a55cae776c814354a2c6a2f5a587","title":"Update the IP Address of the Platform Manager","path":"/lrsiem/7.21.0/update-the-ip-address-of-the-platform-manager","children":[]},{"id":"ci_8fbc54dc8e63796e9fa905ca1d8ac2f3f9834ec5ed9df6ab2046bc2bca9f21c3","title":"Use the Platform Manager Configuration Manager","path":"/lrsiem/7.21.0/use-the-platform-manager-configuration-manager","children":[]}]},{"id":"ci_ade401be0eb3bc5e8a04c983dd4245d26fad1550c44cd02a46de4553a79b7e0a","title":"SmartResponse","path":"/lrsiem/7.21.0/smartresponse","children":[{"id":"ci_159d79fe600b313e6ebf735571fd00ff2f36b6c84b7ccfeadfa58a6269eea563","title":"Approve or Deny SmartResponse Actions in the Client Console","path":"/lrsiem/7.21.0/approve-or-deny-smartresponse-actions-in-the-client-console","children":[]},{"id":"ci_cbacac67271438083bbcde4152e23a8fcd3c3465a3a0fd3f144a27531085d079","title":"Develop SmartResponse Plugins","path":"/lrsiem/7.21.0/develop-smartresponse-plugins","children":[{"id":"ci_a5c6f44c2c6d5f08e62c8ef796a3989fc794b4d2dfbad288370aad05fcab7043","title":"Create the Payload","path":"/lrsiem/7.21.0/create-the-payload","children":[]},{"id":"ci_ae86ace94d6e79c223e557a4aa07409d67f1aaf9e6cbd44ebcd4426ae829af88","title":"Create the Configuration File","path":"/lrsiem/7.21.0/create-the-configuration-file","children":[]},{"id":"ci_e477b0988a961c769129523818ee277313e1bbd62da49de10026b0466718b43f","title":"Package and Test the SmartResponse","path":"/lrsiem/7.21.0/package-and-test-the-smartresponse","children":[]},{"id":"ci_553602eed318efe1007dac15398ba8e4232ace8f7138b8570fa99cfbb055e9ee","title":"Deploy Custom SmartResponse Plugins","path":"/lrsiem/7.21.0/deploy-custom-smartresponse-plugins","children":[]}]},{"id":"ci_aac38dc2fa5174c50ad4da4e28c5707674f4f9afc2c2f56328034057ea0c2350","title":"Import SmartResponse Plugins","path":"/lrsiem/7.21.0/import-smartresponse-plugins","children":[]},{"id":"ci_3baecceb78d82bb4314a1757b74e8fef43c86307acc15b1ccd4ef5a7d849e01e","title":"Initiate SmartResponse","path":"/lrsiem/7.21.0/initiate-smartresponse","children":[]},{"id":"ci_bd71ce04bbff3372a22a9dd6615d28d0a78d2e69cc9990416143051bdaa4bb30","title":"Preview SmartResponse Command Execution","path":"/lrsiem/7.21.0/preview-smartresponse-command-execution","children":[]},{"id":"ci_290506544db70773c5ee9a9c65680a377e316eefe358b733bf5e8139174c5671","title":"Test SmartResponse Plugin Actions","path":"/lrsiem/7.21.0/test-smartresponse-plugin-actions","children":[]},{"id":"ci_fa450ca641354383836722f9221c4a463ff455629be544f6320d30076dd3fe71","title":"Troubleshoot SmartResponse Action Testing","path":"/lrsiem/7.21.0/troubleshoot-smartresponse-action-testing","children":[]},{"id":"ci_a6d26e4cf100f8cf3a7b3111c60323c5d4a774f5f1edd5483743c7c67e8c9fcc","title":"Validate SmartResponse Plugins","path":"/lrsiem/7.21.0/validate-smartresponse-plugins","children":[]}]},{"id":"ci_4932f22c39398cc05e8ab2fa8d0f74bf7a421aa89bad061a64b70c2e2a910175","title":"System Monitor","path":"/lrsiem/7.21.0/system-monitor","children":[{"id":"ci_fe33ae35cd9534e518db0fe6a9c69e4b9cbb1bd57d8aedbb05fc5f4dff3209af","title":"Agent Identification and Acceptance","path":"/lrsiem/7.21.0/agent-identification-and-acceptance","children":[{"id":"ci_8cdcbf8fd601fbca4fc15b33e8794f2be6e53dcb10d08bc8bb2589d86fd1e662","title":"Accept a New System Monitor","path":"/lrsiem/7.21.0/accept-a-new-system-monitor","children":[]},{"id":"ci_a9c1ab47a886d42f0d98ed1aa2691a3805f848448c6998ee596632344793239d","title":"Associate a System Monitor Agent","path":"/lrsiem/7.21.0/associate-a-system-monitor-agent","children":[]},{"id":"ci_74c63ac571dc3b8fd6f3af0a045e404a5726f998504e72ddf8bc12372f265818","title":"Work With New System Monitors","path":"/lrsiem/7.21.0/work-with-new-system-monitors","children":[]}]},{"id":"ci_d0713959382666b4678e3a97c011f59b5519187cd267f99a1d847a1bc27977bd","title":"NetFlow, IPFIX, and J-Flow Collection","path":"/lrsiem/7.21.0/netflow-ipfix-and-j-flow-collection","children":[{"id":"ci_0287e1ee395630ba81c3240fa3b5f5d13a98279ee88811b252f49bffec0474a0","title":"Configure a Device or Host for NetFlow, IPFIX, or J-Flow Collection","path":"/lrsiem/7.21.0/configure-a-device-or-host-for-netflow-ipfix-or-j-flow-collection","children":[]},{"id":"ci_3f29ee904985d458df8260ec6fcd8b345ea3a0465414a26e05e8dbc12865057b","title":"Customize IPFIX Logs","path":"/lrsiem/7.21.0/customize-ipfix-logs","children":[]}]},{"id":"ci_5017d96675b5bf1dfd654f42401707098f11790a6de1b6ef2728ccf51ecd992f","title":"Work With System Monitor Agents","path":"/lrsiem/7.21.0/work-with-system-monitor-agents","children":[{"id":"ci_6df5b2162e403ea56f2da173d19a58f5c74969c15ac9302a2bac8aa252e4581a","title":"Add System Monitors","path":"/lrsiem/7.21.0/add-system-monitors","children":[]},{"id":"ci_1b28d364563715c535355fd5620175b74122f720f4e0e0c7ba6f493b1dc7fb11","title":"Configure the scsm Service","path":"/lrsiem/7.21.0/configure-the-scsm-service","children":[]},{"id":"ci_5d830acbc448106aab6a86f63decf10dbc69c53d46aac46fcff6a71dcd3120c5","title":"Connect System Monitor Agents to Different Entities","path":"/lrsiem/7.21.0/connect-system-monitor-agents-to-different-entities","children":[]},{"id":"ci_f98b1c2cadbd9d434511ee8b95f99471bafec6b872fcc87a6e4952f25e2585af","title":"Connect System Monitor Agents to New Data Processors","path":"/lrsiem/7.21.0/connect-system-monitor-agents-to-new-data-processors","children":[]},{"id":"ci_e79cbec851c4429b132cf2f87759e45a166931b695deb767ba29926cc783c60d","title":"Connect System Monitor Agents to Existing Data Processors","path":"/lrsiem/7.21.0/connect-system-monitor-agents-to-existing-data-processors","children":[]},{"id":"ci_10b9489f3d7e69fedef58e096cd5421c713ed64f2ae7102e43aa52fdbd8168a5","title":"Data Processor Pooling","path":"/lrsiem/7.21.0/data-processor-pooling","children":[{"id":"ci_09e6a0a45d4cc33ad6f3d1b588f0ad9904bb6fff1524f429109df9a9f8e601c0","title":"Data Processor Pool Manager","path":"/lrsiem/7.21.0/data-processor-pool-manager","children":[]},{"id":"ci_4a26c43ab0ad3418d6211324ab4a91d8aa7a4794223f168712579fb37fecce7b","title":"Assign a Data Processor to a DP Pool","path":"/lrsiem/7.21.0/assign-a-data-processor-to-a-dp-pool","children":[]},{"id":"ci_aa2113bf66fe3eb6906900c0e85b6659ec17ff7048dca7948d285841bfa07329","title":"Remove a Data Processor from a DP Pool","path":"/lrsiem/7.21.0/remove-a-data-processor-from-a-dp-pool","children":[]},{"id":"ci_4513d201368a8fe27df16211d570d76c3e68ac70fa547d68ba6a0f241fea3a4a","title":"Configure a System Monitor Agent into DP Pool Mode","path":"/lrsiem/7.21.0/configure-a-system-monitor-agent-into-dp-pool-mode","children":[]},{"id":"ci_c8ebec36a2be7876fd72109767d94da98490f296d0ff222c586f1889466c7513","title":"Edit System Monitor Data Processor Settings","path":"/lrsiem/7.21.0/edit-system-monitor-data-processor-settings","children":[]},{"id":"ci_e98fc39c244f566abea21cda844d9f5680e09925d652d02993fa2bc940da8a84","title":"Assign a DP Pool to a System Monitor Configuration Policy","path":"/lrsiem/7.21.0/assign-a-dp-pool-to-a-system-monitor-configuration-policy","children":[]}]},{"id":"ci_357b033f6ed46061eeda0f7184e6898d12d6934ace7bbcb8aac158bd63457c93","title":"License System Monitors","path":"/lrsiem/7.21.0/license-system-monitors","children":[]},{"id":"ci_03228a7ffd4e46796d4273d7f328fce837b2582d5ce8fbca456f2bf663b5d472","title":"Load Balanced Agent Groups","path":"/lrsiem/7.21.0/load-balanced-agent-groups","children":[{"id":"ci_9bc99f285ea86ef362814815d4401f34dc862cf6fcacd24cc3fcd0c622894f50","title":"Load Balanced Group Manager","path":"/lrsiem/7.21.0/load-balanced-group-manager","children":[]},{"id":"ci_a9abb6059d163698eb714d809556d9be4799734fbd214b63c4a1f507fe28698a","title":"Assign Agents to a Load Balanced Group","path":"/lrsiem/7.21.0/assign-agents-to-a-load-balanced-group","children":[]}]},{"id":"ci_504382028aaec143155108f29e39a14eb20e3e697adb1cce42db3841f65ec954","title":"Modify System Monitor Basic Properties","path":"/lrsiem/7.21.0/modify-system-monitor-basic-properties","children":[]},{"id":"ci_21380974e7d1cda2c30287b472e86ca54a5cee7533139c4fef5031ff0be3e03f","title":"Modify System Monitor Advanced Properties","path":"/lrsiem/7.21.0/modify-system-monitor-advanced-properties","children":[]},{"id":"ci_1231fb75eac8ea7ab4d15f1899b68da439d1317093a0d2e40f69a43e8773ebd8","title":"Modify Properties of Multiple System Monitor Agents","path":"/lrsiem/7.21.0/modify-properties-of-multiple-system-monitor-agents","children":[]},{"id":"ci_d167ebee602ace5eeda5a98ab8ab3357e9762b314b43e9d76655475538f27650","title":"Modify System Monitors","path":"/lrsiem/7.21.0/modify-system-monitors","children":[]},{"id":"ci_35603ce564cdf505c959b08eb1a083bc82fa20537f08125d3aa216dc61a500ef","title":"Configure a Secure Syslog Agent","path":"/lrsiem/7.21.0/configure-a-secure-syslog-agent","children":[]},{"id":"ci_fb975d94c6db80bce50979bc0de6771d8e3ddf43280e69fd04f4b03249655ae0","title":"Retire or Activate System Monitor Agents","path":"/lrsiem/7.21.0/retire-or-activate-system-monitor-agents","children":[]},{"id":"ci_9d114cb57f1471109b6bd88675e62d0cfb30d97ebd15f0ce65c4d388f43edfcc","title":"Revert System Monitor Agents to Previous Configurations","path":"/lrsiem/7.21.0/revert-system-monitor-agents-to-previous-configurations","children":[]},{"id":"ci_f82cdb56e796d22726ab69529750d396946f591d4cf7fd4812c34cb979799e2a","title":"Startup and Shutdown System Monitors on Linux","path":"/lrsiem/7.21.0/startup-and-shutdown-system-monitors-on-linux","children":[]},{"id":"ci_714ab70ce62a7143abf897302eac52fffe8f7b0ba6ba7dd79e6eb3b239996c11","title":"Stop, Start, and Restart Agent Services on Windows","path":"/lrsiem/7.21.0/stop-start-and-restart-agent-services-on-windows","children":[]},{"id":"ci_020011d3a847f39b61c5972097a577014f2dfb49c01aa896a7dab22ce9164818","title":"Generic JSON Collector","path":"/lrsiem/7.21.0/generic-json-collector","children":[]}]},{"id":"ci_ef02ea28d89cf8545acb6e651021576e84fa043b1b782e3ca0133a25955bb4af","title":"Register Agent to Host with Duplicate Name","path":"/lrsiem/7.21.0/register-agent-to-host-with-duplicate-name","children":[]},{"id":"ci_9cca380dc2e74f63f7449f78862504bca1ca617f80c220dfc72b192be5517f2a","title":"sFlow Collection","path":"/lrsiem/7.21.0/sflow-collection","children":[{"id":"ci_65dd10f6edaa167856331ba3572021e2701df0ce26248b1775aedec92b3c95a6","title":"Configure a Device or Host for sFlow Collection","path":"/lrsiem/7.21.0/configure-a-device-or-host-for-sflow-collection","children":[]}]},{"id":"ci_6a890dac0456675d64c51369b0afed35a8101ac338239263ea97d3a3ecb92a47","title":"SNMP Trap Receivers","path":"/lrsiem/7.21.0/snmp-trap-receivers","children":[{"id":"ci_0a790d3a7a1dd6ab1719ab93997aa2ab005acb850ce521ee1f70f7528216071f","title":"Configure a System Monitor for SNMP Trap Receiver","path":"/lrsiem/7.21.0/configure-a-system-monitor-for-snmp-trap-receiver","children":[]}]},{"id":"ci_56e17e71518cffab659cfc1649f8084306d4449765306394e232a8671a59ccf1","title":"Syslog Collection","path":"/lrsiem/7.21.0/syslog-collection","children":[{"id":"ci_fc01efa814448b77773cadf2a2a3d5fb5c6f697df04fad6f72786f7897f530bc","title":"Configure a Device or Host for Syslog Collection","path":"/lrsiem/7.21.0/configure-a-device-or-host-for-syslog-collection","children":[]}]},{"id":"ci_253192177db664eb13caf9c50331a0bf628ea46d50e881b1f48be3ce7af41333","title":"System Monitor Configuration Policy Manager","path":"/lrsiem/7.21.0/system-monitor-configuration-policy-manager","children":[{"id":"ci_4fa095f6a8098e64b16d03b8418de20d475291029ac7ac13bbc5257bd6e88e68","title":"Apply System Monitor Configuration Policies","path":"/lrsiem/7.21.0/apply-system-monitor-configuration-policies","children":[]},{"id":"ci_59134985c558edea5eb7f9340435be35b57b7df351409d801d7082eeba9fa815","title":"Assign Configuration Policies to Multiple System Monitor Agents","path":"/lrsiem/7.21.0/assign-configuration-policies-to-multiple-system-monitor-agents","children":[]},{"id":"ci_bfb665838c8274756e06f573a61917c8f93cb51843f46a70e3afc8d92923ee1d","title":"Create New System Monitor Configuration Policies","path":"/lrsiem/7.21.0/create-new-system-monitor-configuration-policies","children":[]},{"id":"ci_b0bd33bc37b5eba312a0afaf7845a8d81a5ccc8b8d3bc11983086dbf54a23ed5","title":"Delete System Monitor Configuration Policies","path":"/lrsiem/7.21.0/delete-system-monitor-configuration-policies","children":[]},{"id":"ci_e3d68630281fb5776fea7826bacb73c8461560e420635c46ab540f3f0ec27fae","title":"Modify Configuration Policies on System Monitor Agents","path":"/lrsiem/7.21.0/modify-configuration-policies-on-system-monitor-agents","children":[]},{"id":"ci_2f2106ac30a241a4b7ca1a23a77e93d0696fedf34832a3c7cdc9a6a0c90d6f02","title":"Modify System Monitor Configuration Policies","path":"/lrsiem/7.21.0/modify-system-monitor-configuration-policies","children":[]}]},{"id":"ci_db389e29e0a33a658eec0640697e0dba2e382fe85c6c0ff9be774f3075e10c2a","title":"Unidirectional Windows Agent Settings","path":"/lrsiem/7.21.0/unidirectional-windows-agent-settings","children":[{"id":"ci_0b540cb6ec7de39aaa1970af90bce5bfb806f08cbbc89684a3829d1fed1e2598","title":"Confirm a SysMon Agent is Sending Logs","path":"/lrsiem/7.21.0/confirm-a-sysmon-agent-is-sending-logs","children":[]},{"id":"ci_9be90d948238299e3a71ae60930683106ff96765969a593874388ebb6ebec0d9","title":"Copy the System Monitor Agent Configuration File to the Agent Machine","path":"/lrsiem/7.21.0/copy-the-system-monitor-agent-configuration-file-to-the-agent-machine","children":[]},{"id":"ci_90d1ebe4234dec22f555bc27bf769d4606755f063b22ad0ffd6418af92824124","title":"Enable the Unidirectional Feature on the Data Processor","path":"/lrsiem/7.21.0/enable-the-unidirectional-feature-on-the-data-processor","children":[]},{"id":"ci_aa1d65a33052da7eb5919abe29bc4a549e5a39417999d20d0552a5a90dbfe419","title":"Enable the Unidirectional Feature on the System Monitor Agent","path":"/lrsiem/7.21.0/enable-the-unidirectional-feature-on-the-system-monitor-agent","children":[]},{"id":"ci_abfb85f140d926f3f343d0e1e6109582a43d1ae69cc669f9da9a9626f94d49fa","title":"Export the System Monitor Agent's Local Configuration File","path":"/lrsiem/7.21.0/export-the-system-monitor-agent-s-local-configuration-file","children":[]}]},{"id":"ci_2de8d2a40d458c7fa81c9fd3cbaf719fc6530a321cfa20d50075416e5034e8ac","title":"Windows Event Log Collection","path":"/lrsiem/7.21.0/windows-event-log-collection","children":[{"id":"ci_c09856eb9e9b1a83512f759c8bcd22ce8e6b73625d509230bc65eae60638d346","title":"Collect Non-Domain Logs Remotely","path":"/lrsiem/7.21.0/collect-non-domain-logs-remotely","children":[]},{"id":"ci_8a578cef304a2476718f8b6dc69d70d20dfbd792fb9877769a111ee92c82dca0","title":"Create a Least-Privileged Domain User Account for Remote Log Collection","path":"/lrsiem/7.21.0/create-a-least-privileged-domain-user-account-for-remote-log-collection","children":[]},{"id":"ci_e03ba31b28836c7180e8868d78321d5d198e3d07d2deccad0f917356b2f18b54","title":"Set Up Remote Log Collection","path":"/lrsiem/7.21.0/set-up-remote-log-collection","children":[]}]}]}]},{"id":"ci_919c9935ba47b3f3422192dbd1b723451afc049d41a7ebd1e9557909c0eb9773","title":"Client Console Analyst Guide","path":"/lrsiem/7.21.0/client-console-analyst-guide","children":[{"id":"ci_f70486464c0da0c2f859b8c7d6618c77cd4d781a5a8efc11546d4aef95f2025f","title":"Filters and Wizards","path":"/lrsiem/7.21.0/filters-and-wizards","children":[{"id":"ci_31fa00a3b8a36c31e454cbea14bfeb7c6fa9910fc7aa8f17758688f730837382","title":"Use Filter Modes","path":"/lrsiem/7.21.0/use-filter-modes","children":[]},{"id":"ci_6e2a4d1f8226f356557aa6a5abd040e84d21fe722cd8ebd13ecc8c5162e51cc3","title":"Use Lists with Filters","path":"/lrsiem/7.21.0/use-lists-with-filters","children":[]},{"id":"ci_4e677604c0580d9f6300f1bbfefc4670ddb1246a7c7bede82be89553286754e4","title":"Use Multiple Filters","path":"/lrsiem/7.21.0/use-multiple-filters","children":[]},{"id":"ci_9d0d0da05183d0a2d45db75f85a7a02476725322b9ac7bb41d7552c3e06d0f8b","title":"Use Multi-Type Filters","path":"/lrsiem/7.21.0/use-multi-type-filters","children":[]},{"id":"ci_5e1d15ae8969fc9cfd2d557b50646c09cc5a762972a3ce0f9ecc6a56cfb59cc1","title":"Use Search Strings with Filters","path":"/lrsiem/7.21.0/use-search-strings-with-filters","children":[]},{"id":"ci_aec8cd1a83b2620b8423c08c7f7d21d471cd01147774c4d5e07fac24651ca2f3","title":"Use SQL Pattern Match with Filters","path":"/lrsiem/7.21.0/use-sql-pattern-match-with-filters","children":[]},{"id":"ci_01b09fd904ceea59c4e3ff86d0e355c5caf7de810ac51ac3e961ba0f865adac3","title":"Use the Filter Editor","path":"/lrsiem/7.21.0/use-the-filter-editor","children":[{"id":"ci_a20228b410d868e1b812648bb255a85eff6e5e0d40705ecd4c2e5bdae4967769","title":"Filters—Action","path":"/lrsiem/7.21.0/filtersaction","children":[]},{"id":"ci_2b61d61333721e3100fd145f18548d475a27b6ff266f2adbca5f2ce03ef5868b","title":"Filters—Aggregation","path":"/lrsiem/7.21.0/filtersaggregation","children":[]},{"id":"ci_259c5e7633dc83e70fc43e27901b369dbb7405711478fd5585707bba0488fc86","title":"Filters—AIE Summary Fields","path":"/lrsiem/7.21.0/filtersaie-summary-fields","children":[]},{"id":"ci_3293ecaecc6e3bdb8479b019e223cdb87a15fdba7b38e6329d8c19c1a1490197","title":"Filters—Data Fields","path":"/lrsiem/7.21.0/filtersdata-fields","children":[]},{"id":"ci_28f003f8ad181043e5399a3314a617d838418c9586d83fcdadea5204ed165a34","title":"Filters—Day and Time Criteria","path":"/lrsiem/7.21.0/filtersday-and-time-criteria","children":[]},{"id":"ci_d7c052ca42af4fa0b3fbe0a45f40a59e6a4f424e56c56d06fda671754a9a9bc6","title":"Filters—Distinct","path":"/lrsiem/7.21.0/filtersdistinct","children":[]},{"id":"ci_0d011ce479712964d8af94e26b56e541921b4216a1f14f85b8e568f2f0176508","title":"Filters—Exclude Filter","path":"/lrsiem/7.21.0/filtersexclude-filter","children":[]},{"id":"ci_385b726b76bc7e6d56522fdbf732f7bd11cce913be4363cfd88b3ccbfe1b53fc","title":"Filters—Expressions","path":"/lrsiem/7.21.0/filtersexpressions","children":[]},{"id":"ci_7ab62d55453059fe874381f65f7d49876e0f221321c1dc05193d68caacb8da92","title":"Filters—Group By","path":"/lrsiem/7.21.0/filtersgroup-by","children":[]},{"id":"ci_8eb48b68063fb5e62ac82efe6428297ffea202a28490f21a4393da0c80da7e56","title":"Filters—Include Filter","path":"/lrsiem/7.21.0/filtersinclude-filter","children":[]},{"id":"ci_e927f90cb8065431cc09147694904cd06929ad3e46078e2b061d93a427636e1c","title":"Filters—Information","path":"/lrsiem/7.21.0/filtersinformation","children":[]},{"id":"ci_d986eb1d530a69ac97f1ca86c5ddb6f66c3ca230115136b3c09e047029a7706c","title":"Filters—Log Source Criteria","path":"/lrsiem/7.21.0/filterslog-source-criteria","children":[]},{"id":"ci_629a353f7ea1bfa252543a476ca946ebf2fc301c74c35c96e09717deb9013830","title":"Filters—Notify","path":"/lrsiem/7.21.0/filtersnotify","children":[]},{"id":"ci_dbc7aaa0ac62dfafd3502f2e69abd8ab91b9d9e795cc4273e1c88e008e69ac06","title":"Filters—Primary Criteria","path":"/lrsiem/7.21.0/filtersprimary-criteria","children":[]},{"id":"ci_87aea6207532d31183cfe16e4d4314acf0c51530700581558d62bdf18caf27d6","title":"Filters—Profile","path":"/lrsiem/7.21.0/filtersprofile","children":[]},{"id":"ci_d92a33b9f26dbd712ad2c064bff055061ea6bc8474cb938c1aa450e101e96e29","title":"Filters—Schedule","path":"/lrsiem/7.21.0/filtersschedule","children":[]},{"id":"ci_838bc9012cf00d121040539374c622686acfdd57842a0c2daa8cb80a2af4330a","title":"Filters—Settings","path":"/lrsiem/7.21.0/filterssettings","children":[]},{"id":"ci_c685bdf343e1705c7d8de15dc941aa458e9f582402f161c56d3cbe7a6fea4305","title":"Filters—Thresholds","path":"/lrsiem/7.21.0/filtersthresholds","children":[]},{"id":"ci_3862ceade866cb9f527ea097be5259db9a23906bc67a3c97504cc86f4b4b2f89","title":"Filters—Time and Schedule","path":"/lrsiem/7.21.0/filterstime-and-schedule","children":[]},{"id":"ci_5fcfb1c1e5eb369a0d83e6ef24891fe93d8c0daa05f635ffdb0bcc40c5433310","title":"Filters—Unique Values","path":"/lrsiem/7.21.0/filtersunique-values","children":[]}]}]},{"id":"ci_244ac28a97498c0888728315cef0f79f19657eae37f3b33edbc85efa5d82c98d","title":"General Console Features","path":"/lrsiem/7.21.0/general-console-features","children":[{"id":"ci_8cf0665f07a55fe0a2019005bd9fce83cc9f416346620d71e0895ae5659b2fc8","title":"Export Grid to File","path":"/lrsiem/7.21.0/export-grid-to-file","children":[]}]},{"id":"ci_4db2c059315eb5699998a58bc2bafcd61946b0676fbcd2c3545ed1e2bea37b31","title":"Layouts","path":"/lrsiem/7.21.0/layouts","children":[{"id":"ci_8fb7b07cd70a74ae1aad013d735c2c17ffed50bd80c76223c1f759f0e0dadead","title":"Clone Existing Layouts","path":"/lrsiem/7.21.0/clone-existing-layouts","children":[]},{"id":"ci_8e2ab355547676907e3f25cf711b507148e675a154bdad508d6108353c4002aa","title":"Create New Layouts","path":"/lrsiem/7.21.0/create-new-layouts","children":[]},{"id":"ci_4a20eacac9207aa7d1f6058e7a3fd6ec518d19c22b12937b38085f17e1c15988","title":"Delete Layouts","path":"/lrsiem/7.21.0/delete-layouts","children":[]},{"id":"ci_6cf944fd33bd151568e315ffb543cc98f7fdf0c7417b2d25a7ece6d43831877c","title":"Import and Export Layouts","path":"/lrsiem/7.21.0/import-and-export-layouts","children":[]},{"id":"ci_960d1ceb8a8d6665614a94bda29696d32cbb73c28cd306b0538c66c7ae2e6725","title":"Make or Clear Default Layouts","path":"/lrsiem/7.21.0/make-or-clear-default-layouts","children":[]},{"id":"ci_0aaffd0854cc4a9ad70a2e1a81052e3d7dc9c1da9f8cf2ee4e4a41fc195758f4","title":"Modify Layout Properties","path":"/lrsiem/7.21.0/modify-layout-properties","children":[]},{"id":"ci_df11733036e2a09a9bcabe9db15ea4c0a21eb94514a2b11cf94ef6ed905933e8","title":"Reset Layouts","path":"/lrsiem/7.21.0/reset-layouts","children":[]},{"id":"ci_989f8af28387c6e3f2d8689299671a4eb6688ca9dc7b39732f44768be97cf211","title":"Save Layouts","path":"/lrsiem/7.21.0/save-layouts","children":[]},{"id":"ci_1389708d2b0b1f222ce0df3fcab25dfd1f84448a9ee972d13cb303350f2c4bd9","title":"Set Color Themes in Layouts","path":"/lrsiem/7.21.0/set-color-themes-in-layouts","children":[]}]},{"id":"ci_38f7370236836619ab6b5bbf6bbeff4b9b1fd104c8d2301507d9eb588fcd47e1","title":"Lists in the Client Console","path":"/lrsiem/7.21.0/lists-in-the-client-console","children":[{"id":"ci_8280828d0f5dfce426c0d1201802c4a837e328e85055a441b88168a2d1958900","title":"Add Expiring Items to a List","path":"/lrsiem/7.21.0/add-expiring-items-to-a-list","children":[]},{"id":"ci_998b7ef8cecf71bafe6cfd903ed1d0fbec05cd98471fedaf6707f6b5738d884a","title":"Add Values to a List","path":"/lrsiem/7.21.0/add-values-to-a-list","children":[]},{"id":"ci_aa0670539575ac90d6658ff288a61512bcb4308f640ccdc6effa3381f24fd76c","title":"Clone Lists","path":"/lrsiem/7.21.0/clone-lists","children":[]},{"id":"ci_6d84491275423b1f241f3369176bc1e7c36b494d8941da6430ba4f8960a5ab1d","title":"Create Lists in the Client Console","path":"/lrsiem/7.21.0/create-lists-in-the-client-console","children":[]},{"id":"ci_d2b4b0f3b532ce3a234312d8f564df473f3ab1ee3f753c97cc081e473fc39198","title":"Modify the Properties of Lists","path":"/lrsiem/7.21.0/modify-the-properties-of-lists","children":[]},{"id":"ci_8d13215fa11a121e963107456cd397e210da4dc65b61220d5c7667079906a0bd","title":"Remove List Items","path":"/lrsiem/7.21.0/remove-list-items","children":[]},{"id":"ci_95939cd9cdd28aa7d659fb034ea10b7b7718c05e4469febee6ff9901f319eef8","title":"Reset Expiration Date for List Items","path":"/lrsiem/7.21.0/reset-expiration-date-for-list-items","children":[]}]},{"id":"ci_9a76bfaa78e24166ceb398170072bc56725cfa5011b3ad9300c1004e8a068d6c","title":"Message Processing Engine Rule Builder","path":"/lrsiem/7.21.0/message-processing-engine-rule-builder","children":[{"id":"ci_a68ad894737040ba15e1d05f5d2a86c2d3d57a1dc3558cb9f5ede9d577250549","title":"Application Manager","path":"/lrsiem/7.21.0/application-manager","children":[{"id":"ci_7af722dcb23a10b75f1d9428cb7efea0eed4e25cbac945c51348f5d14edfd934","title":"Create New Application Records","path":"/lrsiem/7.21.0/create-new-application-records","children":[]},{"id":"ci_42a8f7a48f5695da0654f76bc3ccb5ffd99a64cd83ff00b5c963ed9ec0178cbb","title":"Modify Application Record Properties","path":"/lrsiem/7.21.0/modify-application-record-properties","children":[]},{"id":"ci_edbfbd071edef782a0971939adf4f809a3b5f908aeeda9fc3e1c4c391be944f9","title":"Refresh the Application Manager","path":"/lrsiem/7.21.0/refresh-the-application-manager","children":[]},{"id":"ci_7e0cd47957d31be8a3748dc9a526ed2e8d46a5f8f963cf5969281c1c17ead3aa","title":"Retire or Activate Application Records","path":"/lrsiem/7.21.0/retire-or-activate-application-records","children":[]}]},{"id":"ci_d172a0fba9a1aadc1041751e7f0bb02a04265a5f1c60514919114689c7044f03","title":"Common Event Manager","path":"/lrsiem/7.21.0/common-event-manager","children":[{"id":"ci_1b03a1b37f6b0fdcd59e4c945c36ef77151fd2f964d3ba596f50453c1ebb901e","title":"Create Common Events","path":"/lrsiem/7.21.0/create-common-events","children":[]},{"id":"ci_73cdadf1e0f4c028f2a67eb5d0c158099976854f50b7dcb0cbcaff3b28da2272","title":"Delete Common Events","path":"/lrsiem/7.21.0/delete-common-events","children":[]},{"id":"ci_49c76beee0e931085dfb739753d1f3d4377a8564ca5ffb768d3199f363a68ac1","title":"Modify Common Events","path":"/lrsiem/7.21.0/modify-common-events","children":[]},{"id":"ci_566c8581bfe31a13b99c214bdbc41a5fecda17fb171b5a11bb8948786988b324","title":"Search for Common Events","path":"/lrsiem/7.21.0/search-for-common-events","children":[]}]},{"id":"ci_90bd1f79dc45bd74f385bf3d1694fab701a6198bb8f452447daec1aa0391bc82","title":"Create Custom MPE Sub-Rules","path":"/lrsiem/7.21.0/create-custom-mpe-sub-rules","children":[]},{"id":"ci_5693a879bdae7449b895e795711b60ce28e2e69b0e437eeb4ef197872419693a","title":"Create MPE Policies","path":"/lrsiem/7.21.0/create-mpe-policies","children":[]},{"id":"ci_c698ad3051e4c9b3f650d3a5f38b0ddeb8e27b3095f6902e622044fa9639ca66","title":"Create New Base MPE Rules","path":"/lrsiem/7.21.0/create-new-base-mpe-rules","children":[]},{"id":"ci_2786694bf22059ec65f12d93b2f585b310824e55d035e8dc11ff65e832e11106","title":"Edit MPE Rules","path":"/lrsiem/7.21.0/edit-mpe-rules","children":[]},{"id":"ci_4ab72b0b1e4005727399b737af1f537c81c9a6d0c29602830496ff3d992da0b1","title":"Edit Sorting Properties for System Base MPE Rules","path":"/lrsiem/7.21.0/edit-sorting-properties-for-system-base-mpe-rules","children":[]},{"id":"ci_1a691a28787620b6db52b984f35a344f254764bfc157d37446ab4af2f0cb1b2b","title":"Import and Export MPE Rules","path":"/lrsiem/7.21.0/import-and-export-mpe-rules","children":[]},{"id":"ci_b2dc3922ae2232daaa67f41ee9e8fe897b46efdd94272c2500f770ab2ffa3fea","title":"Regular Expression Characters and Practices","path":"/lrsiem/7.21.0/regular-expression-characters-and-practices","children":[]}]},{"id":"ci_0c657b2447c151a2d19aca1b5de4b487955eb6e8c78209f6cba1d98cfe5a7476","title":"Monitor, Search, and Analysis","path":"/lrsiem/7.21.0/monitor-search-and-analysis","children":[{"id":"ci_cfb5fbc834de79c732d6df7f963d952c20666b26c170c93798475773039ec7c9","title":"Alarm Viewer","path":"/lrsiem/7.21.0/alarm-viewer","children":[{"id":"ci_9a24fa9ee2aa29a8b8a5b4f7e9f205f343370fcd381bc02fd19bb08ce2787054","title":"Change the Status of a Single Alarm","path":"/lrsiem/7.21.0/change-the-status-of-a-single-alarm","children":[]},{"id":"ci_2e802d9aca4de1ffe25a4aea2819086e21c16ecfcbeaf3f43acb3135e39c5694","title":"Change the Status of Multiple Alarms","path":"/lrsiem/7.21.0/change-the-status-of-multiple-alarms","children":[]},{"id":"ci_d466fbec005d72ead9cac4948ac02247702af983defec247b8810a5766224d6a","title":"Create Alarm Lists","path":"/lrsiem/7.21.0/create-alarm-lists","children":[]}]},{"id":"ci_dd853e02dd4680caf1e48b984a06b33af93019140ee11da52ac2f77eb71b445a","title":"Investigator","path":"/lrsiem/7.21.0/investigator","children":[{"id":"ci_c1c1efb096f0d17e4e439a7e3a3dbc900719233bba26e0244748100dcc605b70","title":"Change Share Permissions on a Saved Investigation","path":"/lrsiem/7.21.0/change-share-permissions-on-a-saved-investigation","children":[]},{"id":"ci_0eaf7b3a7c1751dd231bafd0076b31771bceebc48d4c1bd55f85dea52287641c","title":"Create Investigations","path":"/lrsiem/7.21.0/create-investigations","children":[]},{"id":"ci_815a02999ed268b2ce56f821f9f9338db48121633f12f17befdbb2fbca87f9d6","title":"Drill Down on a Single Item in Investigation Results","path":"/lrsiem/7.21.0/drill-down-on-a-single-item-in-investigation-results","children":[]},{"id":"ci_e1431f593e8348f67e705478ae4932645fd7fb082036a8f7b22fb10e31679cbc","title":"Drill Down on Multiple Items in Investigation Results","path":"/lrsiem/7.21.0/drill-down-on-multiple-items-in-investigation-results","children":[]},{"id":"ci_cffc36abcca4d0819fff5b0dba8341b12e1698bab7df91be898cf61fffe26006","title":"Import and Export Investigations","path":"/lrsiem/7.21.0/import-and-export-investigations","children":[]},{"id":"ci_a09228192a017c45925987e917aa21f6d2abc9a1aa718f400182ff39d3cff725","title":"Run Saved Investigations","path":"/lrsiem/7.21.0/run-saved-investigations","children":[]},{"id":"ci_7f8f4874e63475e09642dfd9fb67df891b2ff4c8a00b81a477e42ddd25a37a0b","title":"Save Investigations with Report Packages","path":"/lrsiem/7.21.0/save-investigations-with-report-packages","children":[]},{"id":"ci_4f3b49e53d03b4b0a4db7230c63c67ce0be2ea9efba5342904af680b218df86e","title":"Save Investigations with Report Templates","path":"/lrsiem/7.21.0/save-investigations-with-report-templates","children":[]},{"id":"ci_6703111bc2e72283e544d99eec8f65cbece1505a472eee95122c66c6887fe5ed","title":"Search for Most Frequent Common Events","path":"/lrsiem/7.21.0/search-for-most-frequent-common-events","children":[]},{"id":"ci_b3edca85fd7bc4faf4173378e6f3dc26c354a92a808dc239457c0fd41def6fe8","title":"View Metadata in the Log Viewer Tab","path":"/lrsiem/7.21.0/view-metadata-in-the-log-viewer-tab","children":[]},{"id":"ci_5d9e5f55b99adae6e078ed9c28219f32ae4271ee9a22d17e4f5e5ecbde622893","title":"Work With Investigation Result Graphs","path":"/lrsiem/7.21.0/work-with-investigation-result-graphs","children":[]},{"id":"ci_0662e912f1648c9dafb82c5c2aa1b2762b75e46576f4a7d49f92a035b4727353","title":"Work with Log Miner","path":"/lrsiem/7.21.0/work-with-log-miner","children":[]},{"id":"ci_705e72b204d7c437a01667dac4c351c02d7d65be232d12ae6992456023d78bd3","title":"Work With Network Visualization Diagrams","path":"/lrsiem/7.21.0/work-with-network-visualization-diagrams","children":[]}]},{"id":"ci_4c95b602b2736de17a85b42310a99d6d13227db6689ea7f6b8532d6634d8c975","title":"Personal Dashboard","path":"/lrsiem/7.21.0/personal-dashboard","children":[{"id":"ci_642371c2197258d4964f12e56a7fec33e5e142ef4d5b7d745414d34fb1274102","title":"Add Personal Dashboard Filters","path":"/lrsiem/7.21.0/add-personal-dashboard-filters","children":[]},{"id":"ci_094e3f7171da65711049f8b6021211623e23a4ff57aa0fc279017eaa002e435e","title":"Apply Personal Dashboard Filters","path":"/lrsiem/7.21.0/apply-personal-dashboard-filters","children":[]},{"id":"ci_f56452d106e0e07f87711a298affd044609e30e7c7d4e4ca9ff08e09860fe5e1","title":"Clone Personal Dashboard Filters","path":"/lrsiem/7.21.0/clone-personal-dashboard-filters","children":[]},{"id":"ci_ba7cc6ea18f1e98d168b300219545d430aa88c9e9cfc4979768dd5212c0d7fdb","title":"Configure the Personal Dashboard Display","path":"/lrsiem/7.21.0/configure-the-personal-dashboard-display","children":[]},{"id":"ci_586339d79ed58e9d05eff72e55b63d9bcbc4e78ed42a3c5e0ac526ab324d2fb5","title":"Delete Personal Dashboard Filters","path":"/lrsiem/7.21.0/delete-personal-dashboard-filters","children":[]},{"id":"ci_21be1ef3cd410f338fbba3763775e872ba25cef4d78051b453ab103eda731262","title":"Drill Down on Dashboard Data","path":"/lrsiem/7.21.0/drill-down-on-dashboard-data","children":[]},{"id":"ci_058a77e6674ebecd3e6bc32cbab61e283ac36ba21cb489cc0361c85453dc4266","title":"Modify the Properties of Personal Dashboard Filters","path":"/lrsiem/7.21.0/modify-the-properties-of-personal-dashboard-filters","children":[]}]},{"id":"ci_bdaf902c37d0a671e48d88541f4bf523ff5ad7a8f8eb889b53b19bd3fbad0664","title":"Quick Search Toolbar","path":"/lrsiem/7.21.0/quick-search-toolbar","children":[{"id":"ci_50616ad6a1c10d86ba7fb146ed9f8a808fa7feb6f511248d7a605fed53c9cda2","title":"Use the Quick Search Toolbar","path":"/lrsiem/7.21.0/use-the-quick-search-toolbar","children":[]}]},{"id":"ci_a101983bd40bc901559a34830d2a341e42044bc9ecd0e365455b3c41567bf679","title":"Run Contextualize","path":"/lrsiem/7.21.0/run-contextualize","children":[]},{"id":"ci_b1efd064cf8ab6077035fd2b8c101ac6042e521dca0953d8e03046993ab9a218","title":"Run Correlate","path":"/lrsiem/7.21.0/run-correlate","children":[]},{"id":"ci_df9ccf43d9ffe6515113733f0f3e1732e3feb920fcc5f05848723cfb47318263","title":"Tail","path":"/lrsiem/7.21.0/tail","children":[{"id":"ci_ef0cd45e621db19de4bb41d370192d90bb620320e594e7593606e031913a215b","title":"Create New Tails","path":"/lrsiem/7.21.0/create-new-tails","children":[]},{"id":"ci_cfd1aef31725c66d62cd8d2eb2fb05d1ca8719e94a34d9b5a65ec1e8d590104d","title":"Run Saved Tails","path":"/lrsiem/7.21.0/run-saved-tails","children":[]},{"id":"ci_5925dacd91ddce1f1b0a7e5d1b841b48adbe8afa6f78acc196630ff877aa8317","title":"Tail Log Sources","path":"/lrsiem/7.21.0/tail-log-sources","children":[]}]},{"id":"ci_fd5c6656eddc304cec44836842a9b72decc1d1ab7cdb622ea3ff93ad075f52d3","title":"TopX Analysis","path":"/lrsiem/7.21.0/topx-analysis","children":[{"id":"ci_d7ea73d9a0b925ee41712441fb6e90a6451546f489b13d77b7adb957bcc9bfe3","title":"Analyze TopX Results","path":"/lrsiem/7.21.0/analyze-topx-results","children":[]},{"id":"ci_7df09710ef3f5dd4f27b65b9284f1367d383e6417e6f3d55f73c9ba88f96d702","title":"Configure TopX Widgets","path":"/lrsiem/7.21.0/configure-topx-widgets","children":[]}]}]},{"id":"ci_d1822d2c6ea613b56a3d2427c95e5bb9d776a142abf0afab9d2e4b72b176355c","title":"My LogRhythm","path":"/lrsiem/7.21.0/my-logrhythm","children":[{"id":"ci_c1274fe07375595659fe26f3149d72c96d4a34730d36d92f80d86cf815713b82","title":"Add or Modify a Person Record","path":"/lrsiem/7.21.0/add-or-modify-a-person-record","children":[]},{"id":"ci_6ef68dcbfec5a9ff42a2a46111be5c7d61cc1559557cf70823c3e99fb9927d35","title":"Change Your Password","path":"/lrsiem/7.21.0/change-your-password","children":[]},{"id":"ci_338645a9ffa34c421755cfabe47900afa52dcffc4a39ef4751332071bcf2bf15","title":"Create Email Notification Policies","path":"/lrsiem/7.21.0/create-email-notification-policies","children":[]},{"id":"ci_c5375cc24a0472bf60039baf299c5cfe7c73a4812aa2ae9bd9f875c42ff25ae0","title":"Manage Your Preferences","path":"/lrsiem/7.21.0/manage-your-preferences","children":[]}]},{"id":"ci_7e403daa8750971e605d4868a2f8e39d6f0baed79fed30243b333789b53f113a","title":"Report Center","path":"/lrsiem/7.21.0/report-center","children":[{"id":"ci_7fb5b38b01e62b43a85b1fdf8cfa82cc5f3633613e27e4b06fff577f0038c856","title":"Add Custom Logos to Reports","path":"/lrsiem/7.21.0/add-custom-logos-to-reports","children":[]},{"id":"ci_1e0ee1d261dd5e594e2a9ea41dbaad0b5f35da3909588f5983063c32ba1ef2fd","title":"Clone Reports or Report Packages","path":"/lrsiem/7.21.0/clone-reports-or-report-packages","children":[]},{"id":"ci_cfef196f7ca3bbf8fa0455eb65116260e90d27e4df9639e9de8dc31222ebf63d","title":"Create Custom Log Detail Report Templates","path":"/lrsiem/7.21.0/create-custom-log-detail-report-templates","children":[]},{"id":"ci_70f0a16b404d44961a5bad00095b55eeac41a88a75aa2ea5cfd1e090d7234ff6","title":"Create Custom Log Summary Report Templates","path":"/lrsiem/7.21.0/create-custom-log-summary-report-templates","children":[]},{"id":"ci_b3ca0b68c8a26a4450d51d0d78af5a22e1d8e435cb86cb46f771d4e1be7b743c","title":"Create Report Packages","path":"/lrsiem/7.21.0/create-report-packages","children":[]},{"id":"ci_a6f3ab92a768525ba66e481473ce22992240925b122d6f8ab549519a1fc47bac","title":"Create Reports","path":"/lrsiem/7.21.0/create-reports","children":[]},{"id":"ci_2e91a78d4433ec1d9dc2e6153913a7fcacf590471a462fec056a4bfadaa7d597","title":"Create Scheduled Reports","path":"/lrsiem/7.21.0/create-scheduled-reports","children":[]},{"id":"ci_d1902eb4b06138799c41cd337324be48fe28e569f57fa2c3f12f9540e06c3d34","title":"Import or Export Reports or Report Packages","path":"/lrsiem/7.21.0/import-or-export-reports-or-report-packages","children":[]},{"id":"ci_9ea5d58166c77d9d593504f40c3c27f7c2ed5abe5c35f466b4e8f272b95cd808","title":"Manage Scheduled Reports","path":"/lrsiem/7.21.0/manage-scheduled-reports","children":[]},{"id":"ci_687643ad87a9319094196c025f4fa188ac1da4689c81db1bec387d9f247f5969","title":"Modify Custom Report Templates","path":"/lrsiem/7.21.0/modify-custom-report-templates","children":[]},{"id":"ci_31f3af0452074ce14a558e30d8aad2427c49aa4b609d5a644ef8baaeca4c3c7d","title":"Restore Default Logo to a Report","path":"/lrsiem/7.21.0/restore-default-logo-to-a-report","children":[]},{"id":"ci_25377c0de9ae4d27816d6a8af42fc778298d79272a05028e8d7aa49abdf413ba","title":"Run Reports","path":"/lrsiem/7.21.0/run-reports","children":[]},{"id":"ci_20fd49728f8ec708ea7092f785ceb5989ce965ef9977031c8f70bec95c0d5755","title":"Run Reports as Investigations","path":"/lrsiem/7.21.0/run-reports-as-investigations","children":[]},{"id":"ci_2eecc27fba31efcee295ad070ebd17300d1eff82a756f34baacc9e2984e51665","title":"Troubleshoot Empty Reports","path":"/lrsiem/7.21.0/troubleshoot-empty-reports","children":[]},{"id":"ci_8048bfcec1214403a6f62ac096408a0fb7bb4e5efeb98f16d1cf11b1d1b86686","title":"View Report Center Job Status","path":"/lrsiem/7.21.0/view-report-center-job-status","children":[]},{"id":"ci_06945c6e1bace743a296b161a67d9c6bd706dc46d8df271bc49df157a8be624e","title":"View Reports in the Client Console","path":"/lrsiem/7.21.0/view-reports-in-the-client-console","children":[]}]}]},{"id":"ci_6946b32748ba0b6e18f66df616e2297e6c9281f7e3af720a2d24d3ad3a4a5e7d","title":"Web Console User Guide","path":"/lrsiem/7.21.0/web-console-user-guide","children":[{"id":"ci_4310d2bb3a4f3e6693c2007d8676e3af131f46783c84243f254d40610ae15fbc","title":"Alarms","path":"/lrsiem/7.21.0/alarms","children":[{"id":"ci_4d03b905e67bae9415e07ac14e7443c7af225e89f7e5ac07688fead27faa96b9","title":"Alarms Page Overview","path":"/lrsiem/7.21.0/alarms-page-overview","children":[{"id":"ci_0af791a9ab351700f7048de2e1e11584bfbc0f40efa0c6ff9dd499017511317b","title":"Alarm Cards","path":"/lrsiem/7.21.0/alarm-cards","children":[{"id":"ci_65ee39bbcfce1b4d1bee21ad909cbe12e4d8c15fed698b9cd760c03fa5588d2c","title":"Sort Alarm Cards","path":"/lrsiem/7.21.0/sort-alarm-cards","children":[]}]},{"id":"ci_51a7a2b2db602694c56476955ef4724903658d157a5e952718f2ff84aab1b1fd","title":"Alarm Grid","path":"/lrsiem/7.21.0/alarm-grid","children":[{"id":"ci_4cee7c254f4d0996c15a4816181e272661af3a2584ef67142def5d95acf6a863","title":"Pin and Resize Alarm Grid Columns","path":"/lrsiem/7.21.0/pin-and-resize-alarm-grid-columns","children":[]}]},{"id":"ci_c41f7331e6e5f67fe26cb05507a8c3c53a7fc584a76cc6d5de30eaaea40ccaa6","title":"Alarm Status Trends","path":"/lrsiem/7.21.0/alarm-status-trends","children":[]}]},{"id":"ci_19a9d929c103bfb315440a42dd79c6b5ac7ce2659ce78c31745f040170ddd76d","title":"Alarm Filters","path":"/lrsiem/7.21.0/alarm-filters","children":[{"id":"ci_fdba3559424bf14a2333ca92e48a906dc502837d52c0c8dc7e76b20955ade576","title":"Remove Alarm Filters","path":"/lrsiem/7.21.0/remove-alarm-filters","children":[]},{"id":"ci_eddddf92d561ed275e8170d33c2786925b5cd8bae61f6525a38aac70702fae80","title":"Use Dynamic Alarm Filters","path":"/lrsiem/7.21.0/use-dynamic-alarm-filters","children":[]},{"id":"ci_4839204e4a09bb0b507b299538a107ec84a8ded74772a5f54d0151b84caf301d","title":"Use the Time Frame Filter","path":"/lrsiem/7.21.0/use-the-time-frame-filter","children":[]}]},{"id":"ci_68ae290d0929da6ba8c2a211fea6c56fbeef3039676d4b01df38dc8c561a88e3","title":"Add Comments to Alarms","path":"/lrsiem/7.21.0/add-comments-to-alarms","children":[]},{"id":"ci_a8aa7e7622d27fe22060c4b9aa88a9cfb7ae9957a9e6c8ad863c20ac9dd060c8","title":"Approve or Deny SmartResponse Actions in the Web Console","path":"/lrsiem/7.21.0/approve-or-deny-smartresponse-actions-in-the-web-console","children":[]},{"id":"ci_17b39209d89bd85a04e430b5f51dba35ad82722114662d7fb23c91905e946ac2","title":"Drill into Log Data Associated with an Alarm","path":"/lrsiem/7.21.0/drill-into-log-data-associated-with-an-alarm","children":[]},{"id":"ci_1ce7c8f19594ef43bfd5be25a97ad6a28114643aa72af3efd6d4e569e8b06e36","title":"Update the Alarm Status","path":"/lrsiem/7.21.0/update-the-alarm-status","children":[]},{"id":"ci_fda486812eddf5018074c1d4c1ad9dc49154394a5060cdad53d9815253830dd1","title":"View Alarms in Your Browser","path":"/lrsiem/7.21.0/view-alarms-in-your-browser","children":[]},{"id":"ci_7df367cf05864851e3a90902cadbc1adb7fb0a0c0ddd4daaceaf5b1153939558","title":"Alarm Inspector Panel","path":"/lrsiem/7.21.0/alarm-inspector-panel","children":[]}]},{"id":"ci_b3f6855240fad1add8ff2fdf92d5d5a60607018c97a0f6d80c6c10d3b09f97c3","title":"Analyzer Grid","path":"/lrsiem/7.21.0/analyzer-grid","children":[{"id":"ci_b09fb11ae20d268a2a8bcce920f2a5875a94827037114d7ed1ca46bb71f38528","title":"Use the Analyzer Grid","path":"/lrsiem/7.21.0/use-the-analyzer-grid","children":[]},{"id":"ci_f145aa04f3288fcb6b0b636242ed4bb09e63f3a9fba83367722d7f26d29775da","title":"Configure the Analyzer Grid","path":"/lrsiem/7.21.0/configure-the-analyzer-grid","children":[]},{"id":"ci_c37bd3d1a477eb69739d5d21f9a3a65ae2aa79714a73f3e7d23ab31c81d4f395","title":"Details & Actions Panel","path":"/lrsiem/7.21.0/details-actions-panel","children":[]},{"id":"ci_29ef95d5f27725743aa65970c0401dfab3235e9466dcea6b4a95838ad6d7da35","title":"Export Log Data into a CSV File","path":"/lrsiem/7.21.0/export-log-data-into-a-csv-file","children":[]},{"id":"ci_5344a6da6c8f410e4fc74a05502c5ea9669e546cd4b2f0d5769e537a6ef7e4b8","title":"Inspector Panel","path":"/lrsiem/7.21.0/inspector-panel","children":[{"id":"ci_6f0575a75f08583ad138d698d0c31612bbd745d53e95f9f69a6d90904382ab28","title":"Integrate with LogRhythm UEBA (formerly CloudAI)","path":"/lrsiem/7.21.0/integrate-with-logrhythm-ueba-formerly-cloudai","children":[]},{"id":"ci_4ad9371e893b19238210c796f61311f82b1da0ba7b5460c7cb8719fce83b0d93","title":"Use Contextualize","path":"/lrsiem/7.21.0/use-contextualize","children":[]},{"id":"ci_21e6e58cfa24c833cc64084eb89942a1cd4c6c1bfe2ceb471dcb58014de26ced","title":"Configure Third-Party Contextualize Actions","path":"/lrsiem/7.21.0/configure-third-party-contextualize-actions","children":[]},{"id":"ci_54c70cf4b6dab6501530dcfd7f1d8bac48c89c0d38bae49e49af1bdb4e22a42c","title":"Use SmartResponse","path":"/lrsiem/7.21.0/use-smartresponse","children":[]},{"id":"ci_37093478b21a7f4b8ddda0dc2cd73c160c0f58ac70e6f074c72c07b89373768a","title":"Use the AI Engine Rule Viewer","path":"/lrsiem/7.21.0/use-the-ai-engine-rule-viewer","children":[]},{"id":"ci_dec378f1cd5fe9b6b00cf63a485953ae88a729b68a8bf555d0676304886c1f60","title":"Use Threat Intelligence Service Integration","path":"/lrsiem/7.21.0/use-threat-intelligence-service-integration","children":[]}]}]},{"id":"ci_ff8b14af18cf472b32f60c7c9b3fbfc95ebfcc86a42ccb24e1910d809d6bf27e","title":"Case Management","path":"/lrsiem/7.21.0/case-management","children":[{"id":"ci_63dd56585bf4de7c41834d855ab53abb803587e8e47d53ce902d3cad7b874978","title":"Case Cards","path":"/lrsiem/7.21.0/case-cards","children":[]},{"id":"ci_7fe7bfa044d070d2c0225fd6598b51751a16f58b283dde7ddb648da7258c4488","title":"Case History Widgets","path":"/lrsiem/7.21.0/case-history-widgets","children":[]},{"id":"ci_59d54d8ac45f86826e3f839b82f15b2eb18c3619644010ebc5d93d7b2de14417","title":"Case List Widgets","path":"/lrsiem/7.21.0/case-list-widgets","children":[{"id":"ci_0c3568c470569dfc91c08ea874f82e33c9e39c76af05c6ddacf01bda509157ef","title":"Configure Case List Widget Settings","path":"/lrsiem/7.21.0/configure-case-list-widget-settings","children":[]}]},{"id":"ci_f17ba4f6b3777f5e3b52a164d4e11360c7f5cbc99f304a87b742418c9b7f2438","title":"Case Owners vs. Collaborators","path":"/lrsiem/7.21.0/case-owners-vs-collaborators","children":[]},{"id":"ci_bbe9b092d011e7e1e72d827fa9d36723673e6cccfb12495995b4557dc44612a8","title":"Case Status and Workflow","path":"/lrsiem/7.21.0/case-status-and-workflow","children":[]},{"id":"ci_44ad29875035958d88abd9e98315fd075418cf33952b6173cffc5fdc82e9f25b","title":"Case Trend Widgets","path":"/lrsiem/7.21.0/case-trend-widgets","children":[{"id":"ci_592827eb4bec267a0fa485f5fb5ee37743bd6e375e7728ab7df8d3777312a160","title":"Configure Case Trend Widget Settings","path":"/lrsiem/7.21.0/configure-case-trend-widget-settings","children":[]},{"id":"ci_4f2d68641451cf52242ef05409547edc41aacae19586214bdf0c5f69a749c98b","title":"Read Case Trend by Priority Charts","path":"/lrsiem/7.21.0/read-case-trend-by-priority-charts","children":[]},{"id":"ci_2fc8be3128028ae3949bfec1a00d4ac91470deda152f061be24998bbe6ccd533","title":"Read Case Trend by Status Charts","path":"/lrsiem/7.21.0/read-case-trend-by-status-charts","children":[]}]},{"id":"ci_8e1adc628567594b689e13fd49f20fec7873835f219b33331b941f74f0649e7b","title":"Open the Case Details View","path":"/lrsiem/7.21.0/open-the-case-details-view","children":[]},{"id":"ci_d7d7ca4f9ec18d180774a4f344780eaa089cb99b0b15f301f81eae4c02e58ea4","title":"Separate Entities in Cases","path":"/lrsiem/7.21.0/separate-entities-in-cases","children":[]},{"id":"ci_5e105b1863ef59c97ac813d481d37a89087a05474ef103f06e70ab9623b8d395","title":"Work with Cases","path":"/lrsiem/7.21.0/work-with-cases","children":[{"id":"ci_666c80646f078bb2a7185ed9017ad4e73d93c1af19a51b1a568b325518be3d8b","title":"Add Alarms to a Case","path":"/lrsiem/7.21.0/add-alarms-to-a-case","children":[{"id":"ci_d15fc82bfcddab621c98ee785ed4b2ded7216383b6608d7e90fdc209a6cea0c6","title":"Update the Status of Alarms Associated with a Case","path":"/lrsiem/7.21.0/update-the-status-of-alarms-associated-with-a-case","children":[]}]},{"id":"ci_fb1fd791dee1250fc4b97ca83c5e30ffb84c78a52d57f9f95f5ae6734b75b350","title":"Add Files to a Case","path":"/lrsiem/7.21.0/add-files-to-a-case","children":[]},{"id":"ci_93f1c6c07359446a23c8b626a57044bbb33c242c57af8a2aa80e77595d1aa499","title":"Add Logs to a Case","path":"/lrsiem/7.21.0/add-logs-to-a-case","children":[]},{"id":"ci_dbd2fa6134960aa80a4256374a7569fa8ada8d51017d99e455f4f4c56a36c167","title":"Add Notes to a Case","path":"/lrsiem/7.21.0/add-notes-to-a-case","children":[]},{"id":"ci_e65b9cd99d555acc95701079a2d15789295714a2dc58feb8918a0db55c292292","title":"Case Associations","path":"/lrsiem/7.21.0/case-associations","children":[{"id":"ci_734e14db37ebf9d8a6fb8b4faa84e7094a25724f229da4d414c7dda150312c71","title":"Add Case Associations","path":"/lrsiem/7.21.0/add-case-associations","children":[]},{"id":"ci_0ac8ca3a8c531c8d4b73a0a7685014251c201f935f0f0206efa082467e446078","title":"Remove Case Associations","path":"/lrsiem/7.21.0/remove-case-associations","children":[]}]},{"id":"ci_601f474e09b96d8aba0281aeba499ab5983fb7bfecf1a0adae5f1281fa3c0903","title":"Case Collaborators","path":"/lrsiem/7.21.0/case-collaborators","children":[{"id":"ci_ff706faa314934a1dedb434417f8a68446c9a9d8fafbdd252b4652507f3075d3","title":"Assign Collaborators to a Case","path":"/lrsiem/7.21.0/assign-collaborators-to-a-case","children":[]},{"id":"ci_c734fd73255197eeec3a82bc390b567bccbbdd7639fd93ad74535e7839470a39","title":"Remove Collaborators from a Case","path":"/lrsiem/7.21.0/remove-collaborators-from-a-case","children":[]},{"id":"ci_6a528b8f46b3ae041c97a94cf352d0238133ee3fa3e9ca4338cc592f6783b369","title":"Transfer Case Ownership","path":"/lrsiem/7.21.0/transfer-case-ownership","children":[]}]},{"id":"ci_20a3782519b715d9a777932b8e77e05512c546b56502e8057611116d1a0c3e3c","title":"Case Tags","path":"/lrsiem/7.21.0/case-tags","children":[{"id":"ci_0ce980e8b26a170c385d76ed5dfa90336e4fa053df259ca2b4bbfb8b6d9719f6","title":"Add Case Tags to a Case","path":"/lrsiem/7.21.0/add-case-tags-to-a-case","children":[]},{"id":"ci_32d5216f8f98856ef92f2f788c3d530e25250a3aab2f84e687e6fec27eb56284","title":"Remove Case Tags from a Case","path":"/lrsiem/7.21.0/remove-case-tags-from-a-case","children":[]},{"id":"ci_c84e2c07adf17f13fdee95c4e1505cb32bc2b608343616afa4ead906dd4e1cbc","title":"Use Case Tags to Filter Cases in Case Widgets","path":"/lrsiem/7.21.0/use-case-tags-to-filter-cases-in-case-widgets","children":[]},{"id":"ci_b95dc67d0910e7b4de4c7df7fc76a0203632c6b9caae5d4f4a3e72d8960bbb9b","title":"Use the Case Tag Library","path":"/lrsiem/7.21.0/use-the-case-tag-library","children":[]}]},{"id":"ci_6c73347715eeece0185e0aa79532e4da5120cf060ffe722bfcbc18ef913c25f7","title":"Close Cases","path":"/lrsiem/7.21.0/close-cases","children":[]},{"id":"ci_c6a89f4d1d70edab6e0ea4910ad8bd6949d6877e3545797cdbd4d3a64987bad8","title":"Create New Cases","path":"/lrsiem/7.21.0/create-new-cases","children":[]},{"id":"ci_4ab7512ad6650693e40f24530019e9bedc3e15c7072e2c60f37d65c03c82c22d","title":"Delete Logs, Alarms, and Files from Case Evidence","path":"/lrsiem/7.21.0/delete-logs-alarms-and-files-from-case-evidence","children":[]},{"id":"ci_8a8fc4f870c73bdc5c7076eb3ff467760e922b48b1a0f2e760c0ef31faca7e7a","title":"Edit and Delete Notes in Case Evidence","path":"/lrsiem/7.21.0/edit-and-delete-notes-in-case-evidence","children":[]},{"id":"ci_9d48d484a07686940bc3de30f0b9e940c6c8e178ec9e6f62d2ba0f0b039d86bb","title":"Edit Case Names, Priorities, Due Dates, and Summaries","path":"/lrsiem/7.21.0/edit-case-names-priorities-due-dates-and-summaries","children":[]},{"id":"ci_e6483b5a14f9e05f3acd9eb79f602bbf40e6fff88e46a6a36f351bd7e6952594","title":"Filter Cases","path":"/lrsiem/7.21.0/filter-cases","children":[]},{"id":"ci_4810b46e939597bc87accd324d8cc9b9982a6d003fbd4fbd177f0f795c9291d3","title":"Pin Important Evidence","path":"/lrsiem/7.21.0/pin-important-evidence","children":[]},{"id":"ci_ed38bd6b869d040a0540c8c8f55f40dd1a32213081dea3ba9032e4d0af036045","title":"Reopen Cases","path":"/lrsiem/7.21.0/reopen-cases","children":[]},{"id":"ci_f9878e36cf875194b74555c19ea44401e6efa743fca6857e1fe864d4ffe1fcf2","title":"Unpin Evidence","path":"/lrsiem/7.21.0/unpin-evidence","children":[]}]},{"id":"ci_e711097d1f480920ac84fcc055148158bf52c67988096a9ed8dfd9dca34a0537","title":"Work with the Current Case Panel","path":"/lrsiem/7.21.0/work-with-the-current-case-panel","children":[]}]},{"id":"ci_743e36184e0e1daefb8718ac458f24f5ceb9302fbe41f70bbe7254fe051dc0aa","title":"Cloud to Cloud Log Collection","path":"/lrsiem/7.21.0/cloud-to-cloud-log-collection","children":[{"id":"ci_a08bcc1070bd82908a74d980cab0bb8618d2ec45318719ad0aa737686f9b9ee0","title":"Configure an Open Collector Log Source","path":"/lrsiem/7.21.0/configure-an-open-collector-log-source","children":[]},{"id":"ci_f61ff0a05cc221b1e361cbebbacaf5e2d4232b4691f4215d5f79e8ac11db2106","title":"Add a Log Source Configuration","path":"/lrsiem/7.21.0/add-a-log-source-configuration","children":[]},{"id":"ci_9940934a03e17b7349d2d94f04c20d2a94b9a2e066908e6d9541ec7548ce0cad","title":"Use the Log Source Configuration Grid","path":"/lrsiem/7.21.0/use-the-log-source-configuration-grid","children":[]},{"id":"ci_20ed31df2822799a8f8325e5cf8afc404542f2341923cd84df902fc206c63cbb","title":"Edit a Log Source Configuration","path":"/lrsiem/7.21.0/edit-a-log-source-configuration","children":[]},{"id":"ci_ede54d9bfca8e455b51beace7b471cbb498ac251db1a51be32b825f4deda86f0","title":"Delete a Log Source Configuration","path":"/lrsiem/7.21.0/delete-a-log-source-configuration","children":[]}]},{"id":"ci_8c17008ea8659010039918a2e11060d18210a3515a84bbe59256b65e21834d69","title":"Dashboards","path":"/lrsiem/7.21.0/dashboards","children":[{"id":"ci_63cb025d44965df73b3d157c2fce68e04039e0be9cfe4cec66adb310aa8d0e8a","title":"Create New Dashboards","path":"/lrsiem/7.21.0/create-new-dashboards","children":[]},{"id":"ci_68476e2dc213c46532206bb44bef00ce35243ca10f25f8d2a148ab2ae514c22a","title":"Clone Dashboards","path":"/lrsiem/7.21.0/clone-dashboards","children":[]},{"id":"ci_0bb20a8e9d572313baaa3b8c25ecaec9852cc2e3249fe6f3fd725404562efd8b","title":"Import and Export Dashboards","path":"/lrsiem/7.21.0/import-and-export-dashboards","children":[]},{"id":"ci_23b465bb9a42fe5ab74ce7e713382484e11a02c630feb2adaea9de2019827baa","title":"Change Dashboards","path":"/lrsiem/7.21.0/change-dashboards","children":[]},{"id":"ci_59b0af2be94768b97efba66d5e733ff8f1c154a310dc5070b93cd2a1883c3f76","title":"Revert Changes","path":"/lrsiem/7.21.0/revert-changes","children":[]},{"id":"ci_29ab81f1c324c2c0fc286b5ccef8e27390d5dfed38d3db2cc473acef7913b136","title":"Print Dashboards","path":"/lrsiem/7.21.0/print-dashboards","children":[]},{"id":"ci_12cb1720f8c059f1d41c443f32a880790d4deb250397e5bd81f1a956dceed41c","title":"Save Dashboard Changes","path":"/lrsiem/7.21.0/save-dashboard-changes","children":[]},{"id":"ci_777386a34436400e352d3e9d96214ee450752811423d3f343cc05a3526254bca","title":"Filter Data with Lucene Searches","path":"/lrsiem/7.21.0/filter-data-with-lucene-searches","children":[{"id":"ci_a1c1bcbf12fc8b5a3cb4f2958b544e74d511223720e08dfea7e7f5fe3ac35fcb","title":"Lucene Search Syntax","path":"/lrsiem/7.21.0/lucene-search-syntax","children":[{"id":"ci_33eb97cfd7fdcd479cc693d02ed444a473cc431ca6941d1205d80b5bba8e7115","title":"Basic Queries","path":"/lrsiem/7.21.0/basic-queries","children":[]},{"id":"ci_5a2bd8db6ca73a55e761952548cb7710049d95bce88f75f769f23afd7cfbae46","title":"Complex Queries","path":"/lrsiem/7.21.0/complex-queries","children":[]},{"id":"ci_7153f5f5e1ee01a701ea073e47f6c40ff30846d6977c89cb751c8a41fb96dace","title":"Troubleshoot the Lucene Search","path":"/lrsiem/7.21.0/troubleshoot-the-lucene-search","children":[]},{"id":"ci_54431a47906b781338d5536a7843898be5701ba4a7eaac5a8e36da97cacb43bd","title":"Wildcard Queries and Fuzzy Matches","path":"/lrsiem/7.21.0/wildcard-queries-and-fuzzy-matches","children":[]},{"id":"ci_b56a8ac07e7d0f35d47cf74318db3504e2eb3e2f1c10a71b414c83b0f0fd85fd","title":"Metadata Fields","path":"/lrsiem/7.21.0/metadata-fields","children":[{"id":"ci_de53c274b2e0a4c5f551d7cf9339e8af0f332f16d11fe173d8951236da117174","title":"Applications","path":"/lrsiem/7.21.0/applications","children":[]},{"id":"ci_90571939503524317a573c51cc726eea83d7695e7a839f545b131210a25d25fb","title":"Classification","path":"/lrsiem/7.21.0/classification","children":[]},{"id":"ci_46545b870686f07129dc3f10045992be8164775faa4c3c03cda82dc055e666b2","title":"Identity","path":"/lrsiem/7.21.0/identity","children":[]},{"id":"ci_29d554ddcb9a48140a48bb43536eaa44d26fd98e451960c2b3a7d2502b1aefdc","title":"KBytes and Packets","path":"/lrsiem/7.21.0/kbytes-and-packets","children":[]},{"id":"ci_1168f79c187d95cd1cebd40822096a152bf5d6d3881aff504d1ff6fe067afd55","title":"Location","path":"/lrsiem/7.21.0/location","children":[]},{"id":"ci_56b1afd50db479b47128a2e8f8a14d4d75505f8b50a636685a57e874bdcb83e6","title":"Log","path":"/lrsiem/7.21.0/log","children":[]},{"id":"ci_b8734150505ebced3d12a7c5ce0bc58e70aa381ccb547a12e082e923348e4d0e","title":"Network","path":"/lrsiem/7.21.0/network","children":[]},{"id":"ci_f64d751d2db75a57b08ec4df100d9cf82ea7c3d78867dacdebe54136d9c408d7","title":"Host","path":"/lrsiem/7.21.0/host","children":[]}]}]}]}]},{"id":"ci_5119d0595cf4a9513597071a979493110f4691be676e015153b6c311f1fb78bc","title":"Data Indexer (DX) Dashboards","path":"/lrsiem/7.21.0/data-indexer-dx-dashboards","children":[]},{"id":"ci_e85dd5e649b445ede50b09eb6bc532797af66c5bd705fbdcb36016765d641d33","title":"Lists in Web Console","path":"/lrsiem/7.21.0/lists-in-web-console","children":[{"id":"ci_10da6bd3bd0315d87967fa0ec6a4bc09bbbebb5d3efd27e5c353b4d247a2d525","title":"Add List Items in the Web Console","path":"/lrsiem/7.21.0/add-list-items-in-the-web-console","children":[]},{"id":"ci_77c394a0adc9f3ba96eb589d24d734c044939055fc46b4bd9e827eded8bddf10","title":"Add Related Lists","path":"/lrsiem/7.21.0/add-related-lists","children":[]},{"id":"ci_3a864d24ea69353874192a72dc36b0f018ec7e1525d41bfd105930cc76fd8b3f","title":"Create a List in the Web Console","path":"/lrsiem/7.21.0/create-a-list-in-the-web-console","children":[]},{"id":"ci_8d45562fabb02d1cb47865a993d29292e7d35810eb78598bf5b3665781b09599","title":"Filter and Sort Lists","path":"/lrsiem/7.21.0/filter-and-sort-lists","children":[]},{"id":"ci_6d3faa0d2058115ff90fc776b035e96aefef91a2335ea42c3afec9135915fef1","title":"Remove List Items in the Web Console","path":"/lrsiem/7.21.0/remove-list-items-in-the-web-console","children":[]},{"id":"ci_301883d3c15bd1a1bc289df2f6b69a841ffa3683120581d5d3e3f8045897063e","title":"Select and View a List","path":"/lrsiem/7.21.0/select-and-view-a-list","children":[]},{"id":"ci_d9667e76d792279c51abc97ee11a0c2729cc7d861cf2651c15ae0bbc165f19b4","title":"View Retired Lists","path":"/lrsiem/7.21.0/view-retired-lists","children":[]}]},{"id":"ci_685009acca04a56320162b14952cb621ff3f167c796a0d7dd9ecfb3733cf3829","title":"Log Collection in Web Console","path":"/lrsiem/7.21.0/log-collection-in-web-console","children":[{"id":"ci_2868ebbeb805375573c6c8819be1d7bf73ea94433b7244d91ce70c4c433ab112","title":"Agents Grid","path":"/lrsiem/7.21.0/agents-grid","children":[]},{"id":"ci_26e2a9d2c916e64f6e8cdc82273d205983603585bbcdc9d34ef3aedb8b0a3d8e","title":"Beats Grid","path":"/lrsiem/7.21.0/beats-grid","children":[]},{"id":"ci_13fdb0099289769b248d6ece368629c0c80647684cb408d63a8481a73e533bcc","title":"Log Sources Grid","path":"/lrsiem/7.21.0/log-sources-grid","children":[]},{"id":"ci_6733c2d8415069d979df95f92d7666bd1d016a93d106a5209470d86012b3a453","title":"Open Collectors Grid","path":"/lrsiem/7.21.0/open-collectors-grid","children":[]},{"id":"ci_4ed094ba5fe015b5845faf09ea8ccc96af96d1dd438e65b7b3768a3ad876d14b","title":"Add a New Beat in Web Console","path":"/lrsiem/7.21.0/add-a-new-beat-in-web-console","children":[]},{"id":"ci_b0e105c042a6c50173e65e4dd3f04f04106c2fb6b5fc912de324fbbfee47f2cf","title":"Add a New Log Source in Web Console","path":"/lrsiem/7.21.0/add-a-new-log-source-in-web-console","children":[]},{"id":"ci_11fd3bccab5d8ecdd0b34a38c24ececafa7a83e668e1fec11f535fcab4d3be10","title":"Manage Pending Log Sources","path":"/lrsiem/7.21.0/manage-pending-log-sources","children":[]},{"id":"ci_2621e55cb5186af2aee9671d8cc6ac2f8d5b24f759e2d91f625a427e1c056f95","title":"Retire Beats","path":"/lrsiem/7.21.0/retire-beats","children":[]},{"id":"ci_ffa8789e00d4b4f6d37f658adb1918ca4f7c966671aab057808822060648b946","title":"Retire Open Collectors","path":"/lrsiem/7.21.0/retire-open-collectors","children":[]}]},{"id":"ci_456b71f4dd5d20e683fb8339d6f015c91c2c1a5e33c8f91a9f426cd717473eca","title":"Playbooks","path":"/lrsiem/7.21.0/playbooks","children":[{"id":"ci_5a0dd20fc5e727d7ea686c5c40f3f4ae08f388852d99dd98079a0af74d921b77","title":"Create Playbooks","path":"/lrsiem/7.21.0/create-playbooks","children":[]},{"id":"ci_261ca197b1f9c46b968c01035a4c73d925f806a955c5445cdc0ac7b9502e2c0d","title":"Import Playbooks","path":"/lrsiem/7.21.0/import-playbooks","children":[]},{"id":"ci_bd699ffe65041e15b2bc6d5356234e088cb04544468bad0c399001c82b90da86","title":"Work with Playbooks","path":"/lrsiem/7.21.0/work-with-playbooks","children":[]},{"id":"ci_41190dab9ab4cfccab0e7b47ad270c468dc109b7e4e1ea170518915746cf620c","title":"Add Playbooks to a Case","path":"/lrsiem/7.21.0/add-playbooks-to-a-case","children":[]},{"id":"ci_619bea687c16e88050be3c8c300b1c8c45cd6bf8e5196d45ebe0d92e2c3f66b2","title":"Work with Playbooks in a Case","path":"/lrsiem/7.21.0/work-with-playbooks-in-a-case","children":[]},{"id":"ci_e399f9d13fa9951a3a26012ed061ee318683dc7aca6fce06b62ef8108af75448","title":"Procedures List Widget","path":"/lrsiem/7.21.0/procedures-list-widget","children":[]}]},{"id":"ci_6359344b0848380e0d95b3674106902cf71b95307d58c45af8e78108a09dfb3a","title":"Reports","path":"/lrsiem/7.21.0/reports","children":[{"id":"ci_58b2de72e5ed4ea5282f11f6dd17a355cdf4028fbced43896d382899cee7478f","title":"Completed Reports Widget","path":"/lrsiem/7.21.0/completed-reports-widget","children":[{"id":"ci_0f0a1ce0f24a0decbf3e81b898e8f59c0473a339ce6ff6e3fd5a7a8557e29e9a","title":"Configure Completed Reports Widgets","path":"/lrsiem/7.21.0/configure-completed-reports-widgets","children":[]}]},{"id":"ci_544a65b1426b559e65157e236c91edef772c380551f460cf67dfff12421590e7","title":"Download Reports from the Web Console","path":"/lrsiem/7.21.0/download-reports-from-the-web-console","children":[]},{"id":"ci_effa4ad1e2fdaa3eca706ad9706ceee71945d830252d71beac41b3368d6dd83c","title":"Filter Report Packages on the Reports Grid","path":"/lrsiem/7.21.0/filter-report-packages-on-the-reports-grid","children":[]},{"id":"ci_3569abdc2e87bad5a8801322e65fd725a412088fce3c271b4cf893ac0090fa5b","title":"Pin and Resize Reports Grid Columns","path":"/lrsiem/7.21.0/pin-and-resize-reports-grid-columns","children":[]},{"id":"ci_8805f654d2a72287b1437ac310f099ff99b4c0c46a6c03905be0911de900bc91","title":"Run Searches from Report Filter Criteria","path":"/lrsiem/7.21.0/run-searches-from-report-filter-criteria","children":[]},{"id":"ci_1198caf04f078ee811b41a13dcdf5ffcbab3d9d2c3daa2729c7448f1fcab242e","title":"Sort Content on the Reports Grid","path":"/lrsiem/7.21.0/sort-content-on-the-reports-grid","children":[]},{"id":"ci_36df6453fed50640200a2d7b857c3088845f6e505fd43b68d3c62bf6301ed5d8","title":"View Package and Reports Details in the Inspector","path":"/lrsiem/7.21.0/view-package-and-reports-details-in-the-inspector","children":[]}]},{"id":"ci_fd23b22eada8d7756cab743950f723c307c9aafab0a26d0fb7891b9cbdae62e7","title":"Search","path":"/lrsiem/7.21.0/search","children":[{"id":"ci_aa420df8f0b5d9d106ece01f89f3e925f9a1b58cb48402f474d249f8841e771e","title":"Manage the Searches Page","path":"/lrsiem/7.21.0/manage-the-searches-page","children":[]},{"id":"ci_4031d1919bf422c994f6431fec85eef45bb4fe35bae5ef6a533332d47194441a","title":"Run Searches from the Searches Page","path":"/lrsiem/7.21.0/run-searches-from-the-searches-page","children":[]},{"id":"ci_c4f585957597e929c88f5bf6394f409284f878339d81c0ddde43f53806cf3cac","title":"Use Search","path":"/lrsiem/7.21.0/use-search","children":[]},{"id":"ci_bd4c093ed8a104f3423da2976af9df8fb9783de874ef12a46696fec0601f1291","title":"Save Searches","path":"/lrsiem/7.21.0/save-searches","children":[]},{"id":"ci_93439b703f417eadf3fbee7f952d61705e66b3d7c4c9b2315a80feecc9141b4b","title":"Perform Details Searches (User/Host)","path":"/lrsiem/7.21.0/perform-details-searches-user-host","children":[]},{"id":"ci_3d3af35b3e542f32640d26cafd2e7d6c3d0ff37254b9dc428f596a2e7d1a7796","title":"Perform Pivot Searches","path":"/lrsiem/7.21.0/perform-pivot-searches","children":[]},{"id":"ci_acc0696a13be9c69fbe6fd3021e4adfa2de98f2d9a7d4f44ede61e59a9705e27","title":"Search Tiers (Hot/Ultra-Warm/Warm/Cold)","path":"/lrsiem/7.21.0/search-tiers-hot-ultra-warm-warm-cold","children":[]}]},{"id":"ci_19af5e36e008c490473d3ea2117a2b8117e52d27f86e00e8691836225fb740c9","title":"SecondLook - Web Console","path":"/lrsiem/7.21.0/secondlook-web-console","children":[]},{"id":"ci_01105df8e03b795d402e119e2fb2484a457716781c34013411c4151b6e78324a","title":"Single Sign-On","path":"/lrsiem/7.21.0/single-sign-on","children":[{"id":"ci_a1b142bc9c1ba3c6bfbfb1a13e1a4386d68b996d813d6e1fbce9c1aad5d1ba7a","title":"SSO Known Issues and Recommendations","path":"/lrsiem/7.21.0/sso-known-issues-and-recommendations","children":[]},{"id":"ci_9ffbf34efccc8a9984ec3f798aaa6a2cbe0609fc36582929cff6c30742181c5c","title":"SSO User Auto-Provisioning","path":"/lrsiem/7.21.0/sso-user-auto-provisioning","children":[]},{"id":"ci_3b1743bc8c5037e706322021b7dc3e40f4a73f583c44dee7c13b38bba8060af0","title":"SSO Configuration","path":"/lrsiem/7.21.0/sso-configuration","children":[{"id":"ci_4fb760fc2281ec8aea049fa5809d90dfbe8d8d09a3c39f7814ad46b622f436e4","title":"Supported Identity Providers","path":"/lrsiem/7.21.0/supported-identity-providers","children":[{"id":"ci_2510b818b2abd4675ef798aeff14a0db66fbc44c71dce22db5ab449f4fc67982","title":"Configure SSO with Okta","path":"/lrsiem/7.21.0/configure-sso-with-okta","children":[]},{"id":"ci_1c66b9b91fa25bf509d4546aa3dbda10ca98597594c84c9d4af8716d2cb43df0","title":"Configure SSO with Azure AD","path":"/lrsiem/7.21.0/configure-sso-with-azure-ad","children":[]},{"id":"ci_894739eac8e43f4d4c269ef2690469132bc5c7d19c6ffc97feecf03fdf5a4996","title":"Configure SSO with PingOne for Customers","path":"/lrsiem/7.21.0/configure-sso-with-pingone-for-customers","children":[]},{"id":"ci_86fa54a3a43d6e94dc6091d9946cb6990d65f82c2f792a4b41b1c70d3239a1c7","title":"Configure SSO with PingOne for Enterprise","path":"/lrsiem/7.21.0/configure-sso-with-pingone-for-enterprise","children":[]}]}]}]},{"id":"ci_9dc35d97d7135cff6c72ddc4256c17cfa6a83433f19cf03d93533f4521f2fa86","title":"TrueIdentity","path":"/lrsiem/7.21.0/trueidentity","children":[{"id":"ci_57d2fe285d209b7b24f1c8bc181c89d3d8b30088f6ced34f2c01f063c752ddd3","title":"Work with TrueIdentities","path":"/lrsiem/7.21.0/work-with-trueidentities","children":[]}]},{"id":"ci_754b849f41cd2f096fac7390c2dad88a22d76ee7c8e566458b609a22c7ca3f68","title":"User Interface","path":"/lrsiem/7.21.0/user-interface","children":[{"id":"ci_7a40823d4443945b91d577f21de61693734b08cd7879edbb607fa1c6d11e9448","title":"Resource Center","path":"/lrsiem/7.21.0/resource-center","children":[]},{"id":"ci_5e747c06c2d32c3bb714b320172a970acc7d0afcbb14e880b2c1e04d9e682a7c","title":"Pages","path":"/lrsiem/7.21.0/pages","children":[{"id":"ci_27336363a1c639bb6328eae1a7a79836e553ea87f2330aab516e918a3ea21227","title":"Alarms Page","path":"/lrsiem/7.21.0/alarms-page","children":[]},{"id":"ci_2bad2c296d8565ff6a61e127f68ce705a17d62eb9cdf710451e759f880a3fae1","title":"Analyze Page","path":"/lrsiem/7.21.0/analyze-page","children":[]},{"id":"ci_f061b4939c77c390847d00bcaa0b66603c838dc2221892dfce28b18e0349076f","title":"Cases Page","path":"/lrsiem/7.21.0/cases-page","children":[]},{"id":"ci_74f52053ec192f233bd7b89870c25610fbd002e0e02581624d889f9a66ca9d25","title":"Dashboards Page","path":"/lrsiem/7.21.0/dashboards-page","children":[]},{"id":"ci_520cd24cd76c410709354d31d421461f513b2f71e75b7575c8af9cf4fdac0297","title":"Host/User Detail Page","path":"/lrsiem/7.21.0/host-user-detail-page","children":[]},{"id":"ci_ff1c59e3aa907976f157d3692de376dcca2b19f50a5968c6d58b5b47e4e8c2a1","title":"Lists Page","path":"/lrsiem/7.21.0/lists-page","children":[]},{"id":"ci_1260f2ac4cb590dc34d478de15597e4bc44f873b4dc846ce852983829c2f0bf3","title":"Reports Page","path":"/lrsiem/7.21.0/reports-page","children":[]},{"id":"ci_ccaeca832e005eefcc32304f7df4bdde20e028a4897ffc1ceda64eef2bf2899a","title":"Searches Page","path":"/lrsiem/7.21.0/searches-page","children":[]},{"id":"ci_c88663c919c09748b009805fb0a1b9768a54eff85b446c2b3aad5c43df66f1a0","title":"TrueIdentity Page","path":"/lrsiem/7.21.0/trueidentity-page","children":[]}]},{"id":"ci_80777078c482a55f65fe2985eb8d63ecf1f8abe6244cd6a88dd4a65ee8896f16","title":"Panels","path":"/lrsiem/7.21.0/panels","children":[{"id":"ci_0822aafc7eba33914e3be5e1cd22f58b3682112d7174e621241dde7e694f88d3","title":"About the Analyzer Grid","path":"/lrsiem/7.21.0/about-the-analyzer-grid","children":[]},{"id":"ci_b4c890c14baf5f294cc60ae11c20b9c303cd1003648d9bf154e359831deb7072","title":"Current Case Panel","path":"/lrsiem/7.21.0/current-case-panel","children":[]},{"id":"ci_dc37d6b9083900fbd74afaa5dbc05bcf9f490b0d066517420f832e19be0c864c","title":"Inspector","path":"/lrsiem/7.21.0/inspector","children":[]}]},{"id":"ci_bf9d851cf3c0c3b5fc1a4ec540a41e128d0d93abe1d0d83817a510b4ad8d3959","title":"Tools","path":"/lrsiem/7.21.0/tools","children":[{"id":"ci_5385a2621ff27a5812457e37bb898fc1a6d3b904ecccee8e1f40e81db6ce9043","title":"About Widgets","path":"/lrsiem/7.21.0/about-widgets","children":[]},{"id":"ci_1bcc5754f2b88f2d12730407bf62a71b6e3e40f345cf493beead00e558fd1097","title":"Breadcrumbs","path":"/lrsiem/7.21.0/breadcrumbs","children":[]},{"id":"ci_bce26df1c1d054ac741678f535ff8bab11ce2c7cdea27d458bcbeddf986fabee","title":"Hotkeys","path":"/lrsiem/7.21.0/hotkeys","children":[]},{"id":"ci_e4d4d01c22d1dcfb18b1003d83364c8927309e4631badee652305a3572fc0100","title":"Icons","path":"/lrsiem/7.21.0/icons","children":[]},{"id":"ci_ccf1e808519e7ce30641e752f20d7e40f5658ec844af3e27ca6f78d8bb62f65c","title":"Search Tools","path":"/lrsiem/7.21.0/search-tools","children":[]},{"id":"ci_35b85a4e304c6a696d5fe3724e140e1df389b7f189dbe35433cd1fd96711ac53","title":"Taskbar","path":"/lrsiem/7.21.0/taskbar","children":[]},{"id":"ci_e2f4b4f686cc69a008ad5b9cb16b0c5ca0b1387606af57eb2651c917c36d6338","title":"Typeahead Filters","path":"/lrsiem/7.21.0/typeahead-filters","children":[]}]}]},{"id":"ci_4847e2cc023e83556f9f2de66852cdb39715061f0eedd43cb60002199a2b353c","title":"User Settings","path":"/lrsiem/7.21.0/user-settings","children":[{"id":"ci_668f5446818283d306ccd1d7a4c78a4ae95151d810a89e375cc9eaa8e32dc1e0","title":"Access Web Console Help","path":"/lrsiem/7.21.0/access-web-console-help","children":[]},{"id":"ci_d389e7c4dfa81ce28a3d4b87be8a4bd2386c9dc85df95f320d26406a063cc61f","title":"Change the Default Web Console Search Timeout Period","path":"/lrsiem/7.21.0/change-the-default-web-console-search-timeout-period","children":[]},{"id":"ci_0b58d088708dbfd66e29e341f7b884072c4e54dec4fe1c2f41dd945979093517","title":"Change the Web Console NGINX Configuration to Modify Available Ciphers","path":"/lrsiem/7.21.0/change-the-web-console-nginx-configuration-to-modify-available-ciphers","children":[]},{"id":"ci_fed2cceb5c44d3cd4b05060a2dfa01563456ff45fbe8b3abab531cb8098dc153","title":"Change Web Console Password","path":"/lrsiem/7.21.0/change-web-console-password","children":[]},{"id":"ci_5d9d6c63ef2e3889d7617e941ff7abe15bcbb581a32d6b9a6a5a451586abe3f9","title":"Configure Navigation Warning","path":"/lrsiem/7.21.0/configure-navigation-warning","children":[]},{"id":"ci_693dc30be3135061947bb30e5d18aaa6722254e336233897809987137b8c0f4d","title":"Configure Search Results","path":"/lrsiem/7.21.0/configure-search-results","children":[]},{"id":"ci_0cc636d50c37171bc6ef7fb278c7ff735c31857064a443784a440ce0aead78d5","title":"Select Query Location","path":"/lrsiem/7.21.0/select-query-location","children":[]},{"id":"ci_a3b24545acf3831944e39928afdee1be0936f2c0baa0e9f3a591bb092ae9114f","title":"Set the Date Time Format","path":"/lrsiem/7.21.0/set-the-date-time-format","children":[]},{"id":"ci_53eb3260ff760e3d035eb9c9e8baa82345ac0695a8a58bcb0b1b340dbb352007","title":"Set Your Drilldown Preference","path":"/lrsiem/7.21.0/set-your-drilldown-preference","children":[]},{"id":"ci_41f180b4513d5b68c23b7102a5a3bcfb14fe5cd86213ca9922a130fdf0785ee7","title":"Switch Between Day and Night Modes","path":"/lrsiem/7.21.0/switch-between-day-and-night-modes","children":[]}]},{"id":"ci_548ff4163f233c09a616e8db5cfde392d1ed2fdefc270b51f7e3eaff1f52859f","title":"Widgets","path":"/lrsiem/7.21.0/widgets","children":[{"id":"ci_6ff60594a6f8ee9bb2c041d56197e7451a00c5edfa4526fef03fe0c38ad41c67","title":"Customize Dashboard Widgets","path":"/lrsiem/7.21.0/customize-dashboard-widgets","children":[{"id":"ci_288348111570c24f973f784b8cc21c49fe3bd24d2639b0862a8ca4f713bd5304","title":"Add Widgets","path":"/lrsiem/7.21.0/add-widgets","children":[]},{"id":"ci_33c217a0431c0d7bb9d6b42cb7f059e9e6a845e6a21f6208b3e682380f5908c3","title":"Configure Widget Settings","path":"/lrsiem/7.21.0/configure-widget-settings","children":[]},{"id":"ci_c509d79de4969073c9e10d261c89f1b9358a350f3a1bdf22f377fff7f86e5004","title":"Copy Widgets","path":"/lrsiem/7.21.0/copy-widgets","children":[]},{"id":"ci_f733bdba0ddc482c97050f5c7ae77e0785d17eb8ac018a25b3660f744f0e6bac","title":"Delete Widgets from a Dashboard Layout","path":"/lrsiem/7.21.0/delete-widgets-from-a-dashboard-layout","children":[]},{"id":"ci_22a1c9b20a6a7b1e8d61b38ad5d29c8ed847dd23d4ce57445fc5a582dd630c8d","title":"Move Widgets","path":"/lrsiem/7.21.0/move-widgets","children":[]},{"id":"ci_ca036598f23402bb94415e8d98d02ef0dcf8ffb4b69743ac253d70da84284aad","title":"Rename Widgets","path":"/lrsiem/7.21.0/rename-widgets","children":[]},{"id":"ci_c284041b5e743550b78b547d98dae761b41f291ba7eaa3160b041df02e2a7461","title":"Resize Widgets","path":"/lrsiem/7.21.0/resize-widgets","children":[]}]},{"id":"ci_82b17de0e5fd91312f041b2a230984e150e9e3b230293e11a4e68cdd4bc478af","title":"Component Status Widget","path":"/lrsiem/7.21.0/component-status-widget","children":[]},{"id":"ci_7bcd5ab4330ffc18904562e84bf3e82762faa4c65f6f094c6ec1b1d2539c07e9","title":"Current Processing Rate Widgets","path":"/lrsiem/7.21.0/current-processing-rate-widgets","children":[]},{"id":"ci_8c365687909492f5c2a9eadb5f60f67018d1284563dabeca6471becf684e1a5d","title":"Data Processing Trend Widgets","path":"/lrsiem/7.21.0/data-processing-trend-widgets","children":[]},{"id":"ci_a655558dddeb7a1653a1ae7049859ed4ec83b4b5bfbc073a189c0a2578dfd97e","title":"Node-Link Graph Widgets","path":"/lrsiem/7.21.0/node-link-graph-widgets","children":[]},{"id":"ci_7b3544e1e1d3868cb05f069ba3dcd53e201f9b6f81942353e2da4da35c9e625b","title":"System Database Usage Widget","path":"/lrsiem/7.21.0/system-database-usage-widget","children":[]},{"id":"ci_36c4a477fdd99360c4a2161584ed42162a2220280db705938da23542ef167602","title":"Threat Activity Map","path":"/lrsiem/7.21.0/threat-activity-map","children":[{"id":"ci_7a55952f27e6a3135b947ef4a7338d9c93f8d8449d86cf0a567e2f4b1eceb73b","title":"Configure Threat Activity Map Widget Settings","path":"/lrsiem/7.21.0/configure-threat-activity-map-widget-settings","children":[]},{"id":"ci_39a6fdb53e0289e24cc09b4de42ce98f1939e7e61ac26066e95c502e91492431","title":"Drill into Threat Activity Map Node Data","path":"/lrsiem/7.21.0/drill-into-threat-activity-map-node-data","children":[]},{"id":"ci_aabe767b651120e9dcf1dc76c1ca010e40d957a55bb59081bc25c05171dc74b2","title":"Troubleshoot Threat Activity Map","path":"/lrsiem/7.21.0/troubleshoot-threat-activity-map","children":[]},{"id":"ci_5eb37cfd6e16546d044e08163a4c79bec4a5f030ff46716752d85209e14f5163","title":"Zoom In and Out on the Map","path":"/lrsiem/7.21.0/zoom-in-and-out-on-the-map","children":[]}]},{"id":"ci_e2a82499f2c7252b864025c0f0d4da4b752e31c77ee5b8aefeb3457c55554afc","title":"Timeline Widget","path":"/lrsiem/7.21.0/timeline-widget","children":[]},{"id":"ci_c5c663303f0a9750c22b3f61f9e21f239a105f53de3ebf88761a315558d2c5d0","title":"TopX Widgets","path":"/lrsiem/7.21.0/topx-widgets","children":[{"id":"ci_880997c6d2caa5af13d02ab0e613037a5ded2067b790ceaf44bb6c1c90ffff4b","title":"Configure TopX Widget Data Settings","path":"/lrsiem/7.21.0/configure-topx-widget-data-settings","children":[]},{"id":"ci_9c48c07430c5fb76477138a0bc47924d2e7288fc9462d5289a52c4aaa0e00fb4","title":"Configure TopX Widget Graph & Options Settings","path":"/lrsiem/7.21.0/configure-topx-widget-graph-options-settings","children":[]},{"id":"ci_f5fd64be06a0984caeddd09dfdca4e39aaeee9f6c8e35b7e0f09cea15c6401e4","title":"Drill into Chart Metadata from the Dashboards","path":"/lrsiem/7.21.0/drill-into-chart-metadata-from-the-dashboards","children":[]},{"id":"ci_d7c84fdcd276fd9f2631a53dedd6fe20ee6f673c2ae21ada7efe333c406fb389","title":"Filter Data by Time Range on the Dashboards and Analyze Pages","path":"/lrsiem/7.21.0/filter-data-by-time-range-on-the-dashboards-and-analyze-pages","children":[]},{"id":"ci_351c0401a075837bf97fb94b81c3759bfd4a1f1195f3b5d3bef8a432f6f3cf8c","title":"Resize TopX Data Labels on Bar Charts","path":"/lrsiem/7.21.0/resize-topx-data-labels-on-bar-charts","children":[]}]}]}]},{"id":"ci_4d08ddd9b66d9517162110a092fdf68b7e28ff16c468a952986510e6346a9e1b","title":"LogRhythm Schema Dictionary and Guide","path":"/lrsiem/7.21.0/logrhythm-schema-dictionary-and-guide","children":[{"id":"ci_8d6bd5c5767b567472d9aefae9cd2c42c1a656ab51b119506c491ac6da0335df","title":"Application Tab","path":"/lrsiem/7.21.0/application-tab","children":[{"id":"ci_7ae34baa42bff5c93614238451d74b3a1d77a5cadb42d7f077ba28f51ce927f2","title":"Action [7.2]","path":"/lrsiem/7.21.0/action-7-2","children":[]},{"id":"ci_d7c87a64edf390a3dc632ae0c06fd32c71b0b634b8c8aca9220fb311cf01a277","title":"Amount","path":"/lrsiem/7.21.0/amount","children":[]},{"id":"ci_905a59a66a4973593dd2dd8addcf5bdc98bd06adb85fb8a9317b66f9efb00068","title":"Command","path":"/lrsiem/7.21.0/command","children":[]},{"id":"ci_27484a069e6c686097a738dc68065990f4de768780b72f450ab1b90a2aa2b929","title":"Hash [7.2]","path":"/lrsiem/7.21.0/hash-7-2","children":[]},{"id":"ci_a48d98dce3d10c3734ed52023cf8c96d1d4e1e7b6a762fcdb484fc270b49cb28","title":"IANA Protocol Name","path":"/lrsiem/7.21.0/iana-protocol-name","children":[]},{"id":"ci_65bd110230f0210b6d5204e000fdd038841f7244c7fe78dbc4d5519cd0f8ea6d","title":"IANA Protocol Number","path":"/lrsiem/7.21.0/iana-protocol-number","children":[]},{"id":"ci_1fca62cb31a0097448e41b10510b092bd7c6577ed0893f30dc7b12f341b83f75","title":"Object","path":"/lrsiem/7.21.0/object","children":[]},{"id":"ci_388660f8c165a606e2d906efa98191fcd25a69a9a61e28159397c79dec5a8edc","title":"Object Name","path":"/lrsiem/7.21.0/object-name","children":[]},{"id":"ci_f9d33322e0178c0a70430180a8cfc96b9a475c16282defe2d7d11e007d69db92","title":"Object Type [7.2]","path":"/lrsiem/7.21.0/object-type-7-2","children":[]},{"id":"ci_be2229fc307209f12f3189029123f5692792935c7b2159b30e275944be22ae9d","title":"Parent Process ID [7.2]","path":"/lrsiem/7.21.0/parent-process-id-7-2","children":[]},{"id":"ci_2232a9939ca0ac963a33c330c7a427c0e69bedf2e978750f9e7c3c9949a011a8","title":"Parent Process Name [7.2]","path":"/lrsiem/7.21.0/parent-process-name-7-2","children":[]},{"id":"ci_c61636dfa389b63bc67e0065575f90623d4dde86acdbf28f86d68cca4347d807","title":"Parent Process Path [7.2]","path":"/lrsiem/7.21.0/parent-process-path-7-2","children":[]},{"id":"ci_8f28e0965501f0f94eb6feea9819e266865961236e9bfebe994a8df2461fd32c","title":"Policy [7.2]","path":"/lrsiem/7.21.0/policy-7-2","children":[]},{"id":"ci_94fe5d1962ef52b1a861cc7ec5a25496a920c52659b3595a6159c0fcf04a88ad","title":"Process ID","path":"/lrsiem/7.21.0/process-id","children":[]},{"id":"ci_39d7a79b1755e7d55306ee676757986ae682180b03c04036c60ae10400c424cd","title":"Process Name","path":"/lrsiem/7.21.0/process-name","children":[]},{"id":"ci_3cf5195a146af58d7489be9631d08997548af72df368d047cdf2fba79de5b489","title":"Quantity","path":"/lrsiem/7.21.0/quantity","children":[]},{"id":"ci_305b4ce63b4691896edfb0207f86d1abfc23a40943fac9243ac0992ded8d206a","title":"Rate","path":"/lrsiem/7.21.0/rate","children":[]},{"id":"ci_bb12431895f7110b78e57c983385d752e0d144358e29f6a8b4de70bce1499e87","title":"Reason [7.2]","path":"/lrsiem/7.21.0/reason-7-2","children":[]},{"id":"ci_378fe9f9cba763382181fdc7c093b7c64ba2c9cbad48e58d5c4a81df0c579c5b","title":"Response Code [7.2]","path":"/lrsiem/7.21.0/response-code-7-2","children":[]},{"id":"ci_1eec3d451f4a01c015d81109f4ead223c29f74f776ef25ecfa6f443a4c7e1ea3","title":"Result [7.2]","path":"/lrsiem/7.21.0/result-7-2","children":[]},{"id":"ci_45a3ca6411438e35c7f9a72cc3183dfaf1204fb2be3bec446b40f6300af686a1","title":"Session","path":"/lrsiem/7.21.0/session","children":[]},{"id":"ci_e3ae8e4c4ac273e3e2af5ebb0b2ed74d945da7740feb959e439048def71bc5da","title":"Session Type [7.2]","path":"/lrsiem/7.21.0/session-type-7-2","children":[]},{"id":"ci_db874f860ebd444159c3283e6a6429b25b3d85e65a301ccce44db086ce778fbc","title":"Size","path":"/lrsiem/7.21.0/size","children":[]},{"id":"ci_c98bc8e06ad582e8ff2274a09e2909c9be90b32ebb2aec15c57face49d4af240","title":"Status [7.2]","path":"/lrsiem/7.21.0/status-7-2","children":[]},{"id":"ci_2dd04089dccaa92b00571a905b9d7377f2f092af3af08758c7de71a8f1b7cbe7","title":"Subject","path":"/lrsiem/7.21.0/subject","children":[]},{"id":"ci_c6fb6f70c7fee1ef36212910b37f3aa0afe28384e26c7d20b7fe87b9fd04874b","title":"URL","path":"/lrsiem/7.21.0/url","children":[]},{"id":"ci_6a9e94df6463593b47f4a73a37b9b33a5a102463410709102a91d9bb701b305a","title":"User Agent [7.2]","path":"/lrsiem/7.21.0/user-agent-7-2","children":[]},{"id":"ci_ca82817725d1316f027d0b35c0da2cdc683462599796a0d5908125d9268096de","title":"Version","path":"/lrsiem/7.21.0/version","children":[]}]},{"id":"ci_f4bef6b7f2bda4396b8bfd0d84be657df17c70154a7d11b26907ad60955747d7","title":"Kbytes/Packets Tab","path":"/lrsiem/7.21.0/kbytes-packets-tab","children":[{"id":"ci_a9220d35b8e98c5d416b381f80d86328d9d1158392bde169f51716e7611ed357","title":"[prefix] [Bits/Bytes] [blank/In/Out]","path":"/lrsiem/7.21.0/prefix-bits-bytes-blank-in-out","children":[]},{"id":"ci_a984e7db219f63a2edb5db8cccc47597b94411dfc0798caccde51868d7377aec","title":"Packets [Total/In/Out]","path":"/lrsiem/7.21.0/packets-total-in-out","children":[]}]},{"id":"ci_0c4e452cd7cf9609aa27e95c383884e9d51325fe67a05bdb119d5bda4a489dff","title":"Classification Tab","path":"/lrsiem/7.21.0/classification-tab","children":[{"id":"ci_6b8f71cd5c87828095382bc418e9d988977e0a7c55b3b99384df67165e3f5655","title":"CVE [7.2]","path":"/lrsiem/7.21.0/cve-7-2","children":[]},{"id":"ci_e30115cf5344d08a7d3a34ca26ba55b52f2e9e0a22bb8dd5f3fec0293ea74a7c","title":"Severity","path":"/lrsiem/7.21.0/severity","children":[]},{"id":"ci_dd4a410bd05140189d4bc5b9fc6aa71683722da2d810d344fd0969e08165b478","title":"Threat ID [7.2]","path":"/lrsiem/7.21.0/threat-id-7-2","children":[]},{"id":"ci_028653ecea5536cfbe6e836408bc6ad2ae40445b49943d6ba7892f295647ffa0","title":"Threat Name [7.2]","path":"/lrsiem/7.21.0/threat-name-7-2","children":[]},{"id":"ci_6b9517acad6da8fc4eb6ab2cc59378970bf4500cdd62384e2365670e749943bb","title":"Vendor Info [7.2]","path":"/lrsiem/7.21.0/vendor-info-7-2","children":[]},{"id":"ci_89312d7d854e6c0c525c734ac57754a42fd37381c4d6dd80bbddbf4ebdc48ce9","title":"Vendor Message ID","path":"/lrsiem/7.21.0/vendor-message-id","children":[]}]},{"id":"ci_e5faefbf9e51fc3d76fa3a958ea17eb12f961aa7b85e2b71dc518e4df5b0ae89","title":"Host Tab","path":"/lrsiem/7.21.0/host-tab","children":[{"id":"ci_9fe170561e48bfbbc4b53cf8549710afd6a14c20a3eaedd1ddbf7eadcbb85c31","title":"DIP/DestinationIP/Impacted IP","path":"/lrsiem/7.21.0/dip-destinationip-impacted-ip","children":[]},{"id":"ci_8c07d8367e39e53cdaf182e654328e9aaa13e70bfcfc1ffa517d803b59b5a06f","title":"DIPv4","path":"/lrsiem/7.21.0/dipv4","children":[]},{"id":"ci_8957817ba43a2bdcbed9b2f8596a50d9805556880e263a30f91c4a0772a7901a","title":"DIPv6","path":"/lrsiem/7.21.0/dipv6","children":[]},{"id":"ci_685b3e4dfeba6aeb7556a0341d66811f1511d73e5759df326c3f4a822bdf4db8","title":"DIPv6E","path":"/lrsiem/7.21.0/dipv6e","children":[]},{"id":"ci_25ffea798fcd39128cb812ab5e4c821ba473e0481ed437c9f2bb968a9379af57","title":"Impacted Hostname","path":"/lrsiem/7.21.0/impacted-hostname","children":[]},{"id":"ci_3e9f407e2269824f99780e5090a88598669e8dbb874a558bedeec2ea13fccd2f","title":"Impacted Hostname or IP","path":"/lrsiem/7.21.0/impacted-hostname-or-ip","children":[]},{"id":"ci_8652421b89781200f882f77280b602405ba67464a45a1ce2f70e27827fa748f7","title":"Impacted Interface","path":"/lrsiem/7.21.0/impacted-interface","children":[]},{"id":"ci_19a0d64b72d7bd10b0926a909d6ed0acfef2393fea3d40e3f05e85e9ff8d8d83","title":"Impacted MAC Address","path":"/lrsiem/7.21.0/impacted-mac-address","children":[]},{"id":"ci_eb5b61be5b20ab0601534214b857675dd3480b7833dbb3694093975492375841","title":"Impacted NAT IP","path":"/lrsiem/7.21.0/impacted-nat-ip","children":[]},{"id":"ci_43202ab1c54d2217537a171c6bf4edfc7db78c434d54b68d0b4385837cb779c8","title":"IP Address (Origin)","path":"/lrsiem/7.21.0/ip-address-origin","children":[]},{"id":"ci_a93a7781fc8793ba6baefed0bc71d08922b1c920dbdae89d20f2712038292c7e","title":"Origin Hostname","path":"/lrsiem/7.21.0/origin-hostname","children":[]},{"id":"ci_0a1f5141eadfe79af04ed01f4d10c729cb230b52d11b8c589bacd7d50a4bb3da","title":"Origin Hostname or IP","path":"/lrsiem/7.21.0/origin-hostname-or-ip","children":[]},{"id":"ci_af82e7e3d201325a7690a64af4671be94dcca129f2ee5fe7873e3bc427f27270","title":"Origin Interface","path":"/lrsiem/7.21.0/origin-interface","children":[]},{"id":"ci_e1d006bfa43cb077ee0f7e3dfb096f52079ec6546983fad4e34c9d508ec6d9a3","title":"Origin MAC Address","path":"/lrsiem/7.21.0/origin-mac-address","children":[]},{"id":"ci_1b2ac763a94631f917849ba7f41b21b5926373cbc5624bac185c502a0f7d9b2b","title":"Origin NAT IP","path":"/lrsiem/7.21.0/origin-nat-ip","children":[]},{"id":"ci_2f8e2cecb9a53d5dd2bd98c2a404db7fa1328529a5f181203e655dbf3e68fc24","title":"Serial Number [7.2]","path":"/lrsiem/7.21.0/serial-number-7-2","children":[]},{"id":"ci_371befa21a9d4d22cd3202376967d6e4d0ee89d5b20a6cbd0f5de9f7bdc9eb02","title":"SIPv4","path":"/lrsiem/7.21.0/sipv4","children":[]},{"id":"ci_6d80261e57d6e1563534c58eba40c1f12d671acccc8424b7cfb054bcc5fedc9d","title":"SIPv6","path":"/lrsiem/7.21.0/sipv6","children":[]},{"id":"ci_a1fcd56adb7a331a9e1d2a287f25f2f39f962ffbc32b8f5bc81c2743683ea421","title":"SIPv6E","path":"/lrsiem/7.21.0/sipv6e","children":[]}]},{"id":"ci_e877a84de4769b7bd7dbe2784564da40dd631d629d8955424a2599147bb91a5c","title":"Identity Tab","path":"/lrsiem/7.21.0/identity-tab","children":[{"id":"ci_9d0fb25f8af8db8b14e54875d5e09dbdba925890036693e83feba97c69736fc8","title":"Account > User (Impacted)","path":"/lrsiem/7.21.0/account-user-impacted","children":[]},{"id":"ci_688c081a8d228386a9f1603a58fb676220f86d6362d8d6ff1f23d8d0e6a5341e","title":"Group","path":"/lrsiem/7.21.0/group","children":[]},{"id":"ci_fd68c35f15d90ab8a46c17b11e6df758269e40e3e3e0d544cefd9dab57ff1c17","title":"Login > User (Origin)","path":"/lrsiem/7.21.0/login-user-origin","children":[]},{"id":"ci_df6de6a6a18f3de462c6a20be0a15e3c109d80d3381320cdfe36f783a033a093","title":"Recipient","path":"/lrsiem/7.21.0/recipient","children":[]},{"id":"ci_f9bd5b1ed0e60e3d8c658c2c3ddd6018eabc7634ed70834eff9098734e99db65","title":"Sender","path":"/lrsiem/7.21.0/sender","children":[]}]},{"id":"ci_55b302b504d6d8c4559bf6fb868191eb5fc14531c9ca0aa3c8ad78b1dc7fdfe8","title":"Location Tab","path":"/lrsiem/7.21.0/location-tab","children":[]},{"id":"ci_0d9dfca0dc64e069c44a214ba34b136cad1500a95b6073e253d8637d52b5defa","title":"Log Tab","path":"/lrsiem/7.21.0/log-tab","children":[]},{"id":"ci_09fe2c82bb5e4db2973bcdea61de0a5658983293fbdbab602df7edb80029290e","title":"Network Tab","path":"/lrsiem/7.21.0/network-tab","children":[{"id":"ci_a7d985cd234e7cd238c316b35f3aacdf40db8c0a862f3b60fc987d1d0e6b1a24","title":"Domain (Origin) [7.4]","path":"/lrsiem/7.21.0/domain-origin-7-4","children":[]},{"id":"ci_e5cbf970fc9a5f8be4abf9f202901ecd6a34938a062ac4adba75a0f1077e5a1b","title":"Domain [7.2] (Domain (Impacted))","path":"/lrsiem/7.21.0/domain-7-2-domain-impacted","children":[]},{"id":"ci_c3f05629e1d26945eb0bbdf4301239b38b090ce079b8f39d6444bf699f6845a2","title":"Impacted NAT Port","path":"/lrsiem/7.21.0/impacted-nat-port","children":[]},{"id":"ci_936875bf21374fd1ec2609bf5d76e6ddf500d866427c8539ffd2a6f9b632dda9","title":"Impacted Port","path":"/lrsiem/7.21.0/impacted-port","children":[]},{"id":"ci_39c5409b2a350bd6fb675f17e7532305845db07438dfaf0ab879493ccc854659","title":"Origin NAT Port","path":"/lrsiem/7.21.0/origin-nat-port","children":[]},{"id":"ci_802c5d8c4293d8ca323649451a24dea6f3f284f0f19a79d93bc7eecb55863b38","title":"Origin Port","path":"/lrsiem/7.21.0/origin-port","children":[]}]},{"id":"ci_984c8875eda275ffe2db8c5a60598313ea8658c589254d341495dff3863c33fd","title":"Other MPE Fields","path":"/lrsiem/7.21.0/other-mpe-fields","children":[{"id":"ci_daf938575eb7eac3e290ab607bdc16bf83afeefa9346dfbeb6814266d18cdb27","title":"[Tag1-Tag5]","path":"/lrsiem/7.21.0/tag1-tag5","children":[]},{"id":"ci_69688bd961940c8a8cef0e95dea64032a7142be1225017f80593ef9ce95a927b","title":"Items In","path":"/lrsiem/7.21.0/items-in","children":[]},{"id":"ci_53d6d33a85d88bee8f8884c4ea1686bf632a3b9b69251027ac6af9b677a7a506","title":"Items Out","path":"/lrsiem/7.21.0/items-out","children":[]}]},{"id":"ci_d9bed4ec97f1c8953aefe93f9bfb2204a057211a84c4ec47325ba8ea4ef0fad2","title":"Derived Data","path":"/lrsiem/7.21.0/derived-data","children":[{"id":"ci_d8aaf0370324dc8c163b5362216b4905d0b18c80a39f10b83faf5a6c87bc15a6","title":"Identity-Derived Data","path":"/lrsiem/7.21.0/identity-derived-data","children":[]},{"id":"ci_8cb24527e1678eb00e57900b2850289f9edb6118d07775a07bee1feae831622b","title":"Log-Derived Data","path":"/lrsiem/7.21.0/log-derived-data","children":[]}]}]},{"id":"ci_180d3e231ffdc0b98ef219fd8994b26cdd911981beb4f49472f6c47f1a8dbce1","title":"Other LogRhythm Applications","path":"/lrsiem/7.21.0/other-logrhythm-applications","children":[{"id":"ci_8f8eec257cebfcf50fe2191ad40f605e4075c978f9545aed8f195cd72e88cf97","title":"Threat Intelligence Service","path":"/lrsiem/7.21.0/threat-intelligence-service","children":[{"id":"ci_4e852a182519d4391f3e8b796164aa4b174d2043fff6342639abe8dbde41846a","title":"Install and Deploy the Threat Intelligence Service","path":"/lrsiem/7.21.0/install-and-deploy-the-threat-intelligence-service","children":[{"id":"ci_99095b1bb3cdf77fa91d48975fd89236eb4572c2daaa415420d3ee3e8d8a37f3","title":"Run the Threat Intelligence Service Installer","path":"/lrsiem/7.21.0/run-the-threat-intelligence-service-installer","children":[]},{"id":"ci_a48a629259050ef45a9d9c77048c903c65f6a82754bc0c0a95797c5cff93f50d","title":"Modify, Repair, or Remove the Threat Intelligence Service","path":"/lrsiem/7.21.0/modify-repair-or-remove-the-threat-intelligence-service","children":[]},{"id":"ci_1589736bcb40d7366ea4d331775266b9bdc34046a95ab6078ff297e56c0409c8","title":"Enable and Import the Threat Intelligence Service Modules","path":"/lrsiem/7.21.0/enable-and-import-the-threat-intelligence-service-modules","children":[]},{"id":"ci_badd7f923570e89534064e4220b311144324a2917adf57c1c09f482e892c0862","title":"Associate Vendor Lists with LogRhythm Lists","path":"/lrsiem/7.21.0/associate-vendor-lists-with-logrhythm-lists","children":[]},{"id":"ci_26be85072e54b3ac5e6e702974472e9dbde9f930b32cc056f48da6eccbce9243","title":"Enable Threat List AIE Rules","path":"/lrsiem/7.21.0/enable-threat-list-aie-rules","children":[]},{"id":"ci_12c8dd7339a64e41ba8347eae0feff49cd9c262af0f691c8af0e53642c5f024b","title":"Start the LogRhythm Threat Intelligence Service","path":"/lrsiem/7.21.0/start-the-logrhythm-threat-intelligence-service","children":[]},{"id":"ci_a6187e42c786d3a58977dd3256a6cceb245a23772ddde7384498be0cf488ed5d","title":"Vendor Lists","path":"/lrsiem/7.21.0/vendor-lists","children":[{"id":"ci_cf3aab80325a64abb8590c1611f0d92e523b27bb406aaf8adb4e831b0ad4761d","title":"BrightCloud","path":"/lrsiem/7.21.0/brightcloud","children":[]},{"id":"ci_0c9ad54b93aa3c5c1a78ca533879fe4dedfc4447533cc381724cdb23a3ad7691","title":"CrowdStrike","path":"/lrsiem/7.21.0/crowdstrike","children":[]},{"id":"ci_8b92c4ae668d7f0a2f94dfcaa42d5a2838855fe9b80d4bd973cbfb292623c876","title":"Cisco AMP Threat Grid","path":"/lrsiem/7.21.0/cisco-amp-threat-grid","children":[]},{"id":"ci_07e5fc935bf888baa02b2203a9fdcae2d0046df59b0aa3b3b85b41276d4fc271","title":"Symantec","path":"/lrsiem/7.21.0/symantec","children":[]},{"id":"ci_5f6d27bdfd08aa35549cd88684c53f3e454ebea991f1302cd58e9c9d3141bf2a","title":"Open Source","path":"/lrsiem/7.21.0/open-source","children":[]},{"id":"ci_490e26aca5910bfea1df6cd8dbd27691ece9d4958134fbf0a3886558f0702303","title":"Custom Providers","path":"/lrsiem/7.21.0/custom-providers","children":[]}]}]},{"id":"ci_cd7b2a649d7868efc184847f4bfc01a878681b300691c4c4e1f88431d5721fc5","title":"Threat Intelligence Service User Guide","path":"/lrsiem/7.21.0/threat-intelligence-service-user-guide","children":[{"id":"ci_3b6e6d6fc9e56bddff98690320a88b9a6f22026a49bc72476ea449e9a5fe1ac0","title":"Launch the Service Manager","path":"/lrsiem/7.21.0/launch-the-service-manager","children":[]},{"id":"ci_4a60b3ae1f2345bfcd3b19f64a48e8a6439a52d7791724d1d80df098b4f72c1c","title":"Configure the Connection to LogRhythm","path":"/lrsiem/7.21.0/configure-the-connection-to-logrhythm","children":[]},{"id":"ci_c4c710212c05cd71f758ce06416a174fe0a6231729622f35cd81d7546d3a3509","title":"Configure Proxy Settings","path":"/lrsiem/7.21.0/configure-proxy-settings","children":[]},{"id":"ci_bd3205fc751b16af636f7b2bd6c8473ba6833ab0a6384b696b754bf59465ca01","title":"Configure Vendor Threat Feeds","path":"/lrsiem/7.21.0/configure-vendor-threat-feeds","children":[]},{"id":"ci_177f23613afebd2892c799ba34334895f919390163cc26f06cd2834474f4b561","title":"Add a Custom STIX/TAXII Provider","path":"/lrsiem/7.21.0/add-a-custom-stix-taxii-provider","children":[{"id":"ci_4415f2672d735c7c8c462a18769bbd60c048c2364465bb96787994f60554df2f","title":"Add a STIX Feed in TIS","path":"/lrsiem/7.21.0/add-a-stix-feed-in-tis","children":[]},{"id":"ci_434cfd45368f9bca227f92327bd5e27d40f70560ad2ac37bc10991e8980276bb","title":"Configure CustomObjectType in STIX/TAXII Feeds in TIS","path":"/lrsiem/7.21.0/configure-customobjecttype-in-stix-taxii-feeds-in-tis","children":[]}]},{"id":"ci_01acb0c07ae9f3657183ad1b8d5a61777c7c78708ca5139ae5d67b2814d02fb7","title":"Start and Stop the Service","path":"/lrsiem/7.21.0/start-and-stop-the-service","children":[]},{"id":"ci_98e11011e0109cd1e462df715b1fcc0b79ce1ca166346875b5af6d889b7e0a15","title":"Configure the Threat Intelligence Service Whitelist","path":"/lrsiem/7.21.0/configure-the-threat-intelligence-service-whitelist","children":[]},{"id":"ci_c9f2f4d1f0cfb96eb27f90fd5aae0983129b354a9ff1a10f87e583ab1c8416ec","title":"URL Normalization","path":"/lrsiem/7.21.0/url-normalization","children":[]},{"id":"ci_7b563a2c6118ec7bab452af756c4e54dfe4f1926d21b345cecca58773a630e44","title":"Request Response Logging","path":"/lrsiem/7.21.0/request-response-logging","children":[]},{"id":"ci_0dc5934364dbb11523629ae581776a17ffce992780445683a4aa0825c62d303f","title":"View Log Files","path":"/lrsiem/7.21.0/view-log-files","children":[]},{"id":"ci_0f3c96a856593a5ee9eb27125203cc65bb1690c860991eabcb8c1591284e83f0","title":"Troubleshoot the Threat Intelligence Service","path":"/lrsiem/7.21.0/troubleshoot-the-threat-intelligence-service","children":[{"id":"ci_c4bce31e555ce7adfbb71828c8095d80e2a870eb5e291115d11392b82458c03a","title":"Firewall Blocking Open Source URLs in TIS","path":"/lrsiem/7.21.0/firewall-blocking-open-source-urls-in-tis","children":[]},{"id":"ci_f2dcbe6fc4268899ace5e132e124ee2ad8ee5df672a4199a79324399189be4c6","title":"Log Files in TIS","path":"/lrsiem/7.21.0/log-files-in-tis","children":[]},{"id":"ci_5c36d1d97652b46abc006473167541b1521a67b0f0c179f45e41fe88c2960c12","title":"Resource Utilization in TIS","path":"/lrsiem/7.21.0/resource-utilization-in-tis","children":[]},{"id":"ci_508ff28d5cfe489ebd8b545e7ea0442211b0965dbe96c7df26ac67c252905f36","title":"Threat Intelligence Service Will Not Start","path":"/lrsiem/7.21.0/threat-intelligence-service-will-not-start","children":[]}]}]}]},{"id":"ci_39f78e49559c7b127e271d014f4e3dc4040c883dfff8e6a478ef901fa19c5f04","title":"LogRhythm Intelligence","path":"/lrsiem/7.21.0/logrhythm-intelligence","children":[{"id":"ci_11e08dff2d4f77c675bb3269f14d11a05d4163c5740524ee8a031c74bd752ccd","title":"LogRhythm Intelligence Threat Summary","path":"/lrsiem/7.21.0/logrhythm-intelligence-threat-summary","children":[]},{"id":"ci_629830372346a8ab2ce65ffb97c6a9a415bc7685dd067d0e2188442f79397b9e","title":"LogRhythm Intelligence Cloud Data Security","path":"/lrsiem/7.21.0/logrhythm-intelligence-cloud-data-security","children":[]}]},{"id":"ci_efc475227cd55fbcb232724c5e355c73c10327639f4ecc74a028ab932fb39e57","title":"LogRhythm Diagnostics Tool","path":"/lrsiem/7.21.0/logrhythm-diagnostics-tool","children":[{"id":"ci_2957b40353b297e649d2f11b19d5cfb449f9abc68667d540026c52a8fb7d5b66","title":"Install the Diagnostics Agent and Diagnostics Tool","path":"/lrsiem/7.21.0/install-the-diagnostics-agent-and-diagnostics-tool","children":[]},{"id":"ci_3b4fb6ea537cf2d6277ede22437bf00e3dd8dc28bbd5c136f15ba5e32a2e9806","title":"Configure Collection on the Diagnostics Tool","path":"/lrsiem/7.21.0/configure-collection-on-the-diagnostics-tool","children":[]},{"id":"ci_450ce6d68c6ccd42b35806ad8eae8efeaf884174a82ad467ec09e0870e09b50c","title":"Tabs in the Diagnostic Tool","path":"/lrsiem/7.21.0/tabs-in-the-diagnostic-tool","children":[]},{"id":"ci_7dfea3b5613a84710fce24bd543c2c660d18de8df663920c7b2cdc3ffb25b1d3","title":"Log Files and Data Collected by the Diagnostic Tool","path":"/lrsiem/7.21.0/log-files-and-data-collected-by-the-diagnostic-tool","children":[]},{"id":"ci_e500dcf862f23cfdd3f5d5f5f82cb5bf03bf14f7e35e2d8eab21ee4c0d02c84e","title":"Detailed .zip File Contents From the Diagnostics Tool","path":"/lrsiem/7.21.0/detailed-zip-file-contents-from-the-diagnostics-tool","children":[]}]},{"id":"ci_40b2a0db417207dd88f96755ca28405c0b9d2e25e3ec38c6819e38d2d1a0c806","title":"LogRhythm Echo","path":"/lrsiem/7.21.0/logrhythm-echo","children":[{"id":"ci_53cd6ee08df11b06a4eef428e7972d982bfedbafa2040daed8a681cff823ce91","title":"Install or Upgrade LogRhythm Echo","path":"/lrsiem/7.21.0/install-or-upgrade-logrhythm-echo","children":[]},{"id":"ci_74b238bee2d5acd3d7019e250094bd30d39f26d9b53a65711a932894e32d659c","title":"Configure LogRhythm Echo","path":"/lrsiem/7.21.0/configure-logrhythm-echo","children":[]},{"id":"ci_75bb57094274f38a86e97b2cb8254ac310f4ad600db74b4279400373cb429dd2","title":"Manage LogRhythm Echo Use Cases","path":"/lrsiem/7.21.0/manage-logrhythm-echo-use-cases","children":[]},{"id":"ci_0f8e5e0176f0ed9426062b6583b7e880b830ccef411f722f99d7c93a017b147c","title":"Run LogRhythm Echo Use Cases","path":"/lrsiem/7.21.0/run-logrhythm-echo-use-cases","children":[]},{"id":"ci_38571d93452c13b12ab31f27eda4df85f62509abd1e6a1fefebb9048e65e412e","title":"Schedule LogRhythm Echo Use Cases","path":"/lrsiem/7.21.0/schedule-logrhythm-echo-use-cases","children":[]},{"id":"ci_96b1af1a365a91489f88f59eba7d27e2df7618faee2ebd4d21c1845ca7af076d","title":"LogRhythm Echo API","path":"/lrsiem/7.21.0/logrhythm-echo-api","children":[]},{"id":"ci_fa44e603d71b4f5cb724afffe085a38168cce8f93b3668f2ee754c8a134c1cb3","title":"LogRhythm Echo Troubleshooting","path":"/lrsiem/7.21.0/logrhythm-echo-troubleshooting","children":[]},{"id":"ci_1bcd784d221e9d41039fa3a6330e74ffdd53321ec0e733e0c9b3892fb94401df","title":"LogRhythm Echo Use Case DB","path":"/lrsiem/7.21.0/logrhythm-echo-use-case-db","children":[]},{"id":"ci_a86cb03de8a8257abb43d60384b78aabe00557f1525150d62d233dca5309abd4","title":"LogRhythm Echo Use Cases and Their AIE Rules, Lists, and SmartResponses","path":"/lrsiem/7.21.0/logrhythm-echo-use-cases-and-their-aie-rules-lists-and-smartresponses","children":[]}]},{"id":"ci_cf5d55b98916cd90a3bd32d296353d15dc595c1762bcc1852b398a5be42ccfb9","title":"TrueIdentity Sync Client User Guide","path":"/lrsiem/7.21.0/trueidentity-sync-client-user-guide","children":[{"id":"ci_939bb1d7ec93ca00df1995b0c90b57b124432334f8882a8a0296cb6af52e1fb9","title":"TrueIdentity Sync Client Release Notes","path":"/lrsiem/7.21.0/trueidentity-sync-client-release-notes","children":[]},{"id":"ci_3a2d160a338034ee4d6de71d9d2dbdd88380f652186d37a925a9cc9cc8694a39","title":"Install the TrueIdentity Sync Client","path":"/lrsiem/7.21.0/install-the-trueidentity-sync-client","children":[]},{"id":"ci_a931a549ce8226c0f40cb5c76a09ea6ffedfd154dc8ff7e27afed994c37b4971","title":"Create Custom Certificates","path":"/lrsiem/7.21.0/create-custom-certificates","children":[]},{"id":"ci_df2b0c008a3652f18f52b00520133229145d74e44ba81b17beb5a8e7d78d2a12","title":"Generate LR API Token","path":"/lrsiem/7.21.0/generate-lr-api-token","children":[]},{"id":"ci_a975916addf4ab8573a5090efc9f157d00c7f64550e77d8f0160e1348234ec29","title":"Launch the TrueIdentity Sync Client","path":"/lrsiem/7.21.0/launch-the-trueidentity-sync-client","children":[]},{"id":"ci_16437d7b1e312d8b4c4e97919c0a3a6ddc1d7cc04d2fd429560dc3a4307aa5b5","title":"Add a TrueIdentity Sync Job","path":"/lrsiem/7.21.0/add-a-trueidentity-sync-job","children":[]},{"id":"ci_3a585cb5d55bf749018465d8d1416cbe2491d6e288ac4a399df180717a4f5609","title":"View Synchronized TrueIdentities","path":"/lrsiem/7.21.0/view-synchronized-trueidentities","children":[]},{"id":"ci_4caa50e7a161f4cc0a11ba4252969d528c9f3ef9e323d2739ccf7324898ce45a","title":"Troubleshoot the TrueIdentity Sync Client","path":"/lrsiem/7.21.0/troubleshoot-the-trueidentity-sync-client","children":[]}]},{"id":"ci_ded1c8657c373eb208af0f711183ff602d2739e516be747bd007d25c88112758","title":"Using Kibana with LogRhythm SIEM","path":"/lrsiem/7.21.0/using-kibana-with-logrhythm-siem","children":[]},{"id":"ci_1a59ac0d47062cc8a52d382d749718b498644370585c9489c2c43a3c4a725484","title":"DX Upgrade Checker","path":"/lrsiem/7.21.0/dx-upgrade-checker","children":[]}]},{"id":"ci_5c693a0a8d528a6cd7779502ed91a677b139c4daff161ac7a0fed01ffa7e4a06","title":"Understand the LogRhythm Architecture","path":"/lrsiem/7.21.0/understand-the-logrhythm-architecture","children":[{"id":"ci_e998f85b53c32c31cc1cf3411418ece9b5e7f9a1db53c858859a67e1d98c22a7","title":"Licensing","path":"/lrsiem/7.21.0/licensing","children":[]},{"id":"ci_111da336195cd09ec4f62d3ff7db4e947710159f093a91cbe05929166238578e","title":"Log Processing","path":"/lrsiem/7.21.0/log-processing","children":[{"id":"ci_cf0a2566bb0c77fd4c8b472dec57f0ece1a316cc8c2885b649e07bcd9deb3bfe","title":"Audit Classifications","path":"/lrsiem/7.21.0/audit-classifications","children":[]},{"id":"ci_b11a939abda8a1aaccc894d5a40350dc42c12a0a6fa116616ab5d6e5f91f17ad","title":"Configuration and Log Processing","path":"/lrsiem/7.21.0/configuration-and-log-processing","children":[]},{"id":"ci_51626c8b12b8a7a5659f4dd79eb2f3f90451ba0d0ae59dcbbf382529b140ebe4","title":"Operations Classifications","path":"/lrsiem/7.21.0/operations-classifications","children":[]},{"id":"ci_c0accb20fd2a81dc3808b7f2648e32decfc2177f776a407c4c5bb3a1a1600737","title":"Security Classifications","path":"/lrsiem/7.21.0/security-classifications","children":[]}]},{"id":"ci_06caeccc3077cc0a394aadae78bc41c2741873d73792b1df2e25488e654ec370","title":"LogRhythm SIEM Databases","path":"/lrsiem/7.21.0/logrhythm-siem-databases","children":[]},{"id":"ci_dc1c6da410887264fc2ed0a65716cba6f8c1b6181a246ca8c3e1f8ebbebd4734","title":"Logs, Events, and Alarms","path":"/lrsiem/7.21.0/logs-events-and-alarms","children":[]},{"id":"ci_d5fcf79b6794bca8fea9e8dc33ade68998ac974cf9fc4a3b4858f7188b759130","title":"Networking and Communication","path":"/lrsiem/7.21.0/networking-and-communication","children":[]},{"id":"ci_7cfc23747d0e388ce5143a919f86a34048121f0493942d4373cbcfd259f71fef","title":"Component Reference","path":"/lrsiem/7.21.0/component-reference","children":[]}]},{"id":"ci_3c53ffd08477f5832acfc187b767a85bfc6376fefcf88ec8c8c1c9fae78dd127","title":"Find More Information","path":"/lrsiem/7.21.0/find-more-information","children":[{"id":"ci_930ea822c2893ec3e9b0c598158f46f7f9734e4977fd9c02ddd45006fae5fe72","title":"Customer Support Guide","path":"/lrsiem/7.21.0/customer-support-guide","children":[]},{"id":"ci_fb0cf4799e1e8566cdda6e1ac92e5072a01a88cd1cd25e92387b148e75360ab7","title":"End of Life Policies for Software and Hardware","path":"/lrsiem/7.21.0/end-of-life-policies-for-software-and-hardware","children":[]},{"id":"ci_384aeee601d7c7379e5677a7c0d4dde8fd2654813cabcd18e1cf4856b48c4b62","title":"Glossary of LogRhythm Products and Components","path":"/lrsiem/7.21.0/glossary-of-logrhythm-products-and-components","children":[]},{"id":"ci_7f36e8d92a5734c510eb32d1a169152e7a1a8074e1205eaec1514e44d5682fc6","title":"Open Source License Acknowledgements","path":"/lrsiem/7.21.0/open-source-license-acknowledgements","children":[]},{"id":"ci_531c738c77d6832d9e39e334bc0d4f46441ff3c5a48129d12854762eed14b79d","title":"Upgrade FAQ and Determining the Correct Upgrade Path","path":"/lrsiem/7.21.0/upgrade-faq-and-determining-the-correct-upgrade-path","children":[]}]},{"id":"ci_9117fbabfb0a6c3c1d14e4d6ae0fea27e6fffa455579c18e754103c9f907750b","title":"Download PDFs","path":"/lrsiem/7.21.0/download-pdfs","children":[]}]