[{"id":"ci_122dc2c91c6fe5c95d6d5e3376dbbcd6afdf34a062c7e8fe710f621a4add9e9e","title":"LogRhythm Release Notes","path":"/lrsiem/7.22.0/logrhythm-release-notes","children":[{"id":"ci_618572e3fdbeb45e8660fe6f343ad5f5e00c8b29ac0a7d413e181c0513dc1927","title":"7.22.0 GA Release Notes - 1 October 2025","path":"/lrsiem/7.22.0/7-22-0-ga-release-notes-1-october-2025","children":[]},{"id":"ci_7e3e18a81650fb688247ebb379c74486643709b482e42a92e7411e7e30b647f2","title":"7.21.0.97 Release Notes - 6 August 2025","path":"/lrsiem/7.22.0/7-21-0-97-release-notes-6-august-2025","children":[]},{"id":"ci_a02a61de2f478260fc6231f8f5952c47e735dcf940a7c17a68e52cbfa63d15c2","title":"7.21.0 GA Release Notes - 1 July 2025","path":"/lrsiem/7.22.0/7-21-0-ga-release-notes-1-july-2025","children":[]},{"id":"ci_c84f256453031169f6abb42a65fb2b282457718528b80e1af95d6116980e21dd","title":"7.20.0.71 Release Notes - 23 April 2025","path":"/lrsiem/7.22.0/7-20-0-71-release-notes-23-april-2025","children":[]},{"id":"ci_cf8ca0a4af3bd036f94280ee843a3e39f4bf74d2089489bf623b6d83c861d0bd","title":"7.20.0 GA Release Notes - 1 April 2025","path":"/lrsiem/7.22.0/7-20-0-ga-release-notes-1-april-2025","children":[]},{"id":"ci_bb8f4cbc5301ed6bb465287a19b30322276fc5349f6e3d2f5e3c6bad8ca86b46","title":"7.19.0.54 Release Notes - 3 February 2025","path":"/lrsiem/7.22.0/7-19-0-54-release-notes-3-february-2025","children":[]},{"id":"ci_d85f2559840eb5fa018484a320d45c503de43c4881f717255286e5afe6ecd607","title":"7.19.0 GA Release Notes - 7 January 2025","path":"/lrsiem/7.22.0/7-19-0-ga-release-notes-7-january-2025","children":[]},{"id":"ci_fbdfd169cae694bd3e415b7204524a09659a8085ca1c0940b30ecb2275490b83","title":"7.18.0.48 Release Notes - 7 November 2024","path":"/lrsiem/7.22.0/7-18-0-48-release-notes-7-november-2024","children":[]},{"id":"ci_aa6f35f52a1eb54ab6bd60e99f9afc8c62f75df616e3a5c5dedf95c8800bcf61","title":"7.18.0.46 Release Notes - 31 October 2024","path":"/lrsiem/7.22.0/7-18-0-46-release-notes-31-october-2024","children":[]},{"id":"ci_217e8d3e31e5b77ffacdbf00160ca747a894d21e236fb56962b7677dae016f9c","title":"7.18.0 GA Release Notes - 1 October 2024","path":"/lrsiem/7.22.0/7-18-0-ga-release-notes-1-october-2024","children":[]},{"id":"ci_1e2a9d484a2595ac7ce874134afeb49db989f3076f373705612443ca1fc2d90c","title":"7.17.0.55 Release Notes - 12 August 2024","path":"/lrsiem/7.22.0/7-17-0-55-release-notes-12-august-2024","children":[]},{"id":"ci_47bd4db46422d8cf4f2911a421b2c3625eedc78a9fec2470d3b87e6bd662776e","title":"7.17.0 GA Release Notes - 1 July 2024","path":"/lrsiem/7.22.0/7-17-0-ga-release-notes-1-july-2024","children":[]},{"id":"ci_d0570c69e4d52ce84644e9701df80645f00211d8622e4faff1dff57299cf1d11","title":"7.16.0.45 Release Notes - 24 April 2024","path":"/lrsiem/7.22.0/7-16-0-45-release-notes-24-april-2024","children":[]},{"id":"ci_8086d2c8ecc659cde5a38df161dc9622c7510a8b481cda3a73c094bb894eab37","title":"7.16.0 GA Release Notes - 1 April 2024","path":"/lrsiem/7.22.0/7-16-0-ga-release-notes-1-april-2024","children":[]},{"id":"ci_d03986587284e6d6995f844684505b697224b421fabe0fe731a0c985ee7e5fce","title":"7.15.0.64 Release Notes - 5 February 2024","path":"/lrsiem/7.22.0/7-15-0-64-release-notes-5-february-2024","children":[]},{"id":"ci_3f0d68dd4686318d4874e6812573c403af7090b6f0e9b535b138ec661ad210f6","title":"7.15.0 GA Release Notes - 4 January 2024","path":"/lrsiem/7.22.0/7-15-0-ga-release-notes-4-january-2024","children":[]},{"id":"ci_10479e52f1d5a7fd9036edd6eb4a5604128725c56e6f2e2eeb441587c3394f28","title":"7.14.0.107 Release Notes - 18 October 2023","path":"/lrsiem/7.22.0/7-14-0-107-release-notes-18-october-2023","children":[]},{"id":"ci_6964a81f13a5103ad7c3393e5b3848e207e735eea3a4df0cdd8ddd9e7b242997","title":"7.14.1 Release Notes - 13 November 2023","path":"/lrsiem/7.22.0/7-14-1-release-notes-13-november-2023","children":[]},{"id":"ci_1d0fa600ea51e8a8eb3d86a99b78034e2f20e6a9c6a591d106dca3311e8c6e64","title":"7.14.0 GA Release Notes - 2 October 2023","path":"/lrsiem/7.22.0/7-14-0-ga-release-notes-2-october-2023","children":[]}]},{"id":"ci_9c9642b433cbea83ec54165b2a13fd75e5f1924ba74465b3bca73d72400a9432","title":"Get Started with LogRhythm SIEM","path":"/lrsiem/7.22.0/get-started-with-logrhythm-siem","children":[{"id":"ci_51cec7c7d5f6533e7ecc6e8b50f699907cbe8abd390b5cf48f2521a78361bc83","title":"Log in to the Client Console","path":"/lrsiem/7.22.0/log-in-to-the-client-console","children":[]},{"id":"ci_75e064ad391e4c6d02d9d8fc16dbca57737133f6153d8c465e73b03844279180","title":"Complete the New Deployment Wizard","path":"/lrsiem/7.22.0/complete-the-new-deployment-wizard","children":[]},{"id":"ci_e597180778fd8775997f69bceb2a40bbc3d7a26ea22d3bc39fdb204d1756d8e6","title":"Assign LogRhythm Licenses","path":"/lrsiem/7.22.0/assign-logrhythm-licenses","children":[]},{"id":"ci_1d6c0fda016216f94e08ea4e9bf6bc945fc9976ec4ef1ef5a428b4c305110e81","title":"Log in to the Web Console","path":"/lrsiem/7.22.0/log-in-to-the-web-console","children":[]},{"id":"ci_e5861594986dd310eeb0d644c873226a49a56116784b26d14330bf8da9737162","title":"Verify the Web Console Connection Status","path":"/lrsiem/7.22.0/verify-the-web-console-connection-status","children":[]},{"id":"ci_6704ea694dc8911ed235d7977bfa2595e5a5ee96ed8ec51701faa622178d566d","title":"Configure NetMon to Integrate with the Web Console","path":"/lrsiem/7.22.0/configure-netmon-to-integrate-with-the-web-console","children":[]}]},{"id":"ci_4656c2f24c9c6d6bcc9b53b175dfd6f0c62fd9b785e0148f9c64f95e201dd787","title":"Client Console Administrator Guide","path":"/lrsiem/7.22.0/client-console-administrator-guide","children":[{"id":"ci_2d12bde233709fca88de477f9cfc635057dc8d4cc80de83b9dfd5e27e96d969c","title":"Advanced Intelligence Engine","path":"/lrsiem/7.22.0/advanced-intelligence-engine","children":[{"id":"ci_a372061c31f6ecd2e9b3aadbec2b451cd3ff35c257868cecc40ad6cbc2737978","title":"Add AI Engine Servers","path":"/lrsiem/7.22.0/add-ai-engine-servers","children":[]},{"id":"ci_e237959c1e6375452e7100cbf123a1f6b7b32e4f5bfdc612b084a4afb2cc1ccf","title":"Apply Recommended Values to an AI Engine Server","path":"/lrsiem/7.22.0/apply-recommended-values-to-an-ai-engine-server","children":[]},{"id":"ci_0b9a88c8f4b075c53630b0d888e0b6c3269e9b32ec899d9b18d1c180989693e8","title":"Configure the Advanced Intelligence Engine","path":"/lrsiem/7.22.0/configure-the-advanced-intelligence-engine","children":[]},{"id":"ci_a9106615d0a2fb98eab6a739c9f613bb2be76f6c97bc214d26dd4841f0da3c07","title":"Create New AI Engine Rules","path":"/lrsiem/7.22.0/create-new-ai-engine-rules","children":[]},{"id":"ci_2b858b4c5407e02d3c7960539b9a2fddc066f77cfa078e8c468d2b00881fa0e4","title":"Define AI Engine Linked Data Block Relationships","path":"/lrsiem/7.22.0/define-ai-engine-linked-data-block-relationships","children":[]},{"id":"ci_1c15a4236354aca6036324f72078a846e6ea1c1f6493f0568c3ccdb5d6fac1a5","title":"Define AI Engine Rule Block Relationships","path":"/lrsiem/7.22.0/define-ai-engine-rule-block-relationships","children":[]},{"id":"ci_fa2433a6e80455a7f6cfd03ca98bbb7898f9ae7cdbb46824c8f1170ef636092e","title":"Drill Down on AI Engine Results","path":"/lrsiem/7.22.0/drill-down-on-ai-engine-results","children":[]},{"id":"ci_7fa9f9ffab9309da79244c103534e9ebb5e192f2b7cebd8bde5b153e07ec6b78","title":"Import or Export AI Engine Rules from the Grid","path":"/lrsiem/7.22.0/import-or-export-ai-engine-rules-from-the-grid","children":[]},{"id":"ci_ce6375a89a05a248338440693d90b9da7792a00e83d5a42b0b71c9a02011b836","title":"Modify AI Engine Rules","path":"/lrsiem/7.22.0/modify-ai-engine-rules","children":[]},{"id":"ci_d80c59a7f08731f445ff1ac7bc0f69acd778e34ad2bec636b3bbbf6699230835","title":"Restart AI Engine Servers","path":"/lrsiem/7.22.0/restart-ai-engine-servers","children":[]},{"id":"ci_2b9cc628202744ad8a650eddcb83434dccb203d1716ed23f1447820b72e9e1b2","title":"Revert an AI Engine Server to a Previous Configuration","path":"/lrsiem/7.22.0/revert-an-ai-engine-server-to-a-previous-configuration","children":[]},{"id":"ci_54daa661d41bd68af7cf8e50d8c0e36a53317205a2d93e905ab6ee5103d6a3b8","title":"Update the IP Address of an AI Engine","path":"/lrsiem/7.22.0/update-the-ip-address-of-an-ai-engine","children":[]},{"id":"ci_27c94f3b7a8dcbab59a1d310ae70211e9d3c83a00245db75c2cbfe28793c9548","title":"Use AI Engine Rule Sets","path":"/lrsiem/7.22.0/use-ai-engine-rule-sets","children":[]},{"id":"ci_f001db88e0f773ac0a2ac9ffc98bd858c032dc720b5d03b20310f3d3a68d1d75","title":"Use AI Engine Workloads","path":"/lrsiem/7.22.0/use-ai-engine-workloads","children":[]},{"id":"ci_c6f6f73cd9d8830a7adedef0988c2035ef00a3782d1bb26b3ce1bc2087ae3fc5","title":"Use Saved AI Engine Filters","path":"/lrsiem/7.22.0/use-saved-ai-engine-filters","children":[]},{"id":"ci_66ebd312b6744f91cbe9aa999e9e895652307516e8a72df91ba5eb0179f30c4f","title":"Use the AI Engine Local Configuration Manager","path":"/lrsiem/7.22.0/use-the-ai-engine-local-configuration-manager","children":[]},{"id":"ci_2f24ea27a44e43a54fc5acd5be2ddbd8caeadab8dcb61959117f1d348fd2aeb5","title":"View AI Engine Generated Alarms","path":"/lrsiem/7.22.0/view-ai-engine-generated-alarms","children":[]},{"id":"ci_7a8e01b588ef6b2b3524adc31e9387fdb445e6d74cc451dcef6ace3e8d2472d5","title":"View AI Engine Rules","path":"/lrsiem/7.22.0/view-ai-engine-rules","children":[]},{"id":"ci_d70fbf3e938535fdbba6a693eb2ac4487144012a940eedfdfd39ddedb5cfbecd","title":"Work with Existing AI Engine Rules","path":"/lrsiem/7.22.0/work-with-existing-ai-engine-rules","children":[]}]},{"id":"ci_cd076a1de6bbc4b85b45abdf5d2a8c1acfac8a1ef8d171d55340dd41f8f11799","title":"Alarm Rules","path":"/lrsiem/7.22.0/alarm-rules","children":[{"id":"ci_6874fb60a25ae0338493a61ccae3a0f61e526d6b6ca45e918ffc4a01362ef702","title":"Alarm Notification Policies","path":"/lrsiem/7.22.0/alarm-notification-policies","children":[{"id":"ci_85d4f908396cce72ca59c4ebd7704847b221b662f2c8b4bb4e0de3719e2b4d99","title":"Create Group Notifications for Alarms","path":"/lrsiem/7.22.0/create-group-notifications-for-alarms","children":[]},{"id":"ci_ae971ce4557027f351ba7cdf4b55cd1f556557cd03587f1564b6dd5dc241a40e","title":"Create New Email Alarm Notification Policies","path":"/lrsiem/7.22.0/create-new-email-alarm-notification-policies","children":[]},{"id":"ci_e598bf837e94987142b077b00be7c037fdcaf7cf538c78e44dea3426b6f0aea0","title":"Create New SNMP Alarm Notification Policies","path":"/lrsiem/7.22.0/create-new-snmp-alarm-notification-policies","children":[]},{"id":"ci_e803865b2158bf7c9038971de33393bd6aa825afdb7d840c3b5f5705385e199a","title":"Create New Text File Alarm Notification Policies","path":"/lrsiem/7.22.0/create-new-text-file-alarm-notification-policies","children":[]},{"id":"ci_77035a40309a65b1ebb68296392c914a41505b1171be5d8ed8e6824797348647","title":"Define a Text File Notification Policy","path":"/lrsiem/7.22.0/define-a-text-file-notification-policy","children":[]}]},{"id":"ci_d8028a5f888a79972f46c0a8469ec7e5e8ed6e9ca1c890d2174268914d7e517c","title":"Create Alarm Rules","path":"/lrsiem/7.22.0/create-alarm-rules","children":[]},{"id":"ci_ea6ec6a184daaaaa65ca577d6770f5559532e46f40894023a8c14b449ee33609","title":"Create Alarm Rules for Known Logs","path":"/lrsiem/7.22.0/create-alarm-rules-for-known-logs","children":[]},{"id":"ci_51e1ae4406b3e7dfa475ce92a945714a29a023ff22e703d40a98aec0e037779b","title":"Enable and Disable Alarm Rules","path":"/lrsiem/7.22.0/enable-and-disable-alarm-rules","children":[]},{"id":"ci_071cc8b5451f732fd0c12b7f8eba287feb50d684d4f02009ebf08571d1e6a42c","title":"Modify Alarm Rule Notifications in Batch","path":"/lrsiem/7.22.0/modify-alarm-rule-notifications-in-batch","children":[]},{"id":"ci_30db2208c6cd109b4acbf724bc06907282cc3e8ec3df012acd606a25202bf044","title":"Modify Alarm Rules","path":"/lrsiem/7.22.0/modify-alarm-rules","children":[]},{"id":"ci_856052cdc8f9d6f012efd035f6c0ba2e168dd3b115f135f9a7d13a7adf60b886","title":"Retire or Activate Alarm Rules","path":"/lrsiem/7.22.0/retire-or-activate-alarm-rules","children":[]}]},{"id":"ci_5393293a1dc6fcbccc9fa6f1fee6c6f4b872bd290105e755c896fe29e7a0cd22","title":"Automatic Host Contextualization","path":"/lrsiem/7.22.0/automatic-host-contextualization","children":[{"id":"ci_c66adcf622182d95ab9ed514aef467577789c83bbd644b0b7d4e237bc69639b2","title":"Disable Automatic Host Contextualization","path":"/lrsiem/7.22.0/disable-automatic-host-contextualization","children":[]},{"id":"ci_a5f8c3602c8975f6ccd956370844285cce8dc10bdcf078ced92a14095fe4cd56","title":"Map Ports","path":"/lrsiem/7.22.0/map-ports","children":[]}]},{"id":"ci_543bde7d0e47b2f85f1f3ef0443d0a1f1aba34c6c1444c5fd65758e31933f626","title":"Data Archives and Restoration","path":"/lrsiem/7.22.0/data-archives-and-restoration","children":[{"id":"ci_fdeaeaeffde229fc3190f0992391cd7bd1b34852abb1737b14fc5cdf864d8a97","title":"Add a Data Processor to Restore Archives","path":"/lrsiem/7.22.0/add-a-data-processor-to-restore-archives","children":[]},{"id":"ci_713f3e36f02eae81df737ed622973272777a6a9d4820f4b2f00b2f70dadab5be","title":"Backup and Recovery Procedures","path":"/lrsiem/7.22.0/backup-and-recovery-procedures","children":[{"id":"ci_b91574b801aa8957fad5b791b93452190abbe0df3571f8abc6ecae1db9f4aa41","title":"Back Up LogRhythm Archives","path":"/lrsiem/7.22.0/back-up-logrhythm-archives","children":[]},{"id":"ci_68bf5eb6d76febee9be059808e6bcf90d8f30fb9c98d321e2cd4e5cc8de1362c","title":"Configure Automated Platform Manager Database Backups","path":"/lrsiem/7.22.0/configure-automated-platform-manager-database-backups","children":[]},{"id":"ci_02641a43e2ad9a6729f282f851224aa2f4549c736ca57a6a0ba311dc9751ca43","title":"Perform a Manual Platform Manager Backup","path":"/lrsiem/7.22.0/perform-a-manual-platform-manager-backup","children":[]},{"id":"ci_de747f74b6501ecbc3c5c29c14b0b461201413969adb580bb7ee4a55f541e06a","title":"Restore From a Database Backup","path":"/lrsiem/7.22.0/restore-from-a-database-backup","children":[]},{"id":"ci_faee4ec6ac04ef396a365272e126aca251d52262ab9f8239d6d47c865cf6a26b","title":"Restore Service State","path":"/lrsiem/7.22.0/restore-service-state","children":[]},{"id":"ci_faa810f9b3a22b2ce90aaab9963cd7cb6e896e21a5048e184640325212f8c8eb","title":"Use a Dark Spare Backup Appliance","path":"/lrsiem/7.22.0/use-a-dark-spare-backup-appliance","children":[]}]},{"id":"ci_708f0a6e2c7bdb01191b6d0ee483b123966e7b7a523bcf2aeb976d02d841225d","title":"Configure Object Access Auditing for LogRhythm Archive Files","path":"/lrsiem/7.22.0/configure-object-access-auditing-for-logrhythm-archive-files","children":[]},{"id":"ci_68c10c501295ab3c78ac6bb8013223857e77c3255acb684e41c439fa1ae77a60","title":"Restore Platform Managers","path":"/lrsiem/7.22.0/restore-platform-managers","children":[]},{"id":"ci_3a55614b4632398a94c0dbecaf945293c90473ceb1686577006056d57b266a46","title":"SecondLook","path":"/lrsiem/7.22.0/secondlook","children":[{"id":"ci_6dc645678cfcaf43936aae8b9b7385cc33a09bc869a5695f0bbec8b46fa248c8","title":"Create a SecondLook Restore","path":"/lrsiem/7.22.0/create-a-secondlook-restore","children":[]},{"id":"ci_406fe43e9aa774df95580367bd41a6bf78ba24418ec89ca2b8b0e06ba396d672","title":"Run a Saved SecondLook Restore","path":"/lrsiem/7.22.0/run-a-saved-secondlook-restore","children":[]}]},{"id":"ci_83c4733886745aa13b13a1111d18ab091fd40fc1563177ad12f735a4b2566250","title":"Use Intelligent Indexing","path":"/lrsiem/7.22.0/use-intelligent-indexing","children":[]},{"id":"ci_e3b9a04d8163a481276312a5b7783f87c8e874be13b596c45e065c501aad39c1","title":"Change Archive Location","path":"/lrsiem/7.22.0/change-archive-location","children":[]}]},{"id":"ci_d87f2db1abb727581959fea018a30ef182e447fac0fcf61b36d164702c1ee37f","title":"Data Indexer","path":"/lrsiem/7.22.0/data-indexer","children":[{"id":"ci_edc7ffabbf36b9287718bffa0ac72bfb9b6e788f011d5b4e10e610a7bea35884","title":"Add a Data Indexer Node","path":"/lrsiem/7.22.0/add-a-data-indexer-node","children":[]},{"id":"ci_b78c3649fd4f7304ad50fb58520ce9f059d1a505cf2e334769f11af2d4b006a3","title":"Configure the Data Indexer","path":"/lrsiem/7.22.0/configure-the-data-indexer","children":[]},{"id":"ci_71cbae6201b60def8f39ffdacfa7cb90ca3afd718099ae3233d49456e96d92d0","title":"Apply System Updates to a Data Indexer","path":"/lrsiem/7.22.0/apply-system-updates-to-a-data-indexer","children":[]}]},{"id":"ci_c178872144c3092deddde52e7e8c10593ba676c8064c3cd54012804c4dc04217","title":"Data Processor","path":"/lrsiem/7.22.0/data-processor","children":[{"id":"ci_2a1002fae1fc97bc0e25e6c31194aefd43f1a28e51cbe53a6cc00fc0f49a8e75","title":"Add a Data Processor","path":"/lrsiem/7.22.0/add-a-data-processor","children":[]},{"id":"ci_ec59ba568c38326cf8c8dc400ee48d2c25fa91c09b1b62535c659f2bd733c774","title":"Apply Recommended Data Processor Values","path":"/lrsiem/7.22.0/apply-recommended-data-processor-values","children":[]},{"id":"ci_12eedcb98395684c257438134a50491752d95603807952c5713b9ba0dc63efc2","title":"Configure a Data Processor to Duplicate Data Indexer Logs","path":"/lrsiem/7.22.0/configure-a-data-processor-to-duplicate-data-indexer-logs","children":[]},{"id":"ci_dbfcf6dace09eb099dda8b0890c85f9a4ea935cbcb88a1a99150c82c6228e01f","title":"Configure the Mediator for Automatic Startup","path":"/lrsiem/7.22.0/configure-the-mediator-for-automatic-startup","children":[]},{"id":"ci_a69b0264e664ddc93b0b917ee81424f4e77ff8b95c5d25c2c55734c0c19c9755","title":"Create a Custom Certificate for Communication Between the Data Processor and AI Engine","path":"/lrsiem/7.22.0/create-a-custom-certificate-for-communication-between-the-data-processor-and-ai-engine","children":[]},{"id":"ci_1a046b09f90a305678aa105dc12eee6aa6335c765c741b28e1dceaa9e87b442c","title":"TrueIdentity Entity Segregation","path":"/lrsiem/7.22.0/trueidentity-entity-segregation","children":[]},{"id":"ci_27ca42120a1e4c3e275dcbef884b025584f1e68e45774a0531e84df13c542f2b","title":"Filter LogRhythm Diagnostic Events","path":"/lrsiem/7.22.0/filter-logrhythm-diagnostic-events","children":[]},{"id":"ci_1fb5b85f3d57f27548e2c3166bedce1f941135cb033226dd749ed0c20c6a99c2","title":"Modify Data Processor Advanced Properties","path":"/lrsiem/7.22.0/modify-data-processor-advanced-properties","children":[]},{"id":"ci_e2d0b3e739e8b2888e64d8cd1109160ebb98fdd99a31d5e08768aca19367e8c3","title":"Modify Data Processor Basic Properties","path":"/lrsiem/7.22.0/modify-data-processor-basic-properties","children":[]},{"id":"ci_3e7a79877830732fe30c0aaf1bd04f48420bef8950db003944189fa53edab0db","title":"Retire a Data Processor","path":"/lrsiem/7.22.0/retire-a-data-processor","children":[]},{"id":"ci_b5006f2573a1fb93695449eab77a91861e71737c9e249e6d6c7f69ae07b5eea2","title":"Revert to a Previous Data Processor Configuration","path":"/lrsiem/7.22.0/revert-to-a-previous-data-processor-configuration","children":[]},{"id":"ci_6206ab53f99ebd56119a59a2d4fa20e3d271a070e98d363a8bc99d4b46a66214","title":"Set Data Processor Messages Per Second Value","path":"/lrsiem/7.22.0/set-data-processor-messages-per-second-value","children":[]},{"id":"ci_36390c543c375594a67a7b6450a62a8f44ec4b9d0f5267ec3d4f9f37ff8dd313","title":"Start, Stop, and Restart Data Processor Services","path":"/lrsiem/7.22.0/start-stop-and-restart-data-processor-services","children":[]},{"id":"ci_0ee62a8158e47cfa006950ccff4c83acfaa3a90e43c1c010729ac27a780354dd","title":"Throttle the Mediator","path":"/lrsiem/7.22.0/throttle-the-mediator","children":[]},{"id":"ci_16b52d27b1acd73fd7992fc7dee2883d9abdea8f371695f40295b69905697309","title":"Update the IP Address of a Data Processor","path":"/lrsiem/7.22.0/update-the-ip-address-of-a-data-processor","children":[]},{"id":"ci_32fef32d48a14827986ac7c0b71d9f106c2e013374c68f926575f2eda2994f18","title":"Use the Data Processor Configuration Manager","path":"/lrsiem/7.22.0/use-the-data-processor-configuration-manager","children":[]}]},{"id":"ci_fb5583b114400d9fe242b57c0f32d2466dc1ddad23c7fa8b354d773995505792","title":"Deployment Health","path":"/lrsiem/7.22.0/deployment-health","children":[{"id":"ci_ecfd6c14dec5e5b723627c87dc52c17acbfad616432f90b70231a29238f6d83d","title":"Centralized Service Metrics","path":"/lrsiem/7.22.0/centralized-service-metrics","children":[{"id":"ci_b35863e8619d7c433246c93c7dc58ca148d14be2fdec4ea8ed1ddb7e0f741557","title":"Install and Work With Centralized Service Metrics","path":"/lrsiem/7.22.0/install-and-work-with-centralized-service-metrics","children":[]},{"id":"ci_dd2c2c05509d070711005a955f6c153b9004dddb076e06260849f2496c651385","title":"Troubleshoot Centralized Service Metrics","path":"/lrsiem/7.22.0/troubleshoot-centralized-service-metrics","children":[]}]},{"id":"ci_1d8c4ea4dd0250772c307154e7e759d92534569dd292a89cc3e9827beeeeb7d6","title":"Deployment Monitor","path":"/lrsiem/7.22.0/deployment-monitor","children":[]},{"id":"ci_94b102dc531b790e4d70af2919f479bcc0d6ec881999e2a6db8f094727195649","title":"Log Processing Reports","path":"/lrsiem/7.22.0/log-processing-reports","children":[{"id":"ci_532c2cfda4d5d3d86edf7a59af460201833220f545d94405ec71faea4009d622","title":"LPS Detail Report","path":"/lrsiem/7.22.0/lps-detail-report","children":[]},{"id":"ci_7ead448e1ccfd19065236c76bd6ca737041a61ba234e1fb4cf5cd5c99a9f58de","title":"LPS Policy Sorting Stats Report","path":"/lrsiem/7.22.0/lps-policy-sorting-stats-report","children":[]}]},{"id":"ci_68d12ff960346cbbe5b05515e77d4405d6397ad79793046cd4c9b10f080612b1","title":"Performance Counters","path":"/lrsiem/7.22.0/performance-counters","children":[{"id":"ci_675d13cc409f040b21dc8e9b043a029199597819d761ad7fec8721b8c6a7a829","title":"Performance Counters—LR AI Engine Communication Manager","path":"/lrsiem/7.22.0/performance-counterslr-ai-engine-communication-manager","children":[]},{"id":"ci_b4a868565531392084fd259cf642fce25eb43cf220d2bf9840cbfa1393471989","title":"Performance Counters—LR AI Engine Data Provider","path":"/lrsiem/7.22.0/performance-counterslr-ai-engine-data-provider","children":[]},{"id":"ci_53618be4102108b150041fa6283f5999dcd145bcd465db247e6bff7e92d683ab","title":"Performance Counters—LR AI Engine Server","path":"/lrsiem/7.22.0/performance-counterslr-ai-engine-server","children":[]},{"id":"ci_f5bde31a4d8e48dbf94d4202317a148ba61baab88a23857577460855650ddf5f","title":"Performance Counters—LR Alarming and Response Manager","path":"/lrsiem/7.22.0/performance-counterslr-alarming-and-response-manager","children":[]},{"id":"ci_12651b4aac0084749408809c2886402de7fe43114b54c6d88a131d0c39fa1958","title":"Performance Counters—LR Mediator, Log Distribution Services","path":"/lrsiem/7.22.0/performance-counterslr-mediator-log-distribution-services","children":[]},{"id":"ci_ade0a791a71946b498fff25863236075e63c3298f9b7d235e5c15cad9374dca1","title":"Performance Counters—LR Mediator, LDS, Sender","path":"/lrsiem/7.22.0/performance-counterslr-mediator-lds-sender","children":[]},{"id":"ci_7feff8289f0ad342423c3fab359ef0103c5c65231ecc2a3e6ccca5519b2635a9","title":"Performance Counters—LR Mediator, LogMart","path":"/lrsiem/7.22.0/performance-counterslr-mediator-logmart","children":[]},{"id":"ci_8bf0c19bc832ac78f7947f95e6ae245e1ca806385a67856a1a2f827e6b4d5e01","title":"Performance Counters—LR Mediator, Processing","path":"/lrsiem/7.22.0/performance-counterslr-mediator-processing","children":[]},{"id":"ci_a03a9423839af07bf4ce7b45ac0007c376aaa806e09db141b48efa1126334b84","title":"Performance Counters—LR Mediator, Stats","path":"/lrsiem/7.22.0/performance-counterslr-mediator-stats","children":[]},{"id":"ci_f8fd32948e3ccdc5b9394bdccb92d33a7c85036327195936fedba5f839a85cc7","title":"Performance Counters—LR Mediator, True Source","path":"/lrsiem/7.22.0/performance-counterslr-mediator-true-source","children":[]},{"id":"ci_65cf570154c12bb6179793d964756a65574ab2669775009878beb420619ff239","title":"Performance Counters—LR Messaging (DP to DX)","path":"/lrsiem/7.22.0/performance-counterslr-messaging-dp-to-dx","children":[]},{"id":"ci_2125e142e540abf6fcfa9555dc8237ee8dd9d659d1d42a2554109f9d6bda78b5","title":"Performance Counters—LR System Monitor","path":"/lrsiem/7.22.0/performance-counterslr-system-monitor","children":[]},{"id":"ci_88c15a2ffb73c1b732766b26943cda6e269a7c7afa615aa0d6a2e6c82e541c68","title":"View and Add Performance Counters","path":"/lrsiem/7.22.0/view-and-add-performance-counters","children":[]}]}]},{"id":"ci_4d0f66c66c5a2289e68035ba255c3af9cdb52f76bd94f5dccba6ee37b7ab0fb9","title":"Deployment Manager","path":"/lrsiem/7.22.0/deployment-manager","children":[]},{"id":"ci_f2cb260335c5cf189a4139e12950528c974b452c02f6a4775cad7c6d28b3554a","title":"Deployment Security","path":"/lrsiem/7.22.0/deployment-security","children":[{"id":"ci_a6d085c94ae97b915bd19e8a16d5778bdf55b3b68580c164e988cfe736a00a52","title":"Common Criteria Audit Data Generation","path":"/lrsiem/7.22.0/common-criteria-audit-data-generation","children":[{"id":"ci_db1de2abc41f201c74978bd7fdefe1675fc3daf68679ecab39c6f99575ba494d","title":"Set Up the Audit Functionality","path":"/lrsiem/7.22.0/set-up-the-audit-functionality","children":[]},{"id":"ci_cc564f20a9843054fc4e5882c1aab15502a9c6e080453354972a8fcfce8800de","title":"Set up Discretionary Access Controls on the Trace Folder on an NTFS File System","path":"/lrsiem/7.22.0/set-up-discretionary-access-controls-on-the-trace-folder-on-an-ntfs-file-system","children":[]},{"id":"ci_26e7985c8bfbe57b952191d10bbd4efbf1bf0b839ba25b5c3a2b3ccbe9aeb2d2","title":"Configure Windows Task to Alarm on Audit Trace Failure","path":"/lrsiem/7.22.0/configure-windows-task-to-alarm-on-audit-trace-failure","children":[]},{"id":"ci_1164df86f5f74c5568f5c14e614ed0023523c8487b81d30a6fc418753321a13a","title":"Configure SQL Server to Run Under Domain Account","path":"/lrsiem/7.22.0/configure-sql-server-to-run-under-domain-account","children":[]},{"id":"ci_ff20e08c50f5b5aa3c737dcb3176b9707210824a04dd6f68d811015991df4285","title":"SQL Server Trace File Converter (TFC) User Guide","path":"/lrsiem/7.22.0/sql-server-trace-file-converter-tfc-user-guide","children":[{"id":"ci_2da5830349d17f03889d5854aba230cc2c4bcd080f5418aff24bfe291ddafc58","title":"Download the SQL TFC Installer","path":"/lrsiem/7.22.0/download-the-sql-tfc-installer","children":[]},{"id":"ci_7719001d1b56b197c29525feab61610213b4cfba6b060bf1a93fa724a0bdb9dc","title":"Install the SQL Server TFC Server","path":"/lrsiem/7.22.0/install-the-sql-server-tfc-server","children":[]},{"id":"ci_e37c4688fce69b2bbbbe6979b05285393d78e78b8bf25767a161a11fa571e435","title":"Configure SQL Server TFC","path":"/lrsiem/7.22.0/configure-sql-server-tfc","children":[]},{"id":"ci_89800467ded2bc52a8cb4af9a88abc46f5221cd844a933e7e33d0e6d5eeebb3f","title":"Add a SQL Server TFC Log Source","path":"/lrsiem/7.22.0/add-a-sql-server-tfc-log-source","children":[]}]}]},{"id":"ci_da39631a3aad6536e46ee423a2008f07ce7e1a9c625a84e215f0dd5d951e5d96","title":"Common Criteria","path":"/lrsiem/7.22.0/common-criteria","children":[{"id":"ci_929144b285f4b39d4b7dbe880895b977ad3fce76bcf37c592518376e634700a1","title":"Web Console Compliance","path":"/lrsiem/7.22.0/web-console-compliance","children":[{"id":"ci_30a7ee83d13f54835bb83172ea0799996fa1ca9472a6d783939438f0f9f8f2bb","title":"Auto Logout for Idle Users (US9521)","path":"/lrsiem/7.22.0/auto-logout-for-idle-users-us9521","children":[]},{"id":"ci_8c7f2b22a3a7dbc4d4fbade40862745be56550793e11dd5409216b9c3fccc335","title":"Nginx File Configuration Updates (US9305)","path":"/lrsiem/7.22.0/nginx-file-configuration-updates-us9305","children":[]},{"id":"ci_91690022de6084f21a330ffb2b1f47b92d2729fe7042ea6f4c4d7bb79be5b25a","title":"Requirements","path":"/lrsiem/7.22.0/requirements","children":[]},{"id":"ci_65ec59561ea020221dfce96e2b3f7bce2320a41854475bc0d73fd1eedbd681b6","title":"Warning Banner on Login Page (US9518)","path":"/lrsiem/7.22.0/warning-banner-on-login-page-us9518","children":[]},{"id":"ci_d847a8a180ed0a382d7a8d9284a4764673e76cd80682a2a30fcd814e99c55c84","title":"Web Console FIPS Compliance Configuration (US9525)","path":"/lrsiem/7.22.0/web-console-fips-compliance-configuration-us9525","children":[]},{"id":"ci_4914363aadc06c9dc45d595fec91678aec9fb4f83550c7e33fa38a95ff9980a4","title":"Web Console Logout Button (US9519)","path":"/lrsiem/7.22.0/web-console-logout-button-us9519","children":[]}]}]},{"id":"ci_ed5d4c0c03586ff3b6dc4c350ffd9912d00c0f9be22c26e3ed987a049dcbc344","title":"Federal Information Processing Standards (FIPS)","path":"/lrsiem/7.22.0/federal-information-processing-standards-fips","children":[{"id":"ci_90865896c1857dd284c261ab105b433eae63b28ceaf6eddf335687a66c07eb49","title":"Configure User Access Control for FIPS Mode","path":"/lrsiem/7.22.0/configure-user-access-control-for-fips-mode","children":[]},{"id":"ci_be4bf6bccdaf8d8e7cac770f399ab662d3c56ed659ee203e47a6808aed510512","title":"Configure LogRhythm XM for FIPS Mode","path":"/lrsiem/7.22.0/configure-logrhythm-xm-for-fips-mode","children":[]},{"id":"ci_9a881af7c333e3ed74eda755ff1d98046355ab9d4df698645db4f1777432d874","title":"Configure LogRhythm DPAWC + DX for FIPS Mode","path":"/lrsiem/7.22.0/configure-logrhythm-dpawc-dx-for-fips-mode","children":[{"id":"ci_42cad80d9a690c638b20ca06af4b35a5f02e9cab22fb8d8b75cc9d6534a06b2b","title":"Configure LogRhythm DPAWC","path":"/lrsiem/7.22.0/configure-logrhythm-dpawc","children":[]},{"id":"ci_5ede995f66f9164a0b8da0afa35ba3be4f496ce9b6d4587eb4690ced020fc101","title":"Configure LogRhythm DX","path":"/lrsiem/7.22.0/configure-logrhythm-dx","children":[]},{"id":"ci_3c9ec87c97c3325b860547c92d456bbe1833fa24f68807d4941eb1056db8ad65","title":"Establishing IPsec Communications between Windows & Linux OS","path":"/lrsiem/7.22.0/establishing-ipsec-communications-between-windows-linux-os","children":[{"id":"ci_4cdb4f5addddc40c057ac595a0998a0a3baf7b1fd6275cc6e2f0af75c7aeece6","title":"Windows OS IPsec Configuration","path":"/lrsiem/7.22.0/windows-os-ipsec-configuration","children":[{"id":"ci_6f5e93ae4b31defa932604b6e255e54b7d01bb5fe61b1aec9b2a6ce1d507cca6","title":"Create a Custom MMC Console","path":"/lrsiem/7.22.0/create-a-custom-mmc-console","children":[]},{"id":"ci_ae237411ba7d8f02891b9a4b58e54ce383cc568482a643db371ef90b938ed205","title":"Enable Audit Policy for Your Computer","path":"/lrsiem/7.22.0/enable-audit-policy-for-your-computer","children":[]},{"id":"ci_a66173988ebd817773923b86fd4df2ac38f439bd43ac3fd002ee711a7d5d0cef","title":"Build a Custom IPsec Policy","path":"/lrsiem/7.22.0/build-a-custom-ipsec-policy","children":[]},{"id":"ci_8d5900e33b29d32462a108e17d222b9fffa2b2cd7df61629dbd034585b0fa0dc","title":"Configure an IPsec Filter List","path":"/lrsiem/7.22.0/configure-an-ipsec-filter-list","children":[]},{"id":"ci_519bcde50bef26add0318b32f22b8da3f934908bf2e584ec36fec38d78b75aaa","title":"Configure an IKE Authentication Method","path":"/lrsiem/7.22.0/configure-an-ike-authentication-method","children":[]}]},{"id":"ci_7bc8e2b14caaa7cf89dc2f836ee883739462721e4d7ec80abde03e3c3e60a26a","title":"Linux/CentOS IPsec Configuration","path":"/lrsiem/7.22.0/linux-centos-ipsec-configuration","children":[{"id":"ci_fef4e853e2f4f5deef9b81b66bce46163b2544166cfe5eb679c3c0ce84ab7d48","title":"Configure IPsec on Linux Machine","path":"/lrsiem/7.22.0/configure-ipsec-on-linux-machine","children":[]},{"id":"ci_aadb1602f66f16ac8a38d151e95bf16dc2a878953f4d74afcc1a30d16ace1d63","title":"Put Linux/CentOS into FIPS Mode","path":"/lrsiem/7.22.0/put-linux-centos-into-fips-mode","children":[]}]},{"id":"ci_e70946f5d47364b80a4f76801ea43128a2acfcbe45c5dc627eefa3b322b0af1e","title":"Test Your Custom IPsec Policy on both Computers","path":"/lrsiem/7.22.0/test-your-custom-ipsec-policy-on-both-computers","children":[]}]}]},{"id":"ci_518e8ae1a23b687026c45a12cb7d2338a5791716a059186d4fc19ef910add505","title":"Force Encrypted Connections for SQL (Recommended)","path":"/lrsiem/7.22.0/force-encrypted-connections-for-sql-recommended","children":[]},{"id":"ci_75d3374986084cdc771ce911dffbcf916cd8d769aa8ff4482e8b6ed2c9787506","title":"Deploy LogRhythm in a FIPS-Enabled Domain","path":"/lrsiem/7.22.0/deploy-logrhythm-in-a-fips-enabled-domain","children":[]},{"id":"ci_f7e321d35beceaf235ec5fc0800abbb18350da164326a35a0311e29e9f024e69","title":"Put Windows into FIPS Mode","path":"/lrsiem/7.22.0/put-windows-into-fips-mode","children":[]},{"id":"ci_2448fd064de3017deeb11089ae7bb472dacd625298b5d662f075039ae51ecf5e","title":"Configure LogRhythm Services and the Windows Data Indexer for FIPS Mode","path":"/lrsiem/7.22.0/configure-logrhythm-services-and-the-windows-data-indexer-for-fips-mode","children":[]}]},{"id":"ci_0ac7098d117a584a880d741079b74b212bfa7278bfcba3f2a05365c624b0be00","title":"Integrated Security","path":"/lrsiem/7.22.0/integrated-security","children":[{"id":"ci_7545f64ce0996d8dd8f51ad5117c9114c0d09e80d55462bf0dfb08c79cf993c0","title":"Create Accounts for LogRhythm Components","path":"/lrsiem/7.22.0/create-accounts-for-logrhythm-components","children":[]},{"id":"ci_78ee603fdb3eaee7b5545ea23e8008e6c2c9d2a3f7bb62118911942909bfaf92","title":"Configure Database Access","path":"/lrsiem/7.22.0/configure-database-access","children":[]},{"id":"ci_1bd1886369c3ee683cec49f12f8cd8c68b974f4555452b9f7253c413eb2e920d","title":"Shut Down LogRhythm Services","path":"/lrsiem/7.22.0/shut-down-logrhythm-services","children":[]},{"id":"ci_2851cce948f4648ecea32e3afda5ff2973bc7177d1ee2b7e1931a4697fd6cd96","title":"Reconfigure LogRhythm Services to Use Integrated Security","path":"/lrsiem/7.22.0/reconfigure-logrhythm-services-to-use-integrated-security","children":[]},{"id":"ci_1e29f0d0a70f9f265f8dc84d8e9d31ec2af6ebfaa0b85e4a0a0b19f89d355a4a","title":"Enable Mixed Authentication Mode","path":"/lrsiem/7.22.0/enable-mixed-authentication-mode","children":[]},{"id":"ci_0636253c2e704f1cdd095ca197643e24e5dd5af32b3dda4e6b2cf3ddb0dc9f17","title":"Restart LogRhythm Services","path":"/lrsiem/7.22.0/restart-logrhythm-services","children":[]}]},{"id":"ci_c938493fc8e5d27e52c19f9a8bdd9b622beaed0cde86530c19113fc636ac2678","title":"Least Privileged User","path":"/lrsiem/7.22.0/least-privileged-user","children":[{"id":"ci_0b5e22709b35331a41b29c915976852985a41df48fc0253884c6c6f0b92722df","title":"Configuring LogRhythm Permissions","path":"/lrsiem/7.22.0/configuring-logrhythm-permissions","children":[]},{"id":"ci_e5f98536a482d9c16b01280d466b3db3650dc32cec5bbf9acc667e482f67ef35","title":"Least Privileged User: DP, Mediator Server","path":"/lrsiem/7.22.0/least-privileged-user-dp-mediator-server","children":[]},{"id":"ci_431a713f60322deea7f54a8c46b0643270575f6ace0ef8be715bc3105de5b4a0","title":"Least Privileged User: DX, Linux","path":"/lrsiem/7.22.0/least-privileged-user-dx-linux","children":[]},{"id":"ci_789d29d02ba6ecb6e490687605a5321be090c4d8024abc84e388eefd8e56a8f9","title":"Least Privileged User: DX, Windows","path":"/lrsiem/7.22.0/least-privileged-user-dx-windows","children":[]},{"id":"ci_acf3351b231545d84143b914432b710a52c05a271fedbbba7d5877893ddd8a45","title":"Least Privileged User: PM, Advanced Intelligence Engine","path":"/lrsiem/7.22.0/least-privileged-user-pm-advanced-intelligence-engine","children":[]},{"id":"ci_94db813e3ea41362d7f749c96a6b3dfe054cf4f9c9180bfffe4a40d83b781cb3","title":"Least Privileged User: PM, AIE Communication Manager","path":"/lrsiem/7.22.0/least-privileged-user-pm-aie-communication-manager","children":[]},{"id":"ci_7536543639ba2f39f8b29b55b45c5cf969eeb4e107ef3bb34931f80d03133301","title":"Least Privileged User: PM, Alarming and Response Manager","path":"/lrsiem/7.22.0/least-privileged-user-pm-alarming-and-response-manager","children":[]},{"id":"ci_f2273af0ae463cbd889b0e61e5b950df8991d73ade856138811bf881e93f2525","title":"Least Privileged User: PM, Disaster Recovery","path":"/lrsiem/7.22.0/least-privileged-user-pm-disaster-recovery","children":[]},{"id":"ci_913cc0c320c98660f801e7371ef7e8734144bc63cbf84f4efa24961f1647868e","title":"Least Privileged User: PM, High Availability","path":"/lrsiem/7.22.0/least-privileged-user-pm-high-availability","children":[]},{"id":"ci_f265408574420ae5f8f29315fcc45d4fd0704f6941d148db10c0bea152dcc856","title":"Least Privileged User: PM, Job Manager","path":"/lrsiem/7.22.0/least-privileged-user-pm-job-manager","children":[]},{"id":"ci_42563da0f9ca03b52f2c2ff65e0c8bfe6dc6f06d8873dd699aa51b61c3f76412","title":"Least Privileged User: PM, Web Console","path":"/lrsiem/7.22.0/least-privileged-user-pm-web-console","children":[]},{"id":"ci_8ab956536a0f4a3a32791b77ae8c3f1491cc438f3dc7c9b030dde23b968d70b6","title":"Least Privileged User: SysMon, Linux, Unix","path":"/lrsiem/7.22.0/least-privileged-user-sysmon-linux-unix","children":[]},{"id":"ci_3d0fa2352b3117a065c1ad81c4dc124c86dfc41d48c8fe2e0c7cbd02c639d428","title":"Least Privileged User: SysMon, Windows","path":"/lrsiem/7.22.0/least-privileged-user-sysmon-windows","children":[]}]},{"id":"ci_0c7b48879f371985d4ef0359d745b0bb7bc57ecf2f272594d9db43b97f0ce588","title":"Public Key Infrastructure (PKI) Support","path":"/lrsiem/7.22.0/public-key-infrastructure-pki-support","children":[{"id":"ci_04ef38b58f45818dc8fc9c4cde486c4600248224ea65f675cf37b0e9c66a80ce","title":"Certificate Configuration for LogRhythm Component Connections","path":"/lrsiem/7.22.0/certificate-configuration-for-logrhythm-component-connections","children":[]},{"id":"ci_5111ed8b070fc3bc11b535b38919d46be1c8d1388eb0f002f31df6bfc6ff824d","title":"Create a Certificate for Microsoft SQL Server Connections","path":"/lrsiem/7.22.0/create-a-certificate-for-microsoft-sql-server-connections","children":[]},{"id":"ci_147d1807f16eb2899add85b24c6336c56fce0dede87a647055f9e02c4768ac1e","title":"Create Client and Server Certificates","path":"/lrsiem/7.22.0/create-client-and-server-certificates","children":[]},{"id":"ci_debe964bde35040b7407682b6ab10d0ff775bfec3e394bc320c593dd26544ead","title":"Verify Certificates","path":"/lrsiem/7.22.0/verify-certificates","children":[]},{"id":"ci_7b3a4dc696d275769291e0f2a0f712fd47482d9e835745fa8fbabf7ffbb724bb","title":"View an Example of Configuring Mutual Authentication in LogRhythm","path":"/lrsiem/7.22.0/view-an-example-of-configuring-mutual-authentication-in-logrhythm","children":[]},{"id":"ci_e0cb103970b66763d4b4657e870cb5148a041f484fce49f1d4006de3fa6f31fb","title":"View an Example of Configuring Certificates for AI Engine","path":"/lrsiem/7.22.0/view-an-example-of-configuring-certificates-for-ai-engine","children":[]}]},{"id":"ci_5fcbf1f60338f7b9a3a368cc6f44ce68d431d947ef7160659151f048548672e3","title":"Security Banners","path":"/lrsiem/7.22.0/security-banners","children":[{"id":"ci_e41b3c3ddb3d410e1b65e344fd791d4f299821dd0d648db2f9444d78e31c96a0","title":"Configure the Session-Timeout Error Message","path":"/lrsiem/7.22.0/configure-the-session-timeout-error-message","children":[]},{"id":"ci_557afb9f4b289d8a6ce338aebd56c41235b5676b84bbaec5717d682088e961ca","title":"Configure the Start-Up Warning","path":"/lrsiem/7.22.0/configure-the-start-up-warning","children":[]}]},{"id":"ci_fbff9e82875431d749f01044418240be2cbd1c22e167a5237332a5b42b090995","title":"Enhanced Auditing","path":"/lrsiem/7.22.0/enhanced-auditing","children":[{"id":"ci_8688b1bcd7beb414e65389b7e7d8d0b89af0bcd621af2a3b708d7889f710c826","title":"Collect Enhanced Audit Logs","path":"/lrsiem/7.22.0/collect-enhanced-audit-logs","children":[]}]},{"id":"ci_254054167997147aa62d565055c3e81326b078efc19cf01014ea5e01fcf77285","title":"Query Auditing","path":"/lrsiem/7.22.0/query-auditing","children":[]},{"id":"ci_47b7a865ba2a535a202f2b43210d087ce2d957a09a6b9847ead474fb03aed673","title":"LogRhythm Default Passwords","path":"/lrsiem/7.22.0/logrhythm-default-passwords","children":[]}]},{"id":"ci_e13fa7f53ecfa7f270e037d6f92b41f30017f03ea792b492b62602315f1aa47c","title":"Endpoint Monitoring","path":"/lrsiem/7.22.0/endpoint-monitoring","children":[{"id":"ci_885a67ebec3c4f543e566d7298e4f64676a442060c3b209889b632f6cc213533","title":"Data Loss Defender (DLD)","path":"/lrsiem/7.22.0/data-loss-defender-dld","children":[{"id":"ci_0e221896c465c24ec29a9d65ccdda1a0aebcd683b2f0e4570e4596152a2bee86","title":"Create DLD Policies","path":"/lrsiem/7.22.0/create-dld-policies","children":[]},{"id":"ci_d55d6d0196f90bd87aef3c3e7cb12562e85462fc902da697e17a53ac9f8ed20d","title":"Delete DLD Policies","path":"/lrsiem/7.22.0/delete-dld-policies","children":[]},{"id":"ci_79701e082725e3396f2a3447dae74fd7f95deb864dd861722430a23f10cc5878","title":"Enable DLD for an Agent","path":"/lrsiem/7.22.0/enable-dld-for-an-agent","children":[]},{"id":"ci_54814dc44d64455ccb8e966e28b1faaf077fdc8a1d997b35da89663de436ef9c","title":"Modify DLD Policies","path":"/lrsiem/7.22.0/modify-dld-policies","children":[]}]},{"id":"ci_fed81178b7c74d512cfab3dc153116644bd9238f577d59976e74c20e11a819c9","title":"File Integrity Monitor (FIM)","path":"/lrsiem/7.22.0/file-integrity-monitor-fim","children":[{"id":"ci_093821b0868a6bc1e947a2f18255c15ac3727397dab726f07f031e81c0f0bb8f","title":"Create File Integrity Monitor Policies","path":"/lrsiem/7.22.0/create-file-integrity-monitor-policies","children":[]},{"id":"ci_e66fd90995fc5490034fc8ea01c7dc1b1b5fee4bed91d2d335c27ef358af5a3d","title":"Create Inclusions and Exclusions for FIM","path":"/lrsiem/7.22.0/create-inclusions-and-exclusions-for-fim","children":[]},{"id":"ci_a4f2270a8c9a606eb6439829de831e26198366627f5c30028a04978b31ac9d7d","title":"Associate a File Integrity Monitor Policy With an Agent","path":"/lrsiem/7.22.0/associate-a-file-integrity-monitor-policy-with-an-agent","children":[]},{"id":"ci_f0683a7eb2cd946e87b8d4097ee4d310803b873cd0c5a1fba91061ef1093ee64","title":"Modify File Integrity Monitor Policies","path":"/lrsiem/7.22.0/modify-file-integrity-monitor-policies","children":[]},{"id":"ci_97e198a0be059fedccfe3366f08b09e7f9b5e1aa420965e4ef95f1d5e61d68a0","title":"Clone File Integrity Monitor Policies","path":"/lrsiem/7.22.0/clone-file-integrity-monitor-policies","children":[]},{"id":"ci_848b427b9122e8494b8755a4e40d529d300e55a6a6cba57d36233ffe42aa01f9","title":"Delete File Integrity Monitor Policies","path":"/lrsiem/7.22.0/delete-file-integrity-monitor-policies","children":[]}]},{"id":"ci_7a3ee1a5c1cf24f057c71ec93671ec30eae39866155781ae2b95578cf8bf0bed","title":"Network Connection Monitor (NCM)","path":"/lrsiem/7.22.0/network-connection-monitor-ncm","children":[{"id":"ci_0938fa37250c23bebe5035ef1a6735a776b31b81f9aea8d05ef3b9a0485b4374","title":"Enable NCM for an Agent","path":"/lrsiem/7.22.0/enable-ncm-for-an-agent","children":[]}]},{"id":"ci_fe69bd80fd75fbd16bf07b15b497226f7b1c1729924ef1aa0bae66776ce1cddf","title":"Process Monitor","path":"/lrsiem/7.22.0/process-monitor","children":[{"id":"ci_2e4a1266e7a5d11606d80314f35bb039f79289963a83b5d9e1f7d958a10e9e08","title":"Enable Process Monitor for an Agent","path":"/lrsiem/7.22.0/enable-process-monitor-for-an-agent","children":[]}]},{"id":"ci_3a0f93b1993837300f770d8e810c0760d9b6f8c402e35704d8a24a7748adc7c0","title":"Registry Integrity Monitor (RIM)","path":"/lrsiem/7.22.0/registry-integrity-monitor-rim","children":[{"id":"ci_8a634685dc58ed3effcbfc00b9b5382aa5e1d7e65cc2d5a863bb6613d6e41604","title":"Associate Items to RIM Policies","path":"/lrsiem/7.22.0/associate-items-to-rim-policies","children":[]},{"id":"ci_e9dafed24762f1c69c4990686011ce9758cb533487cf6dd68877af2be7bc57aa","title":"Associate RIM Policies to Windows System Monitor Agents","path":"/lrsiem/7.22.0/associate-rim-policies-to-windows-system-monitor-agents","children":[]},{"id":"ci_8ab982cb3985b1704c384282c4546de10637ad8288a303084b46df57a0d64749","title":"Configure RIM Policy Items","path":"/lrsiem/7.22.0/configure-rim-policy-items","children":[]},{"id":"ci_accdcc90d8f504942aa2d5cf8bd87c195f9f1efccc571b9a19d8ef62e3f2ad80","title":"Create RIM Policies","path":"/lrsiem/7.22.0/create-rim-policies","children":[]},{"id":"ci_0060e9675bb27366c17a40fd77df2e765f8f7fc326cc5ab095df8c45a7fbe04d","title":"Delete RIM Policies","path":"/lrsiem/7.22.0/delete-rim-policies","children":[]},{"id":"ci_abe7701d632b4942bd2944d3a44d01d5d0c4a88af3454e15622ebccf7f4ddb1c","title":"Delete RIM Policy Items","path":"/lrsiem/7.22.0/delete-rim-policy-items","children":[]},{"id":"ci_bfa455d7aaa796d1b64c6e65d75b747f21939dc65ff039488390ca6cd6f26943","title":"Modify RIM Policies","path":"/lrsiem/7.22.0/modify-rim-policies","children":[]},{"id":"ci_40714d0ea64b5e1ac5558ed72d94902d054cae4e223a27cc67c61bfd0af1f68f","title":"Modify RIM Policy Items","path":"/lrsiem/7.22.0/modify-rim-policy-items","children":[]}]},{"id":"ci_68888aba2e67fe9574478711d4f25eef6de4bf151dadef3552f853938a140d44","title":"User Activity Monitor (UAM)","path":"/lrsiem/7.22.0/user-activity-monitor-uam","children":[{"id":"ci_6202c96bef51a38bb1056d65600eb89ede5dc7c6ab0349e0060eb4f4020ab562","title":"Enable UAM for an Agent","path":"/lrsiem/7.22.0/enable-uam-for-an-agent","children":[]},{"id":"ci_e025f9bcd8522e45a860559f896b17c2fc22e5874a3138c53d3397d95445d873","title":"Include UAM in File Integrity Monitor","path":"/lrsiem/7.22.0/include-uam-in-file-integrity-monitor","children":[]}]}]},{"id":"ci_d9ca7069978cd950255f9c57302135177bf75051da0d28e641415fc2c4bd368f","title":"Entities","path":"/lrsiem/7.22.0/entities","children":[{"id":"ci_62d11622025c4a9d56102cabebfa8108bac08d74a27e188fb977281df1ffc056","title":"Add a Single Entity","path":"/lrsiem/7.22.0/add-a-single-entity","children":[]},{"id":"ci_f7c70a39bbf50c460c3b2d796368b93b44e5a4df7b05f6aebe2a42f74fcd7d05","title":"Bulk Import Entities From a File","path":"/lrsiem/7.22.0/bulk-import-entities-from-a-file","children":[]},{"id":"ci_b665a5fe4a28e6598f02994aa609953413aa011b36e169e1285ca9ec04e4257d","title":"Delete Entities","path":"/lrsiem/7.22.0/delete-entities","children":[]},{"id":"ci_67c041ae884ed022b80f336f1e67820d8a3a6f0f8dd6a8a181a4e86c9dde81ee","title":"Modify Entities","path":"/lrsiem/7.22.0/modify-entities","children":[]},{"id":"ci_bfad12e17d30bc0d39c8d55dbcaf992d59387fa15a13c645565d56ff0195589b","title":"Run the Entities Reorganization Wizard","path":"/lrsiem/7.22.0/run-the-entities-reorganization-wizard","children":[]}]},{"id":"ci_9df36736e9cc4dbd1924f22aa9dbf55babf3ab0dd2715f2e196c72a08200ce16","title":"Global Log Processing Rules","path":"/lrsiem/7.22.0/global-log-processing-rules","children":[{"id":"ci_4ae8656849eb9a3843446969ab40fa4aaa038a74ca6c100242a6118816388818","title":"Create Global Log Processing Rules","path":"/lrsiem/7.22.0/create-global-log-processing-rules","children":[]},{"id":"ci_c2721990a7c8cf1590f4338c1f3999aa38c5f3bda636b4bb91c643f187c061d2","title":"Modify Global Log Processing Rules","path":"/lrsiem/7.22.0/modify-global-log-processing-rules","children":[]}]},{"id":"ci_3ab5f4e4d64028cdeb19b439dfd001b8f3485e857223025522964c0f4fe0c831","title":"Host Records","path":"/lrsiem/7.22.0/host-records","children":[{"id":"ci_62b1fa5dd37884ff82c8f6c962841a5e1420570c20d41e843a5e42dcb3a31d6f","title":"Add Host Records Manually","path":"/lrsiem/7.22.0/add-host-records-manually","children":[]},{"id":"ci_b8d3638414995b5dbbf41cc43aadd09c992e59890d4ff090d6d0d81a03769704","title":"Add Hosts From Clipboard","path":"/lrsiem/7.22.0/add-hosts-from-clipboard","children":[]},{"id":"ci_f1e1fb729cb22df40b78e221bebd0d0496cf47bd91b05679ea02e96c51afd8cb","title":"Add Hosts From File","path":"/lrsiem/7.22.0/add-hosts-from-file","children":[]},{"id":"ci_fbfec3549a9d48b7276ccde819b4921a4450bf45f73413099b529c8818206cb5","title":"Add Origin Hosts or Impacted Hosts as Known Hosts","path":"/lrsiem/7.22.0/add-origin-hosts-or-impacted-hosts-as-known-hosts","children":[]},{"id":"ci_6db8f879fb19dc126b8331eca40e85dbcc888bb7b287ef6ab644c5cc0abc8a60","title":"Add or Remove Multiple Host Roles","path":"/lrsiem/7.22.0/add-or-remove-multiple-host-roles","children":[]},{"id":"ci_22dfa7762c7c1f16e380eb024d62c3369ac7f5cb38220fa792eb25eef4ef2dc7","title":"Export Multiple Host Roles to File","path":"/lrsiem/7.22.0/export-multiple-host-roles-to-file","children":[]},{"id":"ci_dbc7ac6d5c29bd58f2eaf45dfac4ca791768d264e9ef7ff77bcd32e319d4c147","title":"Modify Properties for a Single Host Record","path":"/lrsiem/7.22.0/modify-properties-for-a-single-host-record","children":[]},{"id":"ci_b385f35f677d0c94ddb60f178645dc26d9db2fb64643aedcab8696caffe6c64c","title":"Modify Properties for Multiple Host Records","path":"/lrsiem/7.22.0/modify-properties-for-multiple-host-records","children":[]},{"id":"ci_b98c32eb4fa317dbe617c96876e527a10accf6a13ad07b580617df31ce5ff469","title":"Resolve Known Hosts","path":"/lrsiem/7.22.0/resolve-known-hosts","children":[]},{"id":"ci_d018c4e1e1879326b8ef8ae58f20252650981ad8477e7e987b2232429dfb4401","title":"Retire Host Records","path":"/lrsiem/7.22.0/retire-host-records","children":[]},{"id":"ci_ece1f052ce6f762d7de6fccf37d52bbfcfadbfb491d0677778d6527244f27b05","title":"Search for Hosts","path":"/lrsiem/7.22.0/search-for-hosts","children":[]},{"id":"ci_988174e0ada5aafbba2b45cdec6c238d248f423fba34761ab651b2969804366e","title":"Windows Host Wizard","path":"/lrsiem/7.22.0/windows-host-wizard","children":[{"id":"ci_6919e40a74df96ff4c9d0b55fbf911a3f34a6f3835fa4e860aceda5d3b2f38c0","title":"Configure Initial Host Settings in Windows Host Wizard","path":"/lrsiem/7.22.0/configure-initial-host-settings-in-windows-host-wizard","children":[]},{"id":"ci_240c2b2074dc3ff96861dca6f88c6235bfc013d0ef152afbca18a7336b5473fb","title":"Import Computers for Log Collection","path":"/lrsiem/7.22.0/import-computers-for-log-collection","children":[]},{"id":"ci_dc3d5cb9d2b817b5017dd7741c55c567617fc911e994e245669eb95cd3c34397","title":"Perform Optional Configuration for Remote Log Collection","path":"/lrsiem/7.22.0/perform-optional-configuration-for-remote-log-collection","children":[]},{"id":"ci_85359021181a1bf979976f0b9d2da7af9cada7848eb7f1fc749ac9bd3408f341","title":"Query Computers with Windows Host Wizard","path":"/lrsiem/7.22.0/query-computers-with-windows-host-wizard","children":[]},{"id":"ci_bb7adc055edce3ddd49082a4780b193c4a189be28808a58ee630c7b7b7b18f32","title":"Review Computers with Windows Host Wizard","path":"/lrsiem/7.22.0/review-computers-with-windows-host-wizard","children":[]},{"id":"ci_396ee8b27a695fcbccc5d3830544b9b2400190ccc5c2df5dad9bed4ca207b920","title":"Scan a Domain for Computers","path":"/lrsiem/7.22.0/scan-a-domain-for-computers","children":[]},{"id":"ci_034ea7abbe762e88bdb75e723416f6ac46b1374be91784fa233ced85ce8e5511","title":"Work with Hosts and Agents in Windows Host Wizard","path":"/lrsiem/7.22.0/work-with-hosts-and-agents-in-windows-host-wizard","children":[]}]}]},{"id":"ci_35907baa1c5175d00c262ef941a6ba179214eb557383ac2f5fcd369809dc673e","title":"Knowledge Base","path":"/lrsiem/7.22.0/knowledge-base","children":[{"id":"ci_3a15cd7727742ed8df4416adf57672a1e5855c79dbebfcbb57f54cf742ba7a7b","title":"Back Up the EMDB","path":"/lrsiem/7.22.0/back-up-the-emdb","children":[]},{"id":"ci_edd51ca67f63cfa07d463d2b03f7f1da3f40dfd42cbc1432941c7498a8189cb1","title":"Configure Knowledge Base Synchronization Settings","path":"/lrsiem/7.22.0/configure-knowledge-base-synchronization-settings","children":[]},{"id":"ci_3fff746b92c108c2d441eee2e02007ca9a3992589376f47b206ac19d1e60ce98","title":"Download the Knowledge Base File","path":"/lrsiem/7.22.0/download-the-knowledge-base-file","children":[]},{"id":"ci_4e3ee659c2656b24ff2e977dcee2d617c9f39d6d7afc076f23b2cba53adbcaf6","title":"Import a Knowledge Base","path":"/lrsiem/7.22.0/import-a-knowledge-base","children":[]},{"id":"ci_72be3de81ac2a560389bf74aeb8dfca72f1abe33bdace22830427933cebd163a","title":"Knowledge Base Manager","path":"/lrsiem/7.22.0/knowledge-base-manager","children":[{"id":"ci_2371937c3f6f45dbb274407d328da0e0ddc5f3122c918ec1f1a9cefb8541acc5","title":"Disable Knowledge Base Modules","path":"/lrsiem/7.22.0/disable-knowledge-base-modules","children":[]},{"id":"ci_f68d9ed987ec4f60e8f509292c2fc663a078e99185cb63bb110538fe5ec3b6ab","title":"Enable Knowledge Base Modules","path":"/lrsiem/7.22.0/enable-knowledge-base-modules","children":[]},{"id":"ci_74ef18632166b6a7283019463b43e325def095e675e2bd9c2f26561429c1f718","title":"Export Knowledge Base Module Information to a File","path":"/lrsiem/7.22.0/export-knowledge-base-module-information-to-a-file","children":[]},{"id":"ci_765a65ccaa5096fd547ab0faa7f0dddb5674758f9aa7511713da73d5ed9914f4","title":"Migrate Common Events","path":"/lrsiem/7.22.0/migrate-common-events","children":[]},{"id":"ci_0e09f60cc87b116e1a53b12360c3ef02c4ac3ece5d44859209966e35e777d6f3","title":"Modify the Properties of Knowledge Base Modules","path":"/lrsiem/7.22.0/modify-the-properties-of-knowledge-base-modules","children":[]},{"id":"ci_2d615bb3e56bcbcda567b2dc7ed84c8066d997223f84c3347d89cc20250991ad","title":"View Knowledge Base Module Dependent Objects","path":"/lrsiem/7.22.0/view-knowledge-base-module-dependent-objects","children":[]}]}]},{"id":"ci_589ce157300fb75089a818bcc7245b053d4dafeafa60d53bccdeb2a2eee985f1","title":"Log Distribution Services","path":"/lrsiem/7.22.0/log-distribution-services","children":[{"id":"ci_af003b88f1d1935653f06fcdd92d556c54c6bfc6a81b438be057ea354dc8f984","title":"Log Distribution Receiver Manager","path":"/lrsiem/7.22.0/log-distribution-receiver-manager","children":[{"id":"ci_aa63ebe882f222220db644f7cf26d32afd3521eb69771a59ee265c89f4505a51","title":"Create Log Distribution Receivers","path":"/lrsiem/7.22.0/create-log-distribution-receivers","children":[]},{"id":"ci_d3078beb72c060d00ce444b4ef9549d755d093871432c8fabe86e982cca5f90e","title":"Enable Log Distribution Receivers","path":"/lrsiem/7.22.0/enable-log-distribution-receivers","children":[]},{"id":"ci_c2187acb5535e75abf16ea242c57103bb222934f8bee4de2124c43ea7a6342b2","title":"Modify Log Distribution Receivers","path":"/lrsiem/7.22.0/modify-log-distribution-receivers","children":[]}]},{"id":"ci_65bd04667d66ad1295fa2614e99a25164c1db653df50965a17bb5e0d2ca219cf","title":"Log Distribution Policy Manager","path":"/lrsiem/7.22.0/log-distribution-policy-manager","children":[{"id":"ci_83efbf3a2a9dac1e907d44c2afd5ac74aa93b074ea144e67fc96318ee033efd5","title":"Create Log Distribution Service Policies","path":"/lrsiem/7.22.0/create-log-distribution-service-policies","children":[]},{"id":"ci_f83cdec7a41867f71f817ac7ad7709b03bd198fc1e84ecf2c820ac720e762343","title":"Enable or Disable Log Distribution Service Policies","path":"/lrsiem/7.22.0/enable-or-disable-log-distribution-service-policies","children":[]},{"id":"ci_74b1df727c3ed81f3771e60223e199f1a2e2326eec4180e10fb9464b5f71ddfd","title":"Modify Log Distribution Service Policies","path":"/lrsiem/7.22.0/modify-log-distribution-service-policies","children":[]}]},{"id":"ci_41412012d8935b19e41f32a35636c5f196a20d2f7f262d64186c161396adc996","title":"LogRhythm Log Distribution Services Version 2","path":"/lrsiem/7.22.0/logrhythm-log-distribution-services-version-2","children":[{"id":"ci_ea94a4385a4e6cd931f8f69cf1c517e1124c9764ed6c7c48759fd203c7c8958a","title":"Determine When to Switch to Log Distribution Services v2","path":"/lrsiem/7.22.0/determine-when-to-switch-to-log-distribution-services-v2","children":[]},{"id":"ci_ef33b8a66cab15f49a3a887619b8754f685c5f06a5a2fda329f708574a8a14c4","title":"Enable Log Distribution Services v2","path":"/lrsiem/7.22.0/enable-log-distribution-services-v2","children":[]},{"id":"ci_3cc76524abb6a20d509d035c47364a8a97c889501e21bbd982af8ff500c9fb84","title":"Troubleshoot Log Distribution Services v2","path":"/lrsiem/7.22.0/troubleshoot-log-distribution-services-v2","children":[]}]},{"id":"ci_1f4776777b2505cc77e1ca726806d6a453697499d0482e4b78e3857fe587a939","title":"Modify Log Distribution Service Properties in Data Processors","path":"/lrsiem/7.22.0/modify-log-distribution-service-properties-in-data-processors","children":[]}]},{"id":"ci_3acca892ddc9036e58b3d416ac47ed36f43ac177608ebe21605b8d2367a37226","title":"Log Processing Policies","path":"/lrsiem/7.22.0/log-processing-policies","children":[{"id":"ci_9d66dc2e4d85a98b037a6f99fdc079790f04ccb21046bd2f96b9fd9d96594ea2","title":"Create Log Processing Policies","path":"/lrsiem/7.22.0/create-log-processing-policies","children":[]},{"id":"ci_703921a189464f63d5ee211c4eafb5e15a37a236ed8768556580d439e3ba43a3","title":"Assign Log Processing Policies","path":"/lrsiem/7.22.0/assign-log-processing-policies","children":[]},{"id":"ci_aa8ec32e7bc195012c398ab035f010921c45f1a18d0848c48b71d818312f523b","title":"Modify Log Processing Policies","path":"/lrsiem/7.22.0/modify-log-processing-policies","children":[]},{"id":"ci_e68157235ddd68b6e92f3d3812ff262499d3069587839455ad0c1f006dc05498","title":"Delete Log Processing Policies","path":"/lrsiem/7.22.0/delete-log-processing-policies","children":[]},{"id":"ci_07ac2ae1d953a069323ba5bfd637986ac60c9d1b941b7fb1cbaaaf877f0721f6","title":"Troubleshoot MPE Rule Performance","path":"/lrsiem/7.22.0/troubleshoot-mpe-rule-performance","children":[]}]},{"id":"ci_a9113c0d2ff41a787a519b87d368453062b9dac0dfcc4feaa5d8f57ab11905d4","title":"Log Sources","path":"/lrsiem/7.22.0/log-sources","children":[{"id":"ci_dabad424962658cf539cfc86bada439a8e8b619f25433be8c89ee6e7d593bcdb","title":"Work With Log Sources","path":"/lrsiem/7.22.0/work-with-log-sources","children":[{"id":"ci_06f2260ca1eaceb020a2694374800920e427a8b8106918b735e13fd36361782c","title":"Add a Single Log Source","path":"/lrsiem/7.22.0/add-a-single-log-source","children":[]},{"id":"ci_94ccf2025b836b537d6bf15dac0d0262ce863c5352c188bac47d2aed196b78c5","title":"Add Multiple Log Sources","path":"/lrsiem/7.22.0/add-multiple-log-sources","children":[]},{"id":"ci_8ea1d71f095743190b14e710fd5397ff85f66e0f96375daeb414b39c9681f4fc","title":"Associate New Log Sources","path":"/lrsiem/7.22.0/associate-new-log-sources","children":[]},{"id":"ci_ccdd9fab9969cc2798824f0f6fb0c847bcb24e56db07eaf388c7cf8558635e32","title":"Collect Local Event Logs with the Server Service Disabled","path":"/lrsiem/7.22.0/collect-local-event-logs-with-the-server-service-disabled","children":[]},{"id":"ci_b6649219d697e0c3d1752d6bfe29843dd0a41f11fa62abfdc184c4776131b924","title":"Configure Log Sources Automatically","path":"/lrsiem/7.22.0/configure-log-sources-automatically","children":[{"id":"ci_d03d1086f3191ceaddf240f7a84fa1824e33814de5596bfdb2cb7a621d588359","title":"Add and Delete SNMP Connections","path":"/lrsiem/7.22.0/add-and-delete-snmp-connections","children":[]},{"id":"ci_f2b7a7f918ab06563257776e73ab2a127560ba52afbfd6bf8d219159a04b6047","title":"Enable Automatic Log Source Configuration","path":"/lrsiem/7.22.0/enable-automatic-log-source-configuration","children":[]},{"id":"ci_c32945b6b6317eae70e0536ffbfd8ab87d239fc690d80fe29d2c78148599741f","title":"Use the Advanced Criteria Manager","path":"/lrsiem/7.22.0/use-the-advanced-criteria-manager","children":[]}]},{"id":"ci_7a4214ad88765d55acc41bc59e7a875cd85a0d47ea540f3f5f5aa2f6a0ff39b5","title":"Configure Support for Multi-Line Logs","path":"/lrsiem/7.22.0/configure-support-for-multi-line-logs","children":[]},{"id":"ci_3ac2d1509fe6d45736235fc0d4b0500956ba9cb03ee23e5e4ed5e2710a0f3473","title":"Export Log Sources","path":"/lrsiem/7.22.0/export-log-sources","children":[]},{"id":"ci_85644dc57f2e0fb82712b6e6ad0a0f9565e472b353c0f053ea62f40786374c5e","title":"Modify a Single Log Source","path":"/lrsiem/7.22.0/modify-a-single-log-source","children":[]},{"id":"ci_41c51a17daee6e5f3a7860622dd895d6c1e50a0dec03d8dd2a941c647573463c","title":"Modify Event Settings","path":"/lrsiem/7.22.0/modify-event-settings","children":[]},{"id":"ci_f572661145f705cc6f794685e57dc4ec9785e8456bdb16f9d554645c02d8c31f","title":"Modify Multiple Log Sources","path":"/lrsiem/7.22.0/modify-multiple-log-sources","children":[]},{"id":"ci_527d2d604444693613d097e351a75233978cacba64f35aa28ea7b543192c88ee","title":"Move Log Sources to New Hosts","path":"/lrsiem/7.22.0/move-log-sources-to-new-hosts","children":[]},{"id":"ci_cf4a31f1c71fa0adba4794cf2913e0f2b82f628b25ed874312690eaac4b01a35","title":"Preregister Log Sources","path":"/lrsiem/7.22.0/preregister-log-sources","children":[]},{"id":"ci_6d66dd02089ebf26e810a5d506617ac22c19c9e1763fd865b269cd22d30d4d9f","title":"Resolve Log Source Hosts","path":"/lrsiem/7.22.0/resolve-log-source-hosts","children":[]},{"id":"ci_8ae0f043b69149332a2d8cdc8bb37f84f0399ec4c254a63761e3e4ab1fbf3413","title":"Retire or Activate Log Sources","path":"/lrsiem/7.22.0/retire-or-activate-log-sources","children":[]}]},{"id":"ci_3d44a4d4b6dc69d822e87e54e26bc18e74786a5120965a270110234a68499b77","title":"Log Source Types","path":"/lrsiem/7.22.0/log-source-types","children":[{"id":"ci_c06bff6f0baae3f4cdf2ae67c8f1c1cfb39392bfd45a3685cd76f1e421d8c2c5","title":"Create Custom Log Source Types","path":"/lrsiem/7.22.0/create-custom-log-source-types","children":[]},{"id":"ci_c9e931e83d2505517769e071a5fc1c5a0ebdb293eddb08a987c434e23d96a8be","title":"Delete Custom Log Source Types","path":"/lrsiem/7.22.0/delete-custom-log-source-types","children":[]},{"id":"ci_4845d02078ed7cf2b9e79b4a61ee9c0df84833dddef8c8e8c3514d6888717f9c","title":"Modify Custom Log Source Type","path":"/lrsiem/7.22.0/modify-custom-log-source-type","children":[]},{"id":"ci_ff23020105db77a0ba2bca5da8cceedac7f37f342bd3c45aaadb8bef02c431cf","title":"Modify Type for Pending Log Source","path":"/lrsiem/7.22.0/modify-type-for-pending-log-source","children":[]}]},{"id":"ci_515bbdaa8d32e8a7d71670535401ffec39b840077e35c09fad2755efc3eead8c","title":"Data Masking","path":"/lrsiem/7.22.0/data-masking","children":[{"id":"ci_d0e8fe07041d493394b799346bf0ba2ca6ba31db4c387aed9617df7439c9b519","title":"Add New Data Masking Rules","path":"/lrsiem/7.22.0/add-new-data-masking-rules","children":[]},{"id":"ci_96aac1dcf0c232ae881007094f00bb14faf6c7370ff361c3e0ae60f263b72d6f","title":"Import and Export Data Masking Rules","path":"/lrsiem/7.22.0/import-and-export-data-masking-rules","children":[]},{"id":"ci_e921fd137e65be8f19bd8ca23b96ebae0a78414ca2f976980f0c85b9a0a68446","title":"Enable and Disable Data Masking Rules","path":"/lrsiem/7.22.0/enable-and-disable-data-masking-rules","children":[]},{"id":"ci_5b430d3b45a5f005286daa555e5b1f684599277818fc5d609255727f48f4a155","title":"Reorder Data Masking Rules","path":"/lrsiem/7.22.0/reorder-data-masking-rules","children":[]},{"id":"ci_50beccc16c1b8622af112b0ffeb829ba780724d049d0b866df9e183598e8a9bb","title":"Delete Data Masking Rules","path":"/lrsiem/7.22.0/delete-data-masking-rules","children":[]}]},{"id":"ci_5e1e3fc6cb90ff7cac7b4de1dca2a950ed9f9f64fcfb5f2f680089886d33fc7c","title":"Log Source Identification and Acceptance","path":"/lrsiem/7.22.0/log-source-identification-and-acceptance","children":[{"id":"ci_9043bab517ef924538527c19067017c282b41ebd21d79c15c018d8769f2d3e20","title":"Accept New Log Sources","path":"/lrsiem/7.22.0/accept-new-log-sources","children":[]},{"id":"ci_d2d867f5a72b980db1184d5c6cf68e29a2b2bb7da24d85d8ae9c9cf8792e700c","title":"Accept New Log Sources Automatically","path":"/lrsiem/7.22.0/accept-new-log-sources-automatically","children":[{"id":"ci_3bc3b7b827f94db926748376f26c671e89d88e250563b2e85972ada306f4c250","title":"Create IP Range Log Source Acceptance Rules","path":"/lrsiem/7.22.0/create-ip-range-log-source-acceptance-rules","children":[]},{"id":"ci_73dedb95a2c1d5f43498ecea48afe29332d85acdf1073d5107824675fceda7b1","title":"Create Pattern Match Log Source Acceptance Rules","path":"/lrsiem/7.22.0/create-pattern-match-log-source-acceptance-rules","children":[]},{"id":"ci_5cd7337df1c2779f788595f13a1d62e2e1b52ea24f287332b23b2d1e28b91b66","title":"Manage Automatic Log Source Acceptance Rules","path":"/lrsiem/7.22.0/manage-automatic-log-source-acceptance-rules","children":[]}]},{"id":"ci_1c214c6afd71d2794a4d4b8122d04cfb96634daa95876e5958d41309bc28cc03","title":"Set the Log Source Identification Search Scope","path":"/lrsiem/7.22.0/set-the-log-source-identification-search-scope","children":[]},{"id":"ci_4253c283d1252285fc733b8d5eb6c48d46817377bd931487ae45cb2e9e917b99","title":"View Log Source Acceptance Properties","path":"/lrsiem/7.22.0/view-log-source-acceptance-properties","children":[]}]},{"id":"ci_57d0c0f1f8f4a36bdd069c0b4fc3101e8620c23ae782d0511d6c1576b241f713","title":"Log Sources and Agents","path":"/lrsiem/7.22.0/log-sources-and-agents","children":[{"id":"ci_f41acfa8f74041df3a3f802a6edd9b421e5a5bd962deeda96c0ea237291e3122","title":"Limit the Number of Agents Available for Batch Updates","path":"/lrsiem/7.22.0/limit-the-number-of-agents-available-for-batch-updates","children":[]},{"id":"ci_82901999286ef291b47a0a1e881c42623ea78ed6982eb3777b44e03e4915ea5b","title":"Move Log Sources Between Agents","path":"/lrsiem/7.22.0/move-log-sources-between-agents","children":[]}]},{"id":"ci_18ee04f14fb5d13e4741891f07997d1b6461ca289fd3985b808f9683480dbbb8","title":"Flat File Collection","path":"/lrsiem/7.22.0/flat-file-collection","children":[{"id":"ci_054209543a2d96b07a2c6118d4d8cf037e26a9b90e78f27d8e49e9b863143a46","title":"Configure a Host for Local Flat File Collection","path":"/lrsiem/7.22.0/configure-a-host-for-local-flat-file-collection","children":[]},{"id":"ci_0a8d2fbd662ea8075b17d823fcd60461101727fbd027856642b8da2fb0e087af","title":"Configure an Agent for IIS Log Collection","path":"/lrsiem/7.22.0/configure-an-agent-for-iis-log-collection","children":[]},{"id":"ci_459ce144817bbf853263acd078ebd3f1fa46ea8f939fcb192cd948ff06f54269","title":"Convert Flat File to Epoch Time","path":"/lrsiem/7.22.0/convert-flat-file-to-epoch-time","children":[]},{"id":"ci_4cea260b405a145177ebdfe2bf2796f140ef3ea7bd20d1750243ea7d9e1d8f2f","title":"Supported Date Parsing Formats","path":"/lrsiem/7.22.0/supported-date-parsing-formats","children":[]}]},{"id":"ci_5ea39397b79e7e3504917acce0a7df4c085cdba5c2d60cb9966f7c3a9163ef88","title":"UDLA Collection","path":"/lrsiem/7.22.0/udla-collection","children":[{"id":"ci_fb167017ed553ebe31cbcc21424df5566c58207e3b2693f3198ed0c3ea47f82b","title":"Configure UDLA Log Collection","path":"/lrsiem/7.22.0/configure-udla-log-collection","children":[]},{"id":"ci_ce0e1f634ff3688179afcca5183cac6096223ecc0c54759258d30f475271582d","title":"Create a Sample McAfee ePolicy Orchestrator (ePO) Event Log Source","path":"/lrsiem/7.22.0/create-a-sample-mcafee-epolicy-orchestrator-epo-event-log-source","children":[]},{"id":"ci_63f4f2622839f3cd75c82327436a2585f91377443b02e78f71ec438b92bb2dc1","title":"Create a Sample Oracle 10g Audit Trail UDLA Log Source","path":"/lrsiem/7.22.0/create-a-sample-oracle-10g-audit-trail-udla-log-source","children":[]},{"id":"ci_b614c096423a097aa3fdef47ddf1809baef8d5af077be4c43e3a662c27b96d6c","title":"Export and Import UDLA Log Source Configurations","path":"/lrsiem/7.22.0/export-and-import-udla-log-source-configurations","children":[]},{"id":"ci_ac3b4c742a2dd45776a16567cc494b98c161a205935b08628badeb0459f11672","title":"Override UDLA SQL","path":"/lrsiem/7.22.0/override-udla-sql","children":[]}]},{"id":"ci_690c09ced16c49c47853c52e3e144cfa3165920f8188ff3f308e14f5e480e10b","title":"Log Source Virtualization","path":"/lrsiem/7.22.0/log-source-virtualization","children":[{"id":"ci_0db2c2cf7769636c5ea940ce0380465b77074f83bf2d9a818d0bb5387bf8aa5a","title":"Create Log Source Virtualization Templates","path":"/lrsiem/7.22.0/create-log-source-virtualization-templates","children":[]},{"id":"ci_e8a7dcb245682a0cb34551f9d2801c3bd6370139211cf8ec34b2e4af5b331fb7","title":"Create Virtual Log Sources","path":"/lrsiem/7.22.0/create-virtual-log-sources","children":[]},{"id":"ci_80945c1bc6ffec59f8cba628f296eff6ef4d782f1e18ec5089a0de0ec3336818","title":"Delete Log Source Virtualization Templates","path":"/lrsiem/7.22.0/delete-log-source-virtualization-templates","children":[]},{"id":"ci_3f1782b41eeccb072cd122f60b98dc7dc97969b994e3d3b3c0d09d8f53f86944","title":"Delete Virtual Log Sources","path":"/lrsiem/7.22.0/delete-virtual-log-sources","children":[]},{"id":"ci_94c7827aafda453462f4311586fb298ac6c3fc53401e366572e89384d326cafd","title":"Enable Virtualization on a Single Log Source","path":"/lrsiem/7.22.0/enable-virtualization-on-a-single-log-source","children":[]},{"id":"ci_8bd4fd212d2cd3ac5951c97751b29b53add79d95fa10bcaa8bbbdba738dc1938","title":"Enable Virtualization on Multiple Log Sources","path":"/lrsiem/7.22.0/enable-virtualization-on-multiple-log-sources","children":[]},{"id":"ci_00eb1873e338cb8a2dc9d771a5c57f2699a3f39314a403083eed0da21f980af9","title":"Export Log Source Virtualization Templates","path":"/lrsiem/7.22.0/export-log-source-virtualization-templates","children":[]},{"id":"ci_6a573dd3f26a0311bd6eb1cb83938380d7bc1df7888af661865aaecdb9cd46e8","title":"Filter Virtual Logs at the Agent","path":"/lrsiem/7.22.0/filter-virtual-logs-at-the-agent","children":[]},{"id":"ci_c8a20da616f4bfa3e20956f4f03cec9c218bd641126e47fac74c57b9e8f4ec51","title":"Import Log Source Virtualization Templates","path":"/lrsiem/7.22.0/import-log-source-virtualization-templates","children":[]},{"id":"ci_8510117f2dbfb3c3a9a9bcd8e78a4f3d4564bce5e896a18cfda98037b56fdd2c","title":"Modify Catch-All Sources on a Batch of Parent Log Sources","path":"/lrsiem/7.22.0/modify-catch-all-sources-on-a-batch-of-parent-log-sources","children":[]},{"id":"ci_061f66a66be653db4bc57083b384c9463a9fb05bfa3d5145e61f66fb6906bc28","title":"Modify Log Source Virtualization Templates","path":"/lrsiem/7.22.0/modify-log-source-virtualization-templates","children":[]},{"id":"ci_6d1309df66659c5b2d51bc8327b4c04593eee3619868b2e5d4a99cd3c2b64837","title":"Modify Virtual Log Sources","path":"/lrsiem/7.22.0/modify-virtual-log-sources","children":[]}]}]},{"id":"ci_3a3619c0595a05670a0ab055a9fa04e58127ba3aa3c10029aca5c3037c30bc9b","title":"Network Monitor","path":"/lrsiem/7.22.0/network-monitor","children":[{"id":"ci_77823099e82962e98328d2e1bc7ed61ef85618d3b0018c7865920d111a6b924c","title":"Add NetMon in the Client Console","path":"/lrsiem/7.22.0/add-netmon-in-the-client-console","children":[]},{"id":"ci_09fa9756e565e5b9ea737c98f706d9659fc708097b9bca4af3e06b2cdff37073","title":"Configure NetMon in the Client Console","path":"/lrsiem/7.22.0/configure-netmon-in-the-client-console","children":[]},{"id":"ci_0f5361d50a051dfedcabb956f9375d440897128f8191b0e2d58103a6010a9f0c","title":"Delete NetMon in the Client Console","path":"/lrsiem/7.22.0/delete-netmon-in-the-client-console","children":[]},{"id":"ci_f171aba3894ccb3986d0359b4009886df39c0f3a3eb82b810742cac678a6cb80","title":"Modify NetMon in the Client Console","path":"/lrsiem/7.22.0/modify-netmon-in-the-client-console","children":[]},{"id":"ci_5574168d53e3e70a8ce57621cbf1c20928268e6a7f7d0bd4c67f5c84d96639e7","title":"Monitor NetMon in the Client Console","path":"/lrsiem/7.22.0/monitor-netmon-in-the-client-console","children":[]}]},{"id":"ci_0c1de5096d9a09ebc12f2c977e60d75c7e2cf50fd4c4f2fcf267794c02916418","title":"Network Records","path":"/lrsiem/7.22.0/network-records","children":[{"id":"ci_08cefb700317d06c2b9a4562fd2467582d09c998740605b754ec24351c6a2391","title":"Add Network Records from File","path":"/lrsiem/7.22.0/add-network-records-from-file","children":[]},{"id":"ci_693f8c99fa170ce43840fe18d7454e943be83a3b65d46949bfbb7c88c5fa7c72","title":"Manually Add Network Records","path":"/lrsiem/7.22.0/manually-add-network-records","children":[]},{"id":"ci_5e9d110f8d538ee8a64385ac0c6213eab3d852e4140ac010ef7b68d17c7d406f","title":"Modify Properties for a Single Network","path":"/lrsiem/7.22.0/modify-properties-for-a-single-network","children":[]},{"id":"ci_e8f0fb46eeeef98495078650e4c892b3591d31c5a73ce35757fdb4544933da0e","title":"Modify Properties for Multiple Network Records","path":"/lrsiem/7.22.0/modify-properties-for-multiple-network-records","children":[]},{"id":"ci_7471946e56564ff9802dbe98c9f83bcf6d62de90fb08689847cb67efc07a5147","title":"Resolve Known Networks","path":"/lrsiem/7.22.0/resolve-known-networks","children":[]},{"id":"ci_751e1500bdb486f3627537d136efb58d793831cec48d7c8ed4839e0741178563","title":"Retire Network Records","path":"/lrsiem/7.22.0/retire-network-records","children":[]},{"id":"ci_5465bf3d852b897618e10435c836d949a726ec46be3c02d5e69b27c2aa5939b9","title":"Search for Networks","path":"/lrsiem/7.22.0/search-for-networks","children":[]}]},{"id":"ci_286cc10e6ab8701f093307231c2fab3cc11857c0f3323424fb38eec37786ce2b","title":"Object Permissions Manager","path":"/lrsiem/7.22.0/object-permissions-manager","children":[{"id":"ci_bbe5b9a69f2bce4c170dfbfc1c0040956685f61f0119d87e7f42eadc201297b8","title":"Modify Objects' Security Settings","path":"/lrsiem/7.22.0/modify-objects-security-settings","children":[]}]},{"id":"ci_c21218214c0a35bc874243590176c12f0bccbf1b88745675aeae0c7aa8a4352a","title":"People and Users","path":"/lrsiem/7.22.0/people-and-users","children":[{"id":"ci_fd642bd1e52ab25b398c0e3d152a7fac78e11a618901abb909336ed858bfe1bd","title":"Add Person Records or Roles","path":"/lrsiem/7.22.0/add-person-records-or-roles","children":[]},{"id":"ci_ba6752aa74310a2485e206f1545ab439af641d3a221ebc0f030be6190294ee59","title":"Assign Active Directory Credentials to Local Users","path":"/lrsiem/7.22.0/assign-active-directory-credentials-to-local-users","children":[]},{"id":"ci_92c99938276698c4ad9f3e29fec6ee04e8732209952158b5c8a28b1963a0cafd","title":"Create User Accounts for Person Records or Roles","path":"/lrsiem/7.22.0/create-user-accounts-for-person-records-or-roles","children":[]},{"id":"ci_bd2e6b710074394f3b5725ca18af7dbb3847b43273590f6d621b9c459a2e7ce0","title":"Direct Requests to the Case API URL","path":"/lrsiem/7.22.0/direct-requests-to-the-case-api-url","children":[]},{"id":"ci_90d3fb5346ca36a8206daaa714c02156f0504c92dbb90c836ecd228e62e1761e","title":"Disable Person Records or Roles","path":"/lrsiem/7.22.0/disable-person-records-or-roles","children":[]},{"id":"ci_455b4cf3e9a25f7ca9e46fa058fdb9208bac0c0c5622d4ebcdc6946c55413902","title":"Modify Logins for Person Records or Roles","path":"/lrsiem/7.22.0/modify-logins-for-person-records-or-roles","children":[]},{"id":"ci_82102b934256e4cf49c5318ecc8089f49e79262c5b76e9b6542d179c83b497f7","title":"Modify Person Records or Roles","path":"/lrsiem/7.22.0/modify-person-records-or-roles","children":[]},{"id":"ci_09637335ca1ae834d9e400e24c2dd268bbbcb6c4ae430f666d9bccedb0f88939","title":"Rename LogRhythm Users","path":"/lrsiem/7.22.0/rename-logrhythm-users","children":[]},{"id":"ci_98a5547fffe37ea1ede0a29732a84ba5fa19067cc8ab55e7365593376ea243ba","title":"Reset Multi-Factor Authentication Access to the Web Console","path":"/lrsiem/7.22.0/reset-multi-factor-authentication-access-to-the-web-console","children":[]},{"id":"ci_a39a224d49df89635d62425064da6157677d41b55670eb6959070c335a7849f9","title":"User Profile Manager","path":"/lrsiem/7.22.0/user-profile-manager","children":[{"id":"ci_c041d39340d79c7496ca1990ce4ffc787b29c8c4c56ad10dbc30c127b06078b7","title":"Create a New User Profile","path":"/lrsiem/7.22.0/create-a-new-user-profile","children":[]},{"id":"ci_3b18d3f2683a0edd9815a39ccf7667f7c72becc905986bd4056bcae740eed56b","title":"Manage User Profile SmartResponse Access Rights","path":"/lrsiem/7.22.0/manage-user-profile-smartresponse-access-rights","children":[]},{"id":"ci_d5f84bfdc1cf19d932ae21c4a9549434ca8737c8d1dc01a8826c57f8853f20ca","title":"Modify User Profile Data Processor Access Rights","path":"/lrsiem/7.22.0/modify-user-profile-data-processor-access-rights","children":[]},{"id":"ci_e685bbf9e7ad1e7540fd7fd2b4d853018a639c66b12d6696d3bf498eba987c74","title":"Modify User Profile Effective Log Sources Settings","path":"/lrsiem/7.22.0/modify-user-profile-effective-log-sources-settings","children":[]},{"id":"ci_e38651b099e309d94ee7b29b22a3c54c8dd0784b6a2bcb8338662bf3509b98f0","title":"Modify User Profile Entities Settings","path":"/lrsiem/7.22.0/modify-user-profile-entities-settings","children":[]},{"id":"ci_37183ee005044b7356d6bb8244f1206bd39f9aac52cdacb2cda891e7c2cb7060","title":"Modify User Profile General Settings","path":"/lrsiem/7.22.0/modify-user-profile-general-settings","children":[]},{"id":"ci_59ac86c411931a790751136c230e1348e742d8157519822924de4a76937431f5","title":"Modify User Profile Log Sources Access Rights","path":"/lrsiem/7.22.0/modify-user-profile-log-sources-access-rights","children":[]},{"id":"ci_eaca08394ae5dc67a8611eb4359b750d28d4f87c784d0816e9cca3b37b77108b","title":"Manage User Profile Notification Group Access Rights","path":"/lrsiem/7.22.0/manage-user-profile-notification-group-access-rights","children":[]},{"id":"ci_fa26dceb907c41d9a4a86de0475d0e626321a223f2e36c40f0964168438dae51","title":"Modify User Profile Management Permissions","path":"/lrsiem/7.22.0/modify-user-profile-management-permissions","children":[]}]}]},{"id":"ci_66ae48e22471bae9957204ad84ab9d58a60f34f968033dba9204b85c97feb1da","title":"Platform Manager","path":"/lrsiem/7.22.0/platform-manager","children":[{"id":"ci_e0e5e5483471be71162328aab4d015909af34ef6bfd05e80ec713892cdb4ed57","title":"Alarming, Reporting, and Response Manager Services","path":"/lrsiem/7.22.0/alarming-reporting-and-response-manager-services","children":[{"id":"ci_50bfcd9004c9b05174f7ff0e23d8ec694882b7ae21e390fc6d5bd519fe06024c","title":"Apply Recommended Platform Manager Values","path":"/lrsiem/7.22.0/apply-recommended-platform-manager-values","children":[]},{"id":"ci_f16e981ba8c3f2a1c9139352076cfef88c7a3104642e51feabffe72654d306a0","title":"Integrate LogRhythm and McAfee ePolicy Orchestrator","path":"/lrsiem/7.22.0/integrate-logrhythm-and-mcafee-epolicy-orchestrator","children":[]},{"id":"ci_e91f0a4aa9e58e2539dc0b38f0c32af28b84d569dc860cb20e956cdd251f6f6b","title":"Modify Platform Manager Advanced Properties","path":"/lrsiem/7.22.0/modify-platform-manager-advanced-properties","children":[]},{"id":"ci_ed110b991b3a74419f628403a1489c12a663c87fc9df033dd658a980603fd77e","title":"Modify Platform Manager Basic Properties","path":"/lrsiem/7.22.0/modify-platform-manager-basic-properties","children":[]},{"id":"ci_c4e50f5372379519e76d0f9450d1326de493fa8a4602ea3c0a2faaa250c96939","title":"Revert to a Previous Platform Manager Configuration","path":"/lrsiem/7.22.0/revert-to-a-previous-platform-manager-configuration","children":[]},{"id":"ci_35c3e5fecfb714898168620399ad07be89df35a027b0b03c972c71a5d7b6f202","title":"Specific SMTP Servers to Allow for Failover","path":"/lrsiem/7.22.0/specific-smtp-servers-to-allow-for-failover","children":[]},{"id":"ci_34830f09af70134d31439e3291c9aca8118ccaf31661a6ff776de384c679112b","title":"Start, Stop, and Restart Platform Manager Services","path":"/lrsiem/7.22.0/start-stop-and-restart-platform-manager-services","children":[]}]},{"id":"ci_650348d795a2948fa2171034021935308f57ab2ee6ecc5649b49f68b61e0c463","title":"Global Risk Based Priority","path":"/lrsiem/7.22.0/global-risk-based-priority","children":[{"id":"ci_19c0515bfcf2d1c55492e53ea541a6921e2cdb67d95cbf710d76d1161486eb28","title":"Determine the MPE RBP Manually","path":"/lrsiem/7.22.0/determine-the-mpe-rbp-manually","children":[]},{"id":"ci_55c9a97fd6084dde515bc1c1477aaaf40bd8da411768628eea45849e2c73ca8c","title":"Modify AIE Risk Based Priority Settings","path":"/lrsiem/7.22.0/modify-aie-risk-based-priority-settings","children":[]},{"id":"ci_3003a95afbe4b3dc3eb007ecd898ad941ea9cfe17e546a812bb1240539c0b3be","title":"Modify the Default Destination Risk Level","path":"/lrsiem/7.22.0/modify-the-default-destination-risk-level","children":[]},{"id":"ci_b98389a4eb53346195ba57610e3bd326489261de2e849719fc6dddb3ea354d61","title":"Modify the Default Source Threat Level","path":"/lrsiem/7.22.0/modify-the-default-source-threat-level","children":[]},{"id":"ci_46cc4076e264159518e88cb530620b335bbe867880ffd7ace466d4aa0f9a39e1","title":"Modify the MPE Risk Based Priority Settings","path":"/lrsiem/7.22.0/modify-the-mpe-risk-based-priority-settings","children":[]},{"id":"ci_daa08959b57416f7b0727f0d3ca4878c75c5fef420e1e412e890b7f2befdb236","title":"Risk Based Priority Calculator","path":"/lrsiem/7.22.0/risk-based-priority-calculator","children":[{"id":"ci_35a6b68de8800f89686d6996dfd4d0a61d38bf001ed23e2460068c976b204891","title":"Install the RBP Calculator","path":"/lrsiem/7.22.0/install-the-rbp-calculator","children":[]},{"id":"ci_fb17a3fa15b38682d042b6f626e3c248b5e3c8127bea1d1f4893b45dede47303","title":"Determine MPE or AIE Risk Based Priority With The RBP Calculator","path":"/lrsiem/7.22.0/determine-mpe-or-aie-risk-based-priority-with-the-rbp-calculator","children":[]},{"id":"ci_ebc5132a5b8f6bb3bea3a9ec5fc1c43d26180031c4707c82d5373caa91c265f2","title":"Transfer AIE RBP Calculator Values to a LogRhythm Deployment","path":"/lrsiem/7.22.0/transfer-aie-rbp-calculator-values-to-a-logrhythm-deployment","children":[]},{"id":"ci_7ac7f57382d8e57c585510eab1ced80ddffb14c2251865e13ca72ea7bfa2f869","title":"Host, Network, and Default DRL and STL Settings","path":"/lrsiem/7.22.0/host-network-and-default-drl-and-stl-settings","children":[{"id":"ci_7a3587a81273bcd5ef4f067732156617392726004f5a8b402bf273a91218aa97","title":"Known Host and Network Search Algorithm","path":"/lrsiem/7.22.0/known-host-and-network-search-algorithm","children":[]}]},{"id":"ci_a01dd4aa7038b288ae209339ca58c95ea09cf2611e3c06d15dc1eab0bb23c86a","title":"Message Processing Engine RBP Algorithm","path":"/lrsiem/7.22.0/message-processing-engine-rbp-algorithm","children":[]},{"id":"ci_ef44caff709e4c935a933cafc0b700a31fee5b57146e305d57b5bc0c57fd849e","title":"AI Engine RBP Algorithms","path":"/lrsiem/7.22.0/ai-engine-rbp-algorithms","children":[]}]}]},{"id":"ci_02b3ce813c1a8c4c21c808e19d66611dda4d9dac95876a4e0f34aa81ec043fa7","title":"Job Manager Services","path":"/lrsiem/7.22.0/job-manager-services","children":[{"id":"ci_439a09678f5b7330858129f030cc9a02de09e4ddb14c6d0e102bc741aa60d3da","title":"Modify Job Manager Advanced Properties","path":"/lrsiem/7.22.0/modify-job-manager-advanced-properties","children":[]},{"id":"ci_484681ef9ebad58a107e36f73dda920330fc423d8635803b2804e40e74a311b4","title":"Modify Job Manager Basic Properties","path":"/lrsiem/7.22.0/modify-job-manager-basic-properties","children":[]},{"id":"ci_48f809f96cabc8e6039b59e9dd39f7c9fb6b0a1cad0b6e2f4cfc84e136cf3882","title":"Start, Stop, and Restart Job Manager Services","path":"/lrsiem/7.22.0/start-stop-and-restart-job-manager-services","children":[]},{"id":"ci_46ff31b0af74b7d088cc191edea49937867fa809bebb86dfa261e5e87422ea9e","title":"Use the Job Manager Configuration Manager","path":"/lrsiem/7.22.0/use-the-job-manager-configuration-manager","children":[]}]},{"id":"ci_7764e56da0e95ea9c9e5602af1f7e862380e4803f6857283b5490476a19d100d","title":"System Management Settings","path":"/lrsiem/7.22.0/system-management-settings","children":[{"id":"ci_6be63abe62dd1404d7dc92c88c7fbb3e4ce707a58706a635413829da351c8d0e","title":"Active Directory Domain Manager","path":"/lrsiem/7.22.0/active-directory-domain-manager","children":[{"id":"ci_937634b4b02ecf891711cb53f3590b4ecd6b934de50eca83bb13e6c2ffd600b1","title":"Add Active Directory Groups as Filters","path":"/lrsiem/7.22.0/add-active-directory-groups-as-filters","children":[]},{"id":"ci_90fdb162580255c326406fb50d21a0c0a604e4a728b7473301695839ec3cc316","title":"Add New Active Directory Domains","path":"/lrsiem/7.22.0/add-new-active-directory-domains","children":[]},{"id":"ci_68e0d96e26b5afe9dc4a493155061c7890d02a29ace9b03f7a22a4f29a535dc0","title":"Check the Active Directory Synchronization Status","path":"/lrsiem/7.22.0/check-the-active-directory-synchronization-status","children":[]},{"id":"ci_80eb84c638753d8d6bc3a0edb9ecbe3451fe69f101914ffed5e2be1e95a0f5bf","title":"Modify Active Directory Domains","path":"/lrsiem/7.22.0/modify-active-directory-domains","children":[]},{"id":"ci_b6371c7ac468b181f39b58e11638a9b213d2a76d75764a263fc7c0d9126443db","title":"Retire or Activate Active Directory Domains","path":"/lrsiem/7.22.0/retire-or-activate-active-directory-domains","children":[]},{"id":"ci_e0114f5d7a86564d7ee36c317c41ff3378f0c40a6a1744635617a6876c8c4a5a","title":"Run Active Directory Browser Investigations","path":"/lrsiem/7.22.0/run-active-directory-browser-investigations","children":[]}]},{"id":"ci_84ed5ab9fe0e6a4a7879d1820a38240f9aa8d991f8efb7e1947b6c124a470927","title":"Configure Global Maintenance Settings","path":"/lrsiem/7.22.0/configure-global-maintenance-settings","children":[]},{"id":"ci_757ef3af8dce0b4bb24025bbcc5e942cc289cb545efe1a4c24e5ee2ed217c23e","title":"Set or Modify Data Management Settings","path":"/lrsiem/7.22.0/set-or-modify-data-management-settings","children":[]},{"id":"ci_48817c8101eb2c07ee9bb42547b4a59773258378449c456f4b44704e6bfd3f44","title":"Enable Intelligent Indexing Globally","path":"/lrsiem/7.22.0/enable-intelligent-indexing-globally","children":[]}]},{"id":"ci_ee6ab5c3041711568ab02ab3760b450362ad37aef5a94cb88885cb39238a2cc6","title":"Update the IP Address of the Platform Manager","path":"/lrsiem/7.22.0/update-the-ip-address-of-the-platform-manager","children":[]},{"id":"ci_7beb95508a6184af5904077ab245c3d2886335b22af07edd03d78e1e29836423","title":"Use the Platform Manager Configuration Manager","path":"/lrsiem/7.22.0/use-the-platform-manager-configuration-manager","children":[]}]},{"id":"ci_63b3f3695da1245476247fe37cafcbffff6cf9a8797c204652f5bd742ef3d2a4","title":"SmartResponse","path":"/lrsiem/7.22.0/smartresponse","children":[{"id":"ci_aa129b6b87fe196a5e4d779412bffd1fccd6882b69a29a25c5ccabe3b1878b5d","title":"Approve or Deny SmartResponse Actions in the Client Console","path":"/lrsiem/7.22.0/approve-or-deny-smartresponse-actions-in-the-client-console","children":[]},{"id":"ci_a6cb510967f0f14e6ad17ec65b7bdebda3ad3259d88a1a6c8e4e47732cad440a","title":"Develop SmartResponse Plugins","path":"/lrsiem/7.22.0/develop-smartresponse-plugins","children":[{"id":"ci_f123b13a641429b9873d75a80ff1cf2d855d5e664ae4a52071d819bcb44bed9a","title":"Create the Payload","path":"/lrsiem/7.22.0/create-the-payload","children":[]},{"id":"ci_056c0d0ccc1132b4ed46920a353b568c91f9748623a7719ffc5fc6d069f52572","title":"Create the Configuration File","path":"/lrsiem/7.22.0/create-the-configuration-file","children":[]},{"id":"ci_7a2487247fbac9c0bb7fd0741a38528736ad1edd2f043d54e7dd4ff734501238","title":"Package and Test the SmartResponse","path":"/lrsiem/7.22.0/package-and-test-the-smartresponse","children":[]},{"id":"ci_84ae970b32b9aa445ef73cb16218ff9316604d9bf8677e39b6818c55747a3b03","title":"Deploy Custom SmartResponse Plugins","path":"/lrsiem/7.22.0/deploy-custom-smartresponse-plugins","children":[]}]},{"id":"ci_b8bdfeb63f94199ef0d0fa8a5a7946fcf3c3f08e93878f4d14605d0b23189a72","title":"Import SmartResponse Plugins","path":"/lrsiem/7.22.0/import-smartresponse-plugins","children":[]},{"id":"ci_4a4338018f8e9fa180a0b4516c3574401e3bdd443426aac3b38c20c63fc2176b","title":"Initiate SmartResponse","path":"/lrsiem/7.22.0/initiate-smartresponse","children":[]},{"id":"ci_1db7bc8ae42286094edf21dcb57a815d5ac215fe765d1c5c400b1f6d2319230a","title":"Preview SmartResponse Command Execution","path":"/lrsiem/7.22.0/preview-smartresponse-command-execution","children":[]},{"id":"ci_d958cc193cf5589c3469fe7f61b7c0cea435f75764414288ec609a03166303ad","title":"Test SmartResponse Plugin Actions","path":"/lrsiem/7.22.0/test-smartresponse-plugin-actions","children":[]},{"id":"ci_15900162b828b075137fe32bd743d2f095046abd866b40bbf45c9207a5e92012","title":"Troubleshoot SmartResponse Action Testing","path":"/lrsiem/7.22.0/troubleshoot-smartresponse-action-testing","children":[]},{"id":"ci_273342a926da57995715ff814ff0046893549a9bd9452fe86bdacc5489f5a6c4","title":"Validate SmartResponse Plugins","path":"/lrsiem/7.22.0/validate-smartresponse-plugins","children":[]}]},{"id":"ci_407dab1907bd89ed3e4f007ca76171c9b5c58415f5a8395d2628779d0753137e","title":"System Monitor","path":"/lrsiem/7.22.0/system-monitor","children":[{"id":"ci_25456150778b4c00ed0375844bcb06ec92eac0012bf9f1fffd9d1c6dc5820e8d","title":"Agent Identification and Acceptance","path":"/lrsiem/7.22.0/agent-identification-and-acceptance","children":[{"id":"ci_db6d03bb0745cbbfbd57ee20ed0af7c312f61cfb3872dcaed0dff71273d117b8","title":"Accept a New System Monitor","path":"/lrsiem/7.22.0/accept-a-new-system-monitor","children":[]},{"id":"ci_4c50b77c2892c3b9ee7206d46cd29b2a1cd743a77bf7fa150cd3ffb8fecdaae3","title":"Associate a System Monitor Agent","path":"/lrsiem/7.22.0/associate-a-system-monitor-agent","children":[]},{"id":"ci_ea44b3c1da4a33ec9795b55e0c38c260ae0f521803403ed8ee4effad669b4712","title":"Work With New System Monitors","path":"/lrsiem/7.22.0/work-with-new-system-monitors","children":[]}]},{"id":"ci_1a7dd4d6c3293506041f483bc5623198dcba0b961b06acea45e100aef302ce56","title":"NetFlow, IPFIX, and J-Flow Collection","path":"/lrsiem/7.22.0/netflow-ipfix-and-j-flow-collection","children":[{"id":"ci_53e2c5af7b453f89107b93d8263359caa7cad7012da4c6ccd8e10f9e6cbe1d2a","title":"Configure a Device or Host for NetFlow, IPFIX, or J-Flow Collection","path":"/lrsiem/7.22.0/configure-a-device-or-host-for-netflow-ipfix-or-j-flow-collection","children":[]},{"id":"ci_66049717732e79113136a45162381fdedda146444d1bd8f7c0d779389bacdd7f","title":"Customize IPFIX Logs","path":"/lrsiem/7.22.0/customize-ipfix-logs","children":[]}]},{"id":"ci_187631c2913c4befd169c2505c6a8862af048e551132cc2c131ac4e206e330f8","title":"Work With System Monitor Agents","path":"/lrsiem/7.22.0/work-with-system-monitor-agents","children":[{"id":"ci_b944a4047216fffc7e4df60cdc1543c7ec373db606106528aa0aa841044c1812","title":"Add System Monitors","path":"/lrsiem/7.22.0/add-system-monitors","children":[]},{"id":"ci_b64d38dd2e41f1953dd18e7e835a67dedabd22c7603cccc085748b03e58e7840","title":"Configure the scsm Service","path":"/lrsiem/7.22.0/configure-the-scsm-service","children":[]},{"id":"ci_e066d1dfa0a3efa6e7a0cd9b389b0c394bbffe18d27ad088b55d257b31972ec6","title":"Connect System Monitor Agents to Different Entities","path":"/lrsiem/7.22.0/connect-system-monitor-agents-to-different-entities","children":[]},{"id":"ci_dbe643c866c8ebe05e38b1237e4b10026a0f48e70a70346536e56bfaf17bfcec","title":"Connect System Monitor Agents to New Data Processors","path":"/lrsiem/7.22.0/connect-system-monitor-agents-to-new-data-processors","children":[]},{"id":"ci_585e6fd2c7317b7d91f7a5f3cccdbdb5370f0ba0aca8b8a2b48f40707e506a95","title":"Connect System Monitor Agents to Existing Data Processors","path":"/lrsiem/7.22.0/connect-system-monitor-agents-to-existing-data-processors","children":[]},{"id":"ci_74fadf4f50b3326b6be288b4c7925019150f1c03112696b811500ffca707b5c1","title":"Data Processor Pooling","path":"/lrsiem/7.22.0/data-processor-pooling","children":[{"id":"ci_1e156c08d2bbe7bc2416516890f5a0b1232d80252260a4723680613cb64be6b9","title":"Data Processor Pool Manager","path":"/lrsiem/7.22.0/data-processor-pool-manager","children":[]},{"id":"ci_4f1927865b70470c950c7df6f4b340b114798abf83713c12260cb0eb04da53c0","title":"Assign a Data Processor to a DP Pool","path":"/lrsiem/7.22.0/assign-a-data-processor-to-a-dp-pool","children":[]},{"id":"ci_59175a8911a7f5c7a26ce66443b5baca405404297de991ac0743ab022141d26a","title":"Remove a Data Processor from a DP Pool","path":"/lrsiem/7.22.0/remove-a-data-processor-from-a-dp-pool","children":[]},{"id":"ci_054bb2e42f1210dfa861f562b49a6c8d6089ffa726550c8f22ecbec81aaf4f8f","title":"Configure a System Monitor Agent into DP Pool Mode","path":"/lrsiem/7.22.0/configure-a-system-monitor-agent-into-dp-pool-mode","children":[]},{"id":"ci_54197b52ca0f2a19b2137a14f194eb887930f7af42dd9b82d8e6178eae911653","title":"Edit System Monitor Data Processor Settings","path":"/lrsiem/7.22.0/edit-system-monitor-data-processor-settings","children":[]},{"id":"ci_b167c1d6a2eb8151449477a48963875215b343a464ca292a7cf34e88b1a76cbe","title":"Assign a DP Pool to a System Monitor Configuration Policy","path":"/lrsiem/7.22.0/assign-a-dp-pool-to-a-system-monitor-configuration-policy","children":[]}]},{"id":"ci_294c4263812907d02e1b10c6827737c9feabe3592548c6a3f68e751eaaef0e83","title":"License System Monitors","path":"/lrsiem/7.22.0/license-system-monitors","children":[]},{"id":"ci_19f833aabe4246d34ef1fd9996ac23e60a598aa6db9594f06f5ee6f334a767c3","title":"Load Balanced Agent Groups","path":"/lrsiem/7.22.0/load-balanced-agent-groups","children":[{"id":"ci_066afd9085212597601d047db641c8f722ef9838461ed7c3fd25f04f6ead8ba4","title":"Load Balanced Group Manager","path":"/lrsiem/7.22.0/load-balanced-group-manager","children":[]},{"id":"ci_255c437b88afcd63812f4fddc824400d612c88fa0b420b805f637056f17b6bcb","title":"Assign Agents to a Load Balanced Group","path":"/lrsiem/7.22.0/assign-agents-to-a-load-balanced-group","children":[]}]},{"id":"ci_3de3b8320eedeb283dbad86bba82e8c32a5877239225e0eeeb93c045398dad9e","title":"Modify System Monitor Basic Properties","path":"/lrsiem/7.22.0/modify-system-monitor-basic-properties","children":[]},{"id":"ci_a8fbc95b12d4e8c5016be9f25d9bbc52010e512a411509f9be33acbe73155f79","title":"Modify System Monitor Advanced Properties","path":"/lrsiem/7.22.0/modify-system-monitor-advanced-properties","children":[]},{"id":"ci_b0dd54a50a7ec044edd464c669bf8a96ecf5be2c1db895a184847af073f4c5d3","title":"Modify Properties of Multiple System Monitor Agents","path":"/lrsiem/7.22.0/modify-properties-of-multiple-system-monitor-agents","children":[]},{"id":"ci_e721e5958930169f799117ff4d4061e71c0efb90ae64aa9dfc018b183544352d","title":"Modify System Monitors","path":"/lrsiem/7.22.0/modify-system-monitors","children":[]},{"id":"ci_df26bd9681f23fb91501c4acc08242d9fd2af8c82250dd3dc0c4901ebfbbe37f","title":"Configure a Secure Syslog Agent","path":"/lrsiem/7.22.0/configure-a-secure-syslog-agent","children":[]},{"id":"ci_d4b27f1701dfb61e896be8f8cc95b74cc72e7bf8de3da5e61a1fa506b9c86e7a","title":"Retire or Activate System Monitor Agents","path":"/lrsiem/7.22.0/retire-or-activate-system-monitor-agents","children":[]},{"id":"ci_7ee29ad4c7687af68351c3ee855bba24d3d8bf2b29553f9d9e0924c9da29d997","title":"Revert System Monitor Agents to Previous Configurations","path":"/lrsiem/7.22.0/revert-system-monitor-agents-to-previous-configurations","children":[]},{"id":"ci_84cd5bee23a29dcda85b36227d2896f77501d39c4326dfc8f2a9e5d04bafa2ae","title":"Startup and Shutdown System Monitors on Linux","path":"/lrsiem/7.22.0/startup-and-shutdown-system-monitors-on-linux","children":[]},{"id":"ci_d990daec32c1047f620288762d659bb89027d563306b8267aa433f90408de070","title":"Stop, Start, and Restart Agent Services on Windows","path":"/lrsiem/7.22.0/stop-start-and-restart-agent-services-on-windows","children":[]},{"id":"ci_3ab70d77141196b357b9e05c295972ce27a1e6b3d953e5109532345e5edf1da8","title":"Generic JSON Collector","path":"/lrsiem/7.22.0/generic-json-collector","children":[]}]},{"id":"ci_0fa060f14b2ed4b8ab087522474fd3d1424c73968a78664c0ae7fbd930a6361e","title":"Register Agent to Host with Duplicate Name","path":"/lrsiem/7.22.0/register-agent-to-host-with-duplicate-name","children":[]},{"id":"ci_ae43ae3380c1afd51e26631292ea7608e8029d7051af2b67dcfe76efd64a8010","title":"sFlow Collection","path":"/lrsiem/7.22.0/sflow-collection","children":[{"id":"ci_c47c83428c9fec2e165fa57556f440fa49187f8447325fc49de1089a0a4a804b","title":"Configure a Device or Host for sFlow Collection","path":"/lrsiem/7.22.0/configure-a-device-or-host-for-sflow-collection","children":[]}]},{"id":"ci_03c8c24a4a296603d2239851324d48f8230cbca7859cf48485cceab58ddd9d6a","title":"SNMP Trap Receivers","path":"/lrsiem/7.22.0/snmp-trap-receivers","children":[{"id":"ci_075f92a7341c27535800c07497094a6ce17d99474a088aad470ba223c7fa1d12","title":"Configure a System Monitor for SNMP Trap Receiver","path":"/lrsiem/7.22.0/configure-a-system-monitor-for-snmp-trap-receiver","children":[]}]},{"id":"ci_fcc69e0e5d522e8d9962db5f6693e44c465c3e5fb1bf2b9de8ec5c4e443146f4","title":"Syslog Collection","path":"/lrsiem/7.22.0/syslog-collection","children":[{"id":"ci_0e98bf4d3995626a3aea64da7439c72de37db780dbf1e0c1c8427593fd02e303","title":"Configure a Device or Host for Syslog Collection","path":"/lrsiem/7.22.0/configure-a-device-or-host-for-syslog-collection","children":[]}]},{"id":"ci_3dc116c1a748c17e011bf217fcad0f0a6e398cad1f4c657c56cd3b3eec13dfcc","title":"System Monitor Configuration Policy Manager","path":"/lrsiem/7.22.0/system-monitor-configuration-policy-manager","children":[{"id":"ci_ba2cc3d3ac00c5dee84ddfc99170995b155ef0a96209baba0f52b30f78439e28","title":"Apply System Monitor Configuration Policies","path":"/lrsiem/7.22.0/apply-system-monitor-configuration-policies","children":[]},{"id":"ci_04b9bc6947c4f27949f20cd96d40769c91141b5677ad88313b3dea5488241c1b","title":"Assign Configuration Policies to Multiple System Monitor Agents","path":"/lrsiem/7.22.0/assign-configuration-policies-to-multiple-system-monitor-agents","children":[]},{"id":"ci_5755639e0b87cc9327475f0234bf705a5c13f1d1745a90051854afb4386b1203","title":"Create New System Monitor Configuration Policies","path":"/lrsiem/7.22.0/create-new-system-monitor-configuration-policies","children":[]},{"id":"ci_3272f10b3ba71c1d624061538d9ab146b4b14cbddd944721bb096438055f1c88","title":"Delete System Monitor Configuration Policies","path":"/lrsiem/7.22.0/delete-system-monitor-configuration-policies","children":[]},{"id":"ci_22503b1279e3c437cfd3898bcdb2f9ecde480eed65bef789ecda81ff8318e88f","title":"Modify Configuration Policies on System Monitor Agents","path":"/lrsiem/7.22.0/modify-configuration-policies-on-system-monitor-agents","children":[]},{"id":"ci_ae9c061ad534a13b65302949b9a61c2d390f01b287e1a99c28fb0d7f38bfc3fa","title":"Modify System Monitor Configuration Policies","path":"/lrsiem/7.22.0/modify-system-monitor-configuration-policies","children":[]}]},{"id":"ci_0aa9ecf9fc9c12f8e34bc62c18961485757f0696f9406da80a03b11182703fb2","title":"Unidirectional Windows Agent Settings","path":"/lrsiem/7.22.0/unidirectional-windows-agent-settings","children":[{"id":"ci_cebfaa1840e983282edf22bd18b230fd1e98513398bd61d4608cdd9d8929aa49","title":"Confirm a SysMon Agent is Sending Logs","path":"/lrsiem/7.22.0/confirm-a-sysmon-agent-is-sending-logs","children":[]},{"id":"ci_1602d10c238b9f769592e6fb7138258a1fa5a944bc8876895cbd888ac47a7202","title":"Copy the System Monitor Agent Configuration File to the Agent Machine","path":"/lrsiem/7.22.0/copy-the-system-monitor-agent-configuration-file-to-the-agent-machine","children":[]},{"id":"ci_36df46c299c3c41b2005338ff325ceaf7e5092dbff5930e890218d29ae4dc614","title":"Enable the Unidirectional Feature on the Data Processor","path":"/lrsiem/7.22.0/enable-the-unidirectional-feature-on-the-data-processor","children":[]},{"id":"ci_3e8337567885cb84bd47e2b262b4b26524058f3b0d581d0c0c7e7c8ca064434c","title":"Enable the Unidirectional Feature on the System Monitor Agent","path":"/lrsiem/7.22.0/enable-the-unidirectional-feature-on-the-system-monitor-agent","children":[]},{"id":"ci_b9f9ce14afaee3b6e63a5befbb35e7b25a27a2de9a14989775d456e11f15ce64","title":"Export the System Monitor Agent's Local Configuration File","path":"/lrsiem/7.22.0/export-the-system-monitor-agent-s-local-configuration-file","children":[]}]},{"id":"ci_f6a759c3022e57ed3c52c0552abb81fa14a8843cdaeedd4872a5909acc3cd0ac","title":"Windows Event Log Collection","path":"/lrsiem/7.22.0/windows-event-log-collection","children":[{"id":"ci_18ea17e3276b40155a28341547b89e62b0ca9129b739d5d01912590255594008","title":"Collect Non-Domain Logs Remotely","path":"/lrsiem/7.22.0/collect-non-domain-logs-remotely","children":[]},{"id":"ci_6ab845c267ada07e0af43f8aba7b7745e7a4f6e2e821db4c838e89fd7f568cff","title":"Create a Least-Privileged Domain User Account for Remote Log Collection","path":"/lrsiem/7.22.0/create-a-least-privileged-domain-user-account-for-remote-log-collection","children":[]},{"id":"ci_e5f9cca5dae10947a44f49d9ab098b53c336e297448d2774e7e2a5792e289cea","title":"Set Up Remote Log Collection","path":"/lrsiem/7.22.0/set-up-remote-log-collection","children":[]}]}]}]},{"id":"ci_bd6a9f4a428ffe0f1e3a85a3ccb78f580bf0df476c6340a40231c317ac28ac5f","title":"Client Console Analyst Guide","path":"/lrsiem/7.22.0/client-console-analyst-guide","children":[{"id":"ci_949b8ba48c02b4c5b21ed9734fbde5af4e68b6b581f30f3c55cbfe25524dd7d5","title":"Filters and Wizards","path":"/lrsiem/7.22.0/filters-and-wizards","children":[{"id":"ci_9d0884b56ef72861a56e00b1b5571d2a80a1d88b485046d9cd5744535a53da9a","title":"Use Filter Modes","path":"/lrsiem/7.22.0/use-filter-modes","children":[]},{"id":"ci_d554416a82224e54802bf305fd2f2336a13a4f729fa78b33e642e26793e36021","title":"Use Lists with Filters","path":"/lrsiem/7.22.0/use-lists-with-filters","children":[]},{"id":"ci_d6f35c32fbec6a349ffba05f5686a8d12472883a01e3048fae5a9d2d89ef2b63","title":"Use Multiple Filters","path":"/lrsiem/7.22.0/use-multiple-filters","children":[]},{"id":"ci_a548ad2279e6aa6fafa75065fb5f3393e69f7d62560d6fe40e33e723c77e4ea2","title":"Use Multi-Type Filters","path":"/lrsiem/7.22.0/use-multi-type-filters","children":[]},{"id":"ci_60af76dbfa058a635d4c0b7e626d034a3b8637b971a101c220685530d22f7906","title":"Use Search Strings with Filters","path":"/lrsiem/7.22.0/use-search-strings-with-filters","children":[]},{"id":"ci_dddb4083594876b58e7e64db6836d7fb7f8c16a02de3e3f6a127cf954b0bc4bd","title":"Use SQL Pattern Match with Filters","path":"/lrsiem/7.22.0/use-sql-pattern-match-with-filters","children":[]},{"id":"ci_036bcabb8f640f20a60773868d2c2bccddce66726775ce36811cfb764837c0e7","title":"Use the Filter Editor","path":"/lrsiem/7.22.0/use-the-filter-editor","children":[{"id":"ci_fc9aad6ab4664ed030d7f9a03b7d265a4c5097ce341e8a3ddbe13ad3e7efa094","title":"Filters—Action","path":"/lrsiem/7.22.0/filtersaction","children":[]},{"id":"ci_17d5fe96e9e0b26e230911aa653b0d49435b58bd7f0fefad11eb993b4c2118ea","title":"Filters—Aggregation","path":"/lrsiem/7.22.0/filtersaggregation","children":[]},{"id":"ci_0713faa99b2b165be339048a3328c91a72342a78b1b7f348a699da10aab17955","title":"Filters—AIE Summary Fields","path":"/lrsiem/7.22.0/filtersaie-summary-fields","children":[]},{"id":"ci_bc71a262b88d8a9147e83d04ef724184d5a91167516ee92587a2d8b3081ce744","title":"Filters—Data Fields","path":"/lrsiem/7.22.0/filtersdata-fields","children":[]},{"id":"ci_24a5b2fcb8b90af0ee6e1b2c1d07c3d425f64efc9352ca8c68beb9183e841eb8","title":"Filters—Day and Time Criteria","path":"/lrsiem/7.22.0/filtersday-and-time-criteria","children":[]},{"id":"ci_58cd2b1250d35270ae7cf04c69b35be9b392aa6116a7af2a1f1d6cbd263d9e6c","title":"Filters—Distinct","path":"/lrsiem/7.22.0/filtersdistinct","children":[]},{"id":"ci_82dcd293531ca7849a58823af7ea2e6943a7dabdce1736671d12232f28333092","title":"Filters—Exclude Filter","path":"/lrsiem/7.22.0/filtersexclude-filter","children":[]},{"id":"ci_2fe23a554db6f1b850ffddefe4053b148bc5f3ba5dd6d8f856eeef9fd5bdae13","title":"Filters—Expressions","path":"/lrsiem/7.22.0/filtersexpressions","children":[]},{"id":"ci_4db7ca188a732372ec61f5782ed987ef7f6f2e047953fdf516b8fa25d8c3140a","title":"Filters—Group By","path":"/lrsiem/7.22.0/filtersgroup-by","children":[]},{"id":"ci_3fc8d816b3f2e521b5fe15138889d9d0b3b1822b10167a64d71f2224df45ce90","title":"Filters—Include Filter","path":"/lrsiem/7.22.0/filtersinclude-filter","children":[]},{"id":"ci_573c4f989aa4730856f12c40473edf5e178a6440a39b6260a75803a3f1b0d3e3","title":"Filters—Information","path":"/lrsiem/7.22.0/filtersinformation","children":[]},{"id":"ci_2527a4d6982fa10a513e8a4b0baa8a88e25fc46bd5ab13570bd510c6c99d471f","title":"Filters—Log Source Criteria","path":"/lrsiem/7.22.0/filterslog-source-criteria","children":[]},{"id":"ci_499bd5269cf54fb83fcd14dc400059810f520fd62d730142906b3f0924b45d8b","title":"Filters—Notify","path":"/lrsiem/7.22.0/filtersnotify","children":[]},{"id":"ci_d1fce5c6283b5f5f08c8f156314959347caf09e88fae9f515d43af9ddc2b4b40","title":"Filters—Primary Criteria","path":"/lrsiem/7.22.0/filtersprimary-criteria","children":[]},{"id":"ci_46641f646f8cf7d5b8d8c1d967ef29161dbe4ed51d10ac889425fd029a86f447","title":"Filters—Profile","path":"/lrsiem/7.22.0/filtersprofile","children":[]},{"id":"ci_b74206d914b7389e7fa6212e0c78bae31b134f534a67018c86cbbb22168ee046","title":"Filters—Schedule","path":"/lrsiem/7.22.0/filtersschedule","children":[]},{"id":"ci_0d460ee5f164a813fd63244201357371bc15c62c7bee66bf87362f0f3c40db7a","title":"Filters—Settings","path":"/lrsiem/7.22.0/filterssettings","children":[]},{"id":"ci_686435966c7c0a4b3e1a92bec3c2d22a33a02a776ce4c8f241a808b3e7295a5e","title":"Filters—Thresholds","path":"/lrsiem/7.22.0/filtersthresholds","children":[]},{"id":"ci_6cafdefdd75bc7319f0972c47c7ee49e7437b4147a1af9962b6a161a4499bad1","title":"Filters—Time and Schedule","path":"/lrsiem/7.22.0/filterstime-and-schedule","children":[]},{"id":"ci_925373776327b11289a4aa33b28d03905e2d921337a6e6b4d9b6ec21e69ab730","title":"Filters—Unique Values","path":"/lrsiem/7.22.0/filtersunique-values","children":[]}]}]},{"id":"ci_e9f818e682e40ec294b776a4a6dcb37523f0c879be8eb6607815106e157ec7a3","title":"General Console Features","path":"/lrsiem/7.22.0/general-console-features","children":[{"id":"ci_2952f7ef97c20f8deb692eb7014c03c31b68599dfe9e0809ad365b515176ee2b","title":"Export Grid to File","path":"/lrsiem/7.22.0/export-grid-to-file","children":[]}]},{"id":"ci_35704a3dcb61d94706371737ac073ff36dd3c6c2cc11d02d9b6c56833417ff05","title":"Layouts","path":"/lrsiem/7.22.0/layouts","children":[{"id":"ci_4fa46f5a367d8bf79f5eabbea3fb37ac4bb631e80ca0c67a2e885544dfd13323","title":"Clone Existing Layouts","path":"/lrsiem/7.22.0/clone-existing-layouts","children":[]},{"id":"ci_19a79b956aae3d999f112539710a2fa10d216ac6d0291b327ac6c84e70c4cc7e","title":"Create New Layouts","path":"/lrsiem/7.22.0/create-new-layouts","children":[]},{"id":"ci_3f68ba285ec70e64795ab82822276b113df8f332a26a82ea636c687d303a15a3","title":"Delete Layouts","path":"/lrsiem/7.22.0/delete-layouts","children":[]},{"id":"ci_5586b5ff987e3c584ec7b66670eb62a3681c57f62ac2e04ac3c393f75250aaf6","title":"Import and Export Layouts","path":"/lrsiem/7.22.0/import-and-export-layouts","children":[]},{"id":"ci_8d2e2e67ba650d204619da0a097b46950f98bb1e1d9c703f8a67a90c00326a5b","title":"Make or Clear Default Layouts","path":"/lrsiem/7.22.0/make-or-clear-default-layouts","children":[]},{"id":"ci_5dd48b2c46f17333c081965816f3d2d49833523b0dce04745383fa0458c05176","title":"Modify Layout Properties","path":"/lrsiem/7.22.0/modify-layout-properties","children":[]},{"id":"ci_e944e93ea565ad0405b777e9e4d41c6342c5233393d2c85b222f97332e9676fd","title":"Reset Layouts","path":"/lrsiem/7.22.0/reset-layouts","children":[]},{"id":"ci_f1f240e859c22199eae45251cd126af5fe7ccf12572c342f21de68c61a48c01b","title":"Save Layouts","path":"/lrsiem/7.22.0/save-layouts","children":[]},{"id":"ci_f4d15d9317098ba9c7eaba5ceba28e2034f4a9dcf8ab548a861e2d6d756c7bcd","title":"Set Color Themes in Layouts","path":"/lrsiem/7.22.0/set-color-themes-in-layouts","children":[]}]},{"id":"ci_378272decbefdf461354943380884880bdbaa2e591b92ced0a8ae95c2dab0cc5","title":"Lists in the Client Console","path":"/lrsiem/7.22.0/lists-in-the-client-console","children":[{"id":"ci_61adc44ea82f90edc0987c90cf665fef3eea11eb89376ecd939a33b92f10b654","title":"Add Expiring Items to a List","path":"/lrsiem/7.22.0/add-expiring-items-to-a-list","children":[]},{"id":"ci_da86c6f488814a269540734f6d239ec3fb69736abd3702383bb091298a6d0ab2","title":"Add Values to a List","path":"/lrsiem/7.22.0/add-values-to-a-list","children":[]},{"id":"ci_d86be708f55b19a6fd3547a5707e7fe1f6841c5d52214f5f69bd642f25bcdf08","title":"Clone Lists","path":"/lrsiem/7.22.0/clone-lists","children":[]},{"id":"ci_5abe9aeade267fe0fb2d2de33d1e06382672b61b0f8503d09899e7bafd883102","title":"Create Lists in the Client Console","path":"/lrsiem/7.22.0/create-lists-in-the-client-console","children":[]},{"id":"ci_6658ada5a25dd82c16018eb36dcf582b88a66151f08efee68d055419bed12382","title":"Modify the Properties of Lists","path":"/lrsiem/7.22.0/modify-the-properties-of-lists","children":[]},{"id":"ci_67b35130eb08e40464c7fd56d81c293d48c7c5c8ea00142c9642dca2ab8478fc","title":"Remove List Items","path":"/lrsiem/7.22.0/remove-list-items","children":[]},{"id":"ci_c4bdca3ebb21acbd55892de7bd491b24445a69517c66caff571662212eeef248","title":"Reset Expiration Date for List Items","path":"/lrsiem/7.22.0/reset-expiration-date-for-list-items","children":[]}]},{"id":"ci_f1bc5ad2f278b2a3d884e13ad684c4f7bad5c3a1887f69ae85e26fa3e390ba86","title":"Message Processing Engine Rule Builder","path":"/lrsiem/7.22.0/message-processing-engine-rule-builder","children":[{"id":"ci_8f39f11a5d011724189291e70dd3beb73cf4c341405492117a698aab2ce5452a","title":"Application Manager","path":"/lrsiem/7.22.0/application-manager","children":[{"id":"ci_c17cdb17654f60e6785d9c0415d50a14e7d041f84e883798e8a9572b04da24e8","title":"Create New Application Records","path":"/lrsiem/7.22.0/create-new-application-records","children":[]},{"id":"ci_6904d0e67e1b32272dba6f22f802b376586a121837105bfeb0aaae759cf0cba7","title":"Modify Application Record Properties","path":"/lrsiem/7.22.0/modify-application-record-properties","children":[]},{"id":"ci_247fc57b74c7cf55cd7a34ffc7a7713e06d8c51ff079bc99c4b7fbf16aa764e6","title":"Refresh the Application Manager","path":"/lrsiem/7.22.0/refresh-the-application-manager","children":[]},{"id":"ci_98a3205507297ac7e1f0db7fc4e6cc9aaa5bc5d235b0b12512e7a0584a0a03d3","title":"Retire or Activate Application Records","path":"/lrsiem/7.22.0/retire-or-activate-application-records","children":[]}]},{"id":"ci_19ab77e4816eafbd345628037ab77198cd9576801a1b85b9eb04f97468e02049","title":"Common Event Manager","path":"/lrsiem/7.22.0/common-event-manager","children":[{"id":"ci_dc02c8562c09a7e9982df7a9dd7e222e21300ac5fe66228bb5da41282946389d","title":"Create Common Events","path":"/lrsiem/7.22.0/create-common-events","children":[]},{"id":"ci_35bd54d897b742a6ba2a14c19c3475b9cfdb7abeeebf642eaf6c5c6545a265be","title":"Delete Common Events","path":"/lrsiem/7.22.0/delete-common-events","children":[]},{"id":"ci_28856aa99f6d33aaa8d625c731c7447296b77600151e46f8100fa10ea1be4666","title":"Modify Common Events","path":"/lrsiem/7.22.0/modify-common-events","children":[]},{"id":"ci_dc0cea14ac655ffa39adee69a26ddc1a834206fdac7aab2511c6be6be836b6f9","title":"Search for Common Events","path":"/lrsiem/7.22.0/search-for-common-events","children":[]}]},{"id":"ci_729c97243f8b57eb3db4cf641ac9d023b2edab3f4c2604b280e636f04d7eb78f","title":"Create Custom MPE Sub-Rules","path":"/lrsiem/7.22.0/create-custom-mpe-sub-rules","children":[]},{"id":"ci_6ec7c7852ef7035c8e9414a8d57b5dc6c338686088e4332ea9b29e03bf675d0d","title":"Create MPE Policies","path":"/lrsiem/7.22.0/create-mpe-policies","children":[]},{"id":"ci_4f3a89e550fb230bd8dae6e8402ccd6c9d23b5facc9ef0ae1e7a010a5ba36397","title":"Create New Base MPE Rules","path":"/lrsiem/7.22.0/create-new-base-mpe-rules","children":[]},{"id":"ci_abf56550a08438ac236e35f5f8269d599ed4847213850a47c9db7d080b8f8024","title":"Edit MPE Rules","path":"/lrsiem/7.22.0/edit-mpe-rules","children":[]},{"id":"ci_9282bcccb71a7544b70e6414a3e8c97d26c157b98e4d4c871d71749b84ee7157","title":"Edit Sorting Properties for System Base MPE Rules","path":"/lrsiem/7.22.0/edit-sorting-properties-for-system-base-mpe-rules","children":[]},{"id":"ci_f48d7d1719eb21f071dbbf62377b3446f91cfb9a83253605b5303b2fa1c8abce","title":"Import and Export MPE Rules","path":"/lrsiem/7.22.0/import-and-export-mpe-rules","children":[]},{"id":"ci_df8d93333582a8a56e4d93cdd08dd6285f34100bdaf203831a82a96bb95712a7","title":"Regular Expression Characters and Practices","path":"/lrsiem/7.22.0/regular-expression-characters-and-practices","children":[]}]},{"id":"ci_0d905b9dc8cc60d43e7e99d2e056793e52b115d79456a0c21d4999ff03466d66","title":"Monitor, Search, and Analysis","path":"/lrsiem/7.22.0/monitor-search-and-analysis","children":[{"id":"ci_78daa422b17ec75793685fd2fd7579c2e6db0949c4c8c7639034edf26b5aded5","title":"Alarm Viewer","path":"/lrsiem/7.22.0/alarm-viewer","children":[{"id":"ci_af05cdfed894f357bb1fefb38270d618474ad7e35698ea7445f815a2632cce76","title":"Change the Status of a Single Alarm","path":"/lrsiem/7.22.0/change-the-status-of-a-single-alarm","children":[]},{"id":"ci_3f84c54f18cfea0e3ad8018111a79b153e1bf1a1dbb1705a626baa025bfb8472","title":"Change the Status of Multiple Alarms","path":"/lrsiem/7.22.0/change-the-status-of-multiple-alarms","children":[]},{"id":"ci_84417f063e802fd209f074bf194e662894e68a8cecbbf5837412eb7da81273c8","title":"Create Alarm Lists","path":"/lrsiem/7.22.0/create-alarm-lists","children":[]}]},{"id":"ci_dec4b6516945f1aae7f58fd317f87f65e8098dd2e8b100c0c787553963695b02","title":"Investigator","path":"/lrsiem/7.22.0/investigator","children":[{"id":"ci_74cd1f3f9dda448416f42c9094ebf1a2022d54b0534879bba107fcb45aee7383","title":"Change Share Permissions on a Saved Investigation","path":"/lrsiem/7.22.0/change-share-permissions-on-a-saved-investigation","children":[]},{"id":"ci_d5b9c0d6d930b9390464f547c592c54872489ce44ec4064ef0fc28c232937eb2","title":"Create Investigations","path":"/lrsiem/7.22.0/create-investigations","children":[]},{"id":"ci_1d350c8f54b8babacdd156e6ea9e66429a4597175e68d495505e648e2a3c94dc","title":"Drill Down on a Single Item in Investigation Results","path":"/lrsiem/7.22.0/drill-down-on-a-single-item-in-investigation-results","children":[]},{"id":"ci_bb51c53ad430a85faebbd8b78e9c5671bbba001e6e2a7ddc415d6951dd6d7290","title":"Drill Down on Multiple Items in Investigation Results","path":"/lrsiem/7.22.0/drill-down-on-multiple-items-in-investigation-results","children":[]},{"id":"ci_94ddf191aee36340219156070065a01c977d03351a19a190d5842949d22ec3cd","title":"Import and Export Investigations","path":"/lrsiem/7.22.0/import-and-export-investigations","children":[]},{"id":"ci_3bc6db9057317f988ac02dce0b71d0cbecdc5b375db14d863716a2e1fe18659e","title":"Run Saved Investigations","path":"/lrsiem/7.22.0/run-saved-investigations","children":[]},{"id":"ci_b89b407c4ddf36253d440a18eb7a39fa1af30ee1ba0913bcd9f2f3db3fc6a84d","title":"Save Investigations with Report Packages","path":"/lrsiem/7.22.0/save-investigations-with-report-packages","children":[]},{"id":"ci_ba09213b792633267b6f9c786af486bf32cdbb458438fb671bf0c99c8e1a9eae","title":"Save Investigations with Report Templates","path":"/lrsiem/7.22.0/save-investigations-with-report-templates","children":[]},{"id":"ci_12683fcd3206612019debf0454d32a1ae8b10241a67b4874652b0bc97a5905d0","title":"Search for Most Frequent Common Events","path":"/lrsiem/7.22.0/search-for-most-frequent-common-events","children":[]},{"id":"ci_78cab42a6bf392216050e89cdb608d41cb5a2f16923f96c96510ccc02f99ca4b","title":"View Metadata in the Log Viewer Tab","path":"/lrsiem/7.22.0/view-metadata-in-the-log-viewer-tab","children":[]},{"id":"ci_bd77b862f3eca1418d80b2ad9e2736d874319a643a037b96c63a441756d9e8ea","title":"Work With Investigation Result Graphs","path":"/lrsiem/7.22.0/work-with-investigation-result-graphs","children":[]},{"id":"ci_5203e896f0fc99d4d1ebec62801239fca377a5305b0004d450416a743dc05f2c","title":"Work with Log Miner","path":"/lrsiem/7.22.0/work-with-log-miner","children":[]},{"id":"ci_edbabe410f6ae5c6c1cbea02c30d18c607faf38f83e17e755e36ccfa8ad77e07","title":"Work With Network Visualization Diagrams","path":"/lrsiem/7.22.0/work-with-network-visualization-diagrams","children":[]}]},{"id":"ci_4685851ac9c1b681ab84b970c02823b19063c7f83dc7e7129a8c4e6dc75976c4","title":"Personal Dashboard","path":"/lrsiem/7.22.0/personal-dashboard","children":[{"id":"ci_2e43210cd414d0e81403af4ae6b4df61bdd07296f64dc2392b5dff1be85cd837","title":"Add Personal Dashboard Filters","path":"/lrsiem/7.22.0/add-personal-dashboard-filters","children":[]},{"id":"ci_1b51be3993d54eb224e4ec14a8e2c082629956458adf047271a1aa7b85882ed1","title":"Apply Personal Dashboard Filters","path":"/lrsiem/7.22.0/apply-personal-dashboard-filters","children":[]},{"id":"ci_50282c840beb4b36ae12da836a7958372062a9ec7f9ccd8e9892cd836fccaf63","title":"Clone Personal Dashboard Filters","path":"/lrsiem/7.22.0/clone-personal-dashboard-filters","children":[]},{"id":"ci_2bf53fbb921e89a33e0d786e94c64ce45a6cccb58aa5df6e2da29b0837516aea","title":"Configure the Personal Dashboard Display","path":"/lrsiem/7.22.0/configure-the-personal-dashboard-display","children":[]},{"id":"ci_8a9f1d90d7fb47be5d138a6805cdcf1865fcaca4996cb5835c0334120ea583d5","title":"Delete Personal Dashboard Filters","path":"/lrsiem/7.22.0/delete-personal-dashboard-filters","children":[]},{"id":"ci_ad93a647868d4fa9a5936ee519cec24a70279eecff61f2bcbcdefa993c5e69bf","title":"Drill Down on Dashboard Data","path":"/lrsiem/7.22.0/drill-down-on-dashboard-data","children":[]},{"id":"ci_563fbbfff231b191aa3fc42c82a5b0abd24779d7036d187d2897670bee80bf8f","title":"Modify the Properties of Personal Dashboard Filters","path":"/lrsiem/7.22.0/modify-the-properties-of-personal-dashboard-filters","children":[]}]},{"id":"ci_c3d6fc88f6b8a4f8b36515379f2ec6da34a7fb479310e42128f5db3d455c465f","title":"Quick Search Toolbar","path":"/lrsiem/7.22.0/quick-search-toolbar","children":[{"id":"ci_35a067d8eeb2b64cae83d454947d0d7d5e087ed447a157386aca7827f975a93b","title":"Use the Quick Search Toolbar","path":"/lrsiem/7.22.0/use-the-quick-search-toolbar","children":[]}]},{"id":"ci_3ac2a2c678ebb0d826751baf1fe5d904a311da7a930631d7b09a2aa79a288a20","title":"Run Contextualize","path":"/lrsiem/7.22.0/run-contextualize","children":[]},{"id":"ci_7f6beed3548d7a5f524b464fd24637e98352be19d9a4f69a29d37d97670a120c","title":"Run Correlate","path":"/lrsiem/7.22.0/run-correlate","children":[]},{"id":"ci_0f1ebd33a102f8ff08024c176b810a3a1d8732d280ae80f84a3fd0fef694bcec","title":"Tail","path":"/lrsiem/7.22.0/tail","children":[{"id":"ci_2937006be29d1f1206e662f5885965b135d905c9931c8f75b03a0ac9fd0425b1","title":"Create New Tails","path":"/lrsiem/7.22.0/create-new-tails","children":[]},{"id":"ci_5a969a90f25ca90df261d989150935e546fb755ab24b53d55168ef3b78383634","title":"Run Saved Tails","path":"/lrsiem/7.22.0/run-saved-tails","children":[]},{"id":"ci_9568e0f89adbd0529b81f00dda4a1c769f47fe11e2d97abd8434d31187c83dd0","title":"Tail Log Sources","path":"/lrsiem/7.22.0/tail-log-sources","children":[]}]},{"id":"ci_f4dca03557ced5deb6093a938772814c2e92f99433f13650272bc3ffbb230a84","title":"TopX Analysis","path":"/lrsiem/7.22.0/topx-analysis","children":[{"id":"ci_2effc96927aca0c1fc530fb323f12102171c93e3e77e554547c8b0947a6459fc","title":"Analyze TopX Results","path":"/lrsiem/7.22.0/analyze-topx-results","children":[]},{"id":"ci_9a45850bfbd1fc8d04c03ec42225b27771cad9bb8ab55c575494e3d7fa786790","title":"Configure TopX Widgets","path":"/lrsiem/7.22.0/configure-topx-widgets","children":[]}]}]},{"id":"ci_26ac8cda3b880fdc362159459121f58be34bda9bb28da5983cebab05a891e89f","title":"My LogRhythm","path":"/lrsiem/7.22.0/my-logrhythm","children":[{"id":"ci_d8265148a3609c69102bdcaa873dd1d96875316168cab6a38945ab2e2c2db57d","title":"Add or Modify a Person Record","path":"/lrsiem/7.22.0/add-or-modify-a-person-record","children":[]},{"id":"ci_0b0c7a33b40c6d003c1c65684fe4d80143145aa2baea4b4a5dea3a5c56f4ee9f","title":"Change Your Password","path":"/lrsiem/7.22.0/change-your-password","children":[]},{"id":"ci_94fe678ff69d09c4088ad5389702d8174b6c8a79088d405d7a7e054396b9b122","title":"Create Email Notification Policies","path":"/lrsiem/7.22.0/create-email-notification-policies","children":[]},{"id":"ci_6d0a36b509debc981fd5eeafd83d6fcb2d74dfaf764268090eebe9c5d64d7439","title":"Manage Your Preferences","path":"/lrsiem/7.22.0/manage-your-preferences","children":[]}]},{"id":"ci_75078db84dbdc4ca2cc600ed45219cda487a7979588865bd06458ca527af587a","title":"Report Center","path":"/lrsiem/7.22.0/report-center","children":[{"id":"ci_492e579a9bc8b1512645bc90cdd7dd349272356c10b99c09def9b86849f001b6","title":"Add Custom Logos to Reports","path":"/lrsiem/7.22.0/add-custom-logos-to-reports","children":[]},{"id":"ci_a82372e552fea8aa06482c494fc133e461684c489eb075cad9f6ec5a9601c069","title":"Clone Reports or Report Packages","path":"/lrsiem/7.22.0/clone-reports-or-report-packages","children":[]},{"id":"ci_368a9cab31526f3f015a0bb73a453a4865ccbbdfab17e5cd0f3bd80039eac0b5","title":"Create Custom Log Detail Report Templates","path":"/lrsiem/7.22.0/create-custom-log-detail-report-templates","children":[]},{"id":"ci_4c0488277a1d96e91ece380ea862755b1075c4ce85362aec7a3f5a79946578cf","title":"Create Custom Log Summary Report Templates","path":"/lrsiem/7.22.0/create-custom-log-summary-report-templates","children":[]},{"id":"ci_8b23d862b07328149b34e55d9da251950701d36c9e00736548597ef4a4ddf5f0","title":"Create Report Packages","path":"/lrsiem/7.22.0/create-report-packages","children":[]},{"id":"ci_74032f8090a85be5ec5c4004aac978a74573d4fb328f2c88a7310f22ae3d6531","title":"Create Reports","path":"/lrsiem/7.22.0/create-reports","children":[]},{"id":"ci_bf1270b20b85ddec54e816bc4e276bc75e36e95373e04f140dd51eb7866afcbb","title":"Create Scheduled Reports","path":"/lrsiem/7.22.0/create-scheduled-reports","children":[]},{"id":"ci_e3b3e9ebaa1e44994460ccd282b657c40a1d461f38b86819e28df57c8ebcfa97","title":"Import or Export Reports or Report Packages","path":"/lrsiem/7.22.0/import-or-export-reports-or-report-packages","children":[]},{"id":"ci_8b5ef33f0db3bc966e8d26fc02b42d122fad4ff1aaebdbeb345c094b66b17086","title":"Manage Scheduled Reports","path":"/lrsiem/7.22.0/manage-scheduled-reports","children":[]},{"id":"ci_089c2264ab25db0a6ff10d66bf5e250cd59cc87caebc4e1f1c6196d73d23e3cb","title":"Modify Custom Report Templates","path":"/lrsiem/7.22.0/modify-custom-report-templates","children":[]},{"id":"ci_4b5d27edaf8cc61a9b67e8f61d46ef172f8b8045cc1af4cdf000d806b65fa8ca","title":"Restore Default Logo to a Report","path":"/lrsiem/7.22.0/restore-default-logo-to-a-report","children":[]},{"id":"ci_4f8728acd7ce3d9b555789cdf0d6a9dee5820374eb2a04401523fddc85451fb0","title":"Run Reports","path":"/lrsiem/7.22.0/run-reports","children":[]},{"id":"ci_cb0c28cda5390a85a76bbd5585b871c289e85100677c543d0f8ab4b685cb5c4b","title":"Run Reports as Investigations","path":"/lrsiem/7.22.0/run-reports-as-investigations","children":[]},{"id":"ci_03ccfa078f28a8453f73421989c8953a7242dccd720b3bfd7631a3a978a6bb8f","title":"Troubleshoot Empty Reports","path":"/lrsiem/7.22.0/troubleshoot-empty-reports","children":[]},{"id":"ci_40892d42928f8ed06a632955e40dd8f7f0d4ff7b56237978e07ea9eab7e73700","title":"View Report Center Job Status","path":"/lrsiem/7.22.0/view-report-center-job-status","children":[]},{"id":"ci_fc7f7e2b08cd065b11e9d83982d03eaa812dc967caf7f8ac4778f4b485436b46","title":"View Reports in the Client Console","path":"/lrsiem/7.22.0/view-reports-in-the-client-console","children":[]}]}]},{"id":"ci_9ec33b76108f679b790126de88a9061501739be5731e1f630491eb9df1c474db","title":"Web Console User Guide","path":"/lrsiem/7.22.0/web-console-user-guide","children":[{"id":"ci_3555a489e209b659169974b48dffff7171fa70d850f3805469b10e6009fc8dc5","title":"Alarms","path":"/lrsiem/7.22.0/alarms","children":[{"id":"ci_1f0b35de0a3904321f62109f207c35851f3678dfe2314fdfdc1d723a6edbb2db","title":"Alarms Page Overview","path":"/lrsiem/7.22.0/alarms-page-overview","children":[{"id":"ci_6504121834449c22049a7846b1709df5995e13daef1c92e6f89774271843c0e8","title":"Alarm Cards","path":"/lrsiem/7.22.0/alarm-cards","children":[{"id":"ci_8769072b866b2bfe627b899da38a538fe5ab7c01c8df937fdcecf30690449dc8","title":"Sort Alarm Cards","path":"/lrsiem/7.22.0/sort-alarm-cards","children":[]}]},{"id":"ci_34a5af159c7ca58266d84c26f31500b70dea2aef14989c6e4e8db4bc6b2e5d36","title":"Alarm Grid","path":"/lrsiem/7.22.0/alarm-grid","children":[{"id":"ci_0fb8736b10d25812c1bb3f8774ca979bb30ffff86fed179eac3702228b5fc39b","title":"Pin and Resize Alarm Grid Columns","path":"/lrsiem/7.22.0/pin-and-resize-alarm-grid-columns","children":[]}]},{"id":"ci_4ea8bed97a07359eb0ac9a9ec1c689239b8c89ffe243734254affdec77cdc90e","title":"Alarm Status Trends","path":"/lrsiem/7.22.0/alarm-status-trends","children":[]}]},{"id":"ci_44189f681c1c7483ea5e2a970561bb01ca59daa3b8e59cac1393a925d468b541","title":"Alarm Filters","path":"/lrsiem/7.22.0/alarm-filters","children":[{"id":"ci_af2d0d6af5a07fa421e970009c59099b36436fc59bb0668d6b51ead50117e452","title":"Remove Alarm Filters","path":"/lrsiem/7.22.0/remove-alarm-filters","children":[]},{"id":"ci_24c6083b23f686aae8b913f14d61b57fcab59347034feab573b223aa1363a7cf","title":"Use Dynamic Alarm Filters","path":"/lrsiem/7.22.0/use-dynamic-alarm-filters","children":[]},{"id":"ci_f3ec0d2113289e10745fa9ba4e65067c3c1bfb72ad8d819ebe30bfac45db9d98","title":"Use the Time Frame Filter","path":"/lrsiem/7.22.0/use-the-time-frame-filter","children":[]}]},{"id":"ci_fd036efb6fbfb82c5d5bade031af3778ac4faf22e87083fa52554a0036898628","title":"Add Comments to Alarms","path":"/lrsiem/7.22.0/add-comments-to-alarms","children":[]},{"id":"ci_cce89ab0d1f996f261127e1cba730a2962daee1cbdcadcb60f698bbd469f8aa6","title":"Approve or Deny SmartResponse Actions in the Web Console","path":"/lrsiem/7.22.0/approve-or-deny-smartresponse-actions-in-the-web-console","children":[]},{"id":"ci_7b43b9f4a174fec8c025b81fc1ead2716a9958deadd3b17d84283a2f3324f983","title":"Drill into Log Data Associated with an Alarm","path":"/lrsiem/7.22.0/drill-into-log-data-associated-with-an-alarm","children":[]},{"id":"ci_b1303437f5780985157d0b03026a5424676c3dd673d2b310d6994735a8b817d3","title":"Update the Alarm Status","path":"/lrsiem/7.22.0/update-the-alarm-status","children":[]},{"id":"ci_8f1cbb4743bcfe85a3f67cea9677254477f9f6ea18b1a5c108d4e2ebed1fc57f","title":"View Alarms in Your Browser","path":"/lrsiem/7.22.0/view-alarms-in-your-browser","children":[]},{"id":"ci_9c08a12e060ad5cf00b4a3fb9e49bd73132805c0ed2e46230dfeb97d7d2dd10b","title":"Alarm Inspector Panel","path":"/lrsiem/7.22.0/alarm-inspector-panel","children":[]}]},{"id":"ci_b6ec237e99fdbe8f1a86533608559b44ccd84e6d3857ec4d945dfde5cf975edb","title":"Analyzer Grid","path":"/lrsiem/7.22.0/analyzer-grid","children":[{"id":"ci_e2ca501b3207f43f8d5ca9895bf2e6d60772a528a9873dc57d5c0d01e8b95e78","title":"Use the Analyzer Grid","path":"/lrsiem/7.22.0/use-the-analyzer-grid","children":[]},{"id":"ci_a1e0f05a99e33596b9e5c62bd3b76bb3da877b4f2c8def63336c41d9de97e319","title":"Configure the Analyzer Grid","path":"/lrsiem/7.22.0/configure-the-analyzer-grid","children":[]},{"id":"ci_be8ec8aaa36a03302aaf121adcaaa9a21f7108cdc0f16a3a76c7fd7450012f57","title":"Details & Actions Panel","path":"/lrsiem/7.22.0/details-actions-panel","children":[]},{"id":"ci_3702f24bcf0cc43ed9311a9b17a449a01be7aa89a89f1a9aadfb3a875b781857","title":"Export Log Data into a CSV File","path":"/lrsiem/7.22.0/export-log-data-into-a-csv-file","children":[]},{"id":"ci_380203510ecdb075f64afe54a084f8d6f9db0a6180c1e027d1d1a0744260e9a6","title":"Inspector Panel","path":"/lrsiem/7.22.0/inspector-panel","children":[{"id":"ci_751fea957d598ec4dc061b45770499775ffef630fbb9764d9b50bbfa8ca87213","title":"Integrate with LogRhythm UEBA (formerly CloudAI)","path":"/lrsiem/7.22.0/integrate-with-logrhythm-ueba-formerly-cloudai","children":[]},{"id":"ci_f99989015be2d37af9416243077dc3cfadd127b4d79f8f51291529180d1a2670","title":"Use Contextualize","path":"/lrsiem/7.22.0/use-contextualize","children":[]},{"id":"ci_25205470ad6a89a66b470b5d5d238956ad94b7fc7071e0b597835b7d9c0ad29b","title":"Configure Third-Party Contextualize Actions","path":"/lrsiem/7.22.0/configure-third-party-contextualize-actions","children":[]},{"id":"ci_e44c499dfe923deabdb3647981eabe4f80e64aa5010aad8020ad23aaff6cb136","title":"Use SmartResponse","path":"/lrsiem/7.22.0/use-smartresponse","children":[]},{"id":"ci_0060741a9094835c5f856782467dfc6f3594785591e8766c01eba593963358e5","title":"Use the AI Engine Rule Viewer","path":"/lrsiem/7.22.0/use-the-ai-engine-rule-viewer","children":[]},{"id":"ci_ff3940b593600794fe82b041f6ffdfccf5132dfbabfea5b4285194e790b130bd","title":"Use Threat Intelligence Service Integration","path":"/lrsiem/7.22.0/use-threat-intelligence-service-integration","children":[]}]}]},{"id":"ci_6f0a1b0ecd9115d4ce779952cfba6d4d0a73be189b24bef8361468c7f9ac582f","title":"Case Management","path":"/lrsiem/7.22.0/case-management","children":[{"id":"ci_779472456b4c29d4effc15efd7099e07606ca52389b599ae8acb6a839ce0829c","title":"Case Cards","path":"/lrsiem/7.22.0/case-cards","children":[]},{"id":"ci_d0f80d9eaee9e13a64c0af7af03b7aa3c13835dd2f557b29f630d7b60b647030","title":"Case History Widgets","path":"/lrsiem/7.22.0/case-history-widgets","children":[]},{"id":"ci_80185a8e4360cb0a8b26e830c8a59587af7d014b02d2098a05d42396f9e18bb9","title":"Case List Widgets","path":"/lrsiem/7.22.0/case-list-widgets","children":[{"id":"ci_89c99d9929c5fede0e4eb58ac55997c2effb4ac9a54bc6220e75514fb8564b30","title":"Configure Case List Widget Settings","path":"/lrsiem/7.22.0/configure-case-list-widget-settings","children":[]}]},{"id":"ci_a5433954698759e0f70d199e0c5f65c86a6bb6fce5fb7568884bb939c91cf70b","title":"Case Owners vs. Collaborators","path":"/lrsiem/7.22.0/case-owners-vs-collaborators","children":[]},{"id":"ci_83f197d540866cef467d5cdf388dcd8a45c71af5afdf010592cf4beee55e4e08","title":"Case Status and Workflow","path":"/lrsiem/7.22.0/case-status-and-workflow","children":[]},{"id":"ci_d62ac47c8966a9e1db2dff860e99dfc0dcb9e1113e5037d0d8b9ba12a6f9d576","title":"Case Trend Widgets","path":"/lrsiem/7.22.0/case-trend-widgets","children":[{"id":"ci_8ce21c1f2a8bce4fa76e5082ee8b35b85014ecf7e39bff1a7d4980a75a7a94fd","title":"Configure Case Trend Widget Settings","path":"/lrsiem/7.22.0/configure-case-trend-widget-settings","children":[]},{"id":"ci_a8e3281427a0f4b0eb81c0097758f6b1c0ebe57eea3f12b374be5150f6e6d5b4","title":"Read Case Trend by Priority Charts","path":"/lrsiem/7.22.0/read-case-trend-by-priority-charts","children":[]},{"id":"ci_430b2347c7167aea9e9ef5710736fdb7790ac1505067b1650fc88437a5271be9","title":"Read Case Trend by Status Charts","path":"/lrsiem/7.22.0/read-case-trend-by-status-charts","children":[]}]},{"id":"ci_3a5f0f52c0f480b25fa1422a1aef4d9a37bee130e49ca3ace07f6ac136b26b99","title":"Open the Case Details View","path":"/lrsiem/7.22.0/open-the-case-details-view","children":[]},{"id":"ci_e25a3b7cc8fc8ca449515b727ba091726e8276b62fa51b5c01306aab23d0f2c0","title":"Separate Entities in Cases","path":"/lrsiem/7.22.0/separate-entities-in-cases","children":[]},{"id":"ci_d7223857e66458c86cfb9e3a5961a9b2f2df8970d0c977d24d139aaece527780","title":"Work with Cases","path":"/lrsiem/7.22.0/work-with-cases","children":[{"id":"ci_bd2fa46d7d3146bbfca523717563d162fa2a85bdda9da7371a1f5ebed0446c9e","title":"Add Alarms to a Case","path":"/lrsiem/7.22.0/add-alarms-to-a-case","children":[{"id":"ci_413ace359780c92766dca1716980c8f491b54ccdc5d1f8e6febf2409e13231a8","title":"Update the Status of Alarms Associated with a Case","path":"/lrsiem/7.22.0/update-the-status-of-alarms-associated-with-a-case","children":[]}]},{"id":"ci_7cc8d3d2003fbbe260b1fa078593bf373c976b6af227a49f60e4399adff7986b","title":"Add Files to a Case","path":"/lrsiem/7.22.0/add-files-to-a-case","children":[]},{"id":"ci_dc82571098eb711867ba20ee8dd5dfb94bcd37a35e988318721757e3609dbc54","title":"Add Logs to a Case","path":"/lrsiem/7.22.0/add-logs-to-a-case","children":[]},{"id":"ci_320e49cc605ad5fd0f3f4328ae9a7e95f5428c9dd3bc5e4ea33a6511d25b6b63","title":"Add Notes to a Case","path":"/lrsiem/7.22.0/add-notes-to-a-case","children":[]},{"id":"ci_d2791c4fef3e87a76eec348b6f979a3f9be65d6536559e04da52a98a1b0b4155","title":"Case Associations","path":"/lrsiem/7.22.0/case-associations","children":[{"id":"ci_8abad3d2f36013feb7e68ee4d8b9a6cb0436229be94aa0a02e75c83b276780ab","title":"Add Case Associations","path":"/lrsiem/7.22.0/add-case-associations","children":[]},{"id":"ci_34dc3d915b69d8ac20eb857369726c8ac92df7f13b3acf1ee1f66a661fa08520","title":"Remove Case Associations","path":"/lrsiem/7.22.0/remove-case-associations","children":[]}]},{"id":"ci_42f051612932f1ee4f60b36e27ecf73162d28d3ff74c2d552722954b44524722","title":"Case Collaborators","path":"/lrsiem/7.22.0/case-collaborators","children":[{"id":"ci_8add3f12090c9f8a9c812c8ff7148f2d575e5978c5c12d714d6bd0a7df7afd4a","title":"Assign Collaborators to a Case","path":"/lrsiem/7.22.0/assign-collaborators-to-a-case","children":[]},{"id":"ci_75e432504d68f6e0fdcabb987f11cf76d7647614dc63902b61edcebcf641d232","title":"Remove Collaborators from a Case","path":"/lrsiem/7.22.0/remove-collaborators-from-a-case","children":[]},{"id":"ci_61ddb74289ca9f2f7bf9533af17de5e4bbe73646bdd1546117a7346408db2093","title":"Transfer Case Ownership","path":"/lrsiem/7.22.0/transfer-case-ownership","children":[]}]},{"id":"ci_8234b0fbf4aa9418634fbf86f0cea98a46d8d1bfef1ace42b2efaeb7acd78bf9","title":"Case Tags","path":"/lrsiem/7.22.0/case-tags","children":[{"id":"ci_814155e0cb57e70ea20d48db1fa53695243440d7c00c549bb1ad547955b89baa","title":"Add Case Tags to a Case","path":"/lrsiem/7.22.0/add-case-tags-to-a-case","children":[]},{"id":"ci_6e3bd0a21cc9e4433096b3e8b92a2eed819b395e17bacea41960fc170f54079d","title":"Remove Case Tags from a Case","path":"/lrsiem/7.22.0/remove-case-tags-from-a-case","children":[]},{"id":"ci_42f2fb1bfd7efe7898688d6f68adcb9a22bb53a4817a33dfada6315a16c2607a","title":"Use Case Tags to Filter Cases in Case Widgets","path":"/lrsiem/7.22.0/use-case-tags-to-filter-cases-in-case-widgets","children":[]},{"id":"ci_4e38da06f4de243326ab096ac98d3c52c66edea6ce817c8e2abfc3bd9d8aa2ce","title":"Use the Case Tag Library","path":"/lrsiem/7.22.0/use-the-case-tag-library","children":[]}]},{"id":"ci_a1861264c273931452e92496285840c37c994382b58139a88a4170dd504f58e5","title":"Close Cases","path":"/lrsiem/7.22.0/close-cases","children":[]},{"id":"ci_975dc6abfb6dc9ca65c0b62f60d56f930d52e2dac3ccf65987e886b3d6c8ce53","title":"Create New Cases","path":"/lrsiem/7.22.0/create-new-cases","children":[]},{"id":"ci_e92e978fca34a969134d9e46cd14d801beb9fa3731ca78fc7280110aebe03466","title":"Delete Logs, Alarms, and Files from Case Evidence","path":"/lrsiem/7.22.0/delete-logs-alarms-and-files-from-case-evidence","children":[]},{"id":"ci_ae219fa129b85d0e54ceddaf67dc59b41f1c36d6cf0049c0d3a01d6f4d56c858","title":"Edit and Delete Notes in Case Evidence","path":"/lrsiem/7.22.0/edit-and-delete-notes-in-case-evidence","children":[]},{"id":"ci_e2343f54ce3a7becb2f2505124af17514fd7ef2782889b53c78ef6fb41cb79f9","title":"Edit Case Names, Priorities, Due Dates, and Summaries","path":"/lrsiem/7.22.0/edit-case-names-priorities-due-dates-and-summaries","children":[]},{"id":"ci_bc93c355d19238b9fd3bf0d4c429efd7bd5fc01d5a18d6bf5b604655da6c76e5","title":"Filter Cases","path":"/lrsiem/7.22.0/filter-cases","children":[]},{"id":"ci_e5f7ec0c7600c02c39e94ca4108ae4b74702a9441a0e36d728510c54547bf9d0","title":"Pin Important Evidence","path":"/lrsiem/7.22.0/pin-important-evidence","children":[]},{"id":"ci_817be3143b2bc3825f59a3e974407102ab9b0bd64d25ad8d86f7d302bc100bf6","title":"Reopen Cases","path":"/lrsiem/7.22.0/reopen-cases","children":[]},{"id":"ci_3766118a81a4ff0a20a1aa215009992e7a15286231b3f2496afa5edaac8b41fa","title":"Unpin Evidence","path":"/lrsiem/7.22.0/unpin-evidence","children":[]}]},{"id":"ci_376d1308f5be91db502986878fe15895b92c0c7b5264f075ca58c2546694651f","title":"Work with the Current Case Panel","path":"/lrsiem/7.22.0/work-with-the-current-case-panel","children":[]}]},{"id":"ci_554dbad06c221a883be0615c7312b700b1a9b3ff8ebff337a6316c42fb35f6fd","title":"Cloud to Cloud Log Collection","path":"/lrsiem/7.22.0/cloud-to-cloud-log-collection","children":[{"id":"ci_581673c81bf9a50ea9346e150a2c5984664e13afa05f00e060e140d960963420","title":"Configure an Open Collector Log Source","path":"/lrsiem/7.22.0/configure-an-open-collector-log-source","children":[]},{"id":"ci_3bedceab132b23d1b48a7b323b7f4d72ef5756c8e2df5a07a41ca8f690b82218","title":"Add a Log Source Configuration","path":"/lrsiem/7.22.0/add-a-log-source-configuration","children":[]},{"id":"ci_91e2486b035238c2f274ef9abb11453005b46bb9c79e8380f31374ef4614b570","title":"Use the Log Source Configuration Grid","path":"/lrsiem/7.22.0/use-the-log-source-configuration-grid","children":[]},{"id":"ci_6c30b86e5a11b27ac5fc983b337e06b4eb58e03ebe4fdd35ccfeced29f0b72b8","title":"Edit a Log Source Configuration","path":"/lrsiem/7.22.0/edit-a-log-source-configuration","children":[]},{"id":"ci_b91e6686911e22c9ddf919bef0289b8137b0a2cf764559486f1685d8fd8dddfb","title":"Delete a Log Source Configuration","path":"/lrsiem/7.22.0/delete-a-log-source-configuration","children":[]}]},{"id":"ci_5c914ae4f3e8136e4566a538b67da99d0091f850f5077dea9197005c12c124cc","title":"Dashboards","path":"/lrsiem/7.22.0/dashboards","children":[{"id":"ci_99d5a9f277f0d3402ed9de65dc889edf0732e70175861a3088b9e1991692fc8c","title":"Create New Dashboards","path":"/lrsiem/7.22.0/create-new-dashboards","children":[]},{"id":"ci_a875d4dae672179605510c9205975cc945907a0ad993fb5717b71bbd851a9dfc","title":"Clone Dashboards","path":"/lrsiem/7.22.0/clone-dashboards","children":[]},{"id":"ci_4d8828e1993997ef2742cffc8e6efa5af6f75d152f6e9cd069218f2e7dc22206","title":"Import and Export Dashboards","path":"/lrsiem/7.22.0/import-and-export-dashboards","children":[]},{"id":"ci_eccf692fb29eff98b7f2bfed5cffa4eba1042b849bb94ed12eb7b8bed97cd6bd","title":"Change Dashboards","path":"/lrsiem/7.22.0/change-dashboards","children":[]},{"id":"ci_370e7e9e82d9f8d286ed4ec3ce75e5ba1a4c94371fc94697f32194175c48be32","title":"Revert Changes","path":"/lrsiem/7.22.0/revert-changes","children":[]},{"id":"ci_6508af78fafa08494d38cee36eca8e8b49b5dc8fe969f4384ba1c6fdb271d460","title":"Print Dashboards","path":"/lrsiem/7.22.0/print-dashboards","children":[]},{"id":"ci_866476543fa7fa1f8942d3db5b2c97f55148f9878e87eb5937d42fd48669339a","title":"Save Dashboard Changes","path":"/lrsiem/7.22.0/save-dashboard-changes","children":[]},{"id":"ci_3f035f620b1cd04d5cc6291cf09b37d3204ec1995aabed935e1fa67c41ca0405","title":"Filter Data with Lucene Searches","path":"/lrsiem/7.22.0/filter-data-with-lucene-searches","children":[{"id":"ci_505c1d63c5db5526f2dfd019dd3494c75c156c62e47b8bdcf9fb7d0251353d2c","title":"Lucene Search Syntax","path":"/lrsiem/7.22.0/lucene-search-syntax","children":[{"id":"ci_7bf66a9b18e82c9182e3430fe63ceb3472afd9dec7271f134b489d076a4dc42b","title":"Basic Queries","path":"/lrsiem/7.22.0/basic-queries","children":[]},{"id":"ci_af8121a361ce6f86b8cbd39f093f22446e56f0a937655fe026c4b6df3d757731","title":"Complex Queries","path":"/lrsiem/7.22.0/complex-queries","children":[]},{"id":"ci_256ee409af1abfd3366a636ffdb74869286ca188393b18a396851e012e0115d6","title":"Troubleshoot the Lucene Search","path":"/lrsiem/7.22.0/troubleshoot-the-lucene-search","children":[]},{"id":"ci_b8f9da0fd9ffb029a1d3dd8e7af2a96414918b913de18285a11ad32323c4b8e3","title":"Wildcard Queries and Fuzzy Matches","path":"/lrsiem/7.22.0/wildcard-queries-and-fuzzy-matches","children":[]},{"id":"ci_f164e7b4bc93e13a999acb4f7b50b7c2ce2701cd5a0398308f9acbc6304d0ad6","title":"Metadata Fields","path":"/lrsiem/7.22.0/metadata-fields","children":[{"id":"ci_20c16341de92dff097e98d9c462a1b32966e10c89cb9a7d06f83f67896a54fd7","title":"Applications","path":"/lrsiem/7.22.0/applications","children":[]},{"id":"ci_f559b80dc3b9a9c07d31812d0f0e5cf70fdd5e0ec7283ae527cac8d048b91a55","title":"Classification","path":"/lrsiem/7.22.0/classification","children":[]},{"id":"ci_c080056e7065869e4293585e5fffa09e256e3979c77a790ef37bdd85a7c51ac6","title":"Identity","path":"/lrsiem/7.22.0/identity","children":[]},{"id":"ci_6f3f785f30f5035936ec89f5bc561d0a060fe0309320ba74c2b4bc77681bf76a","title":"KBytes and Packets","path":"/lrsiem/7.22.0/kbytes-and-packets","children":[]},{"id":"ci_c5c623089f778e0788aeeae45ccf08c9b3fb2e64d19e020ddfa79379fe3d0731","title":"Location","path":"/lrsiem/7.22.0/location","children":[]},{"id":"ci_8f559f1bc74d1be2926a26bc7cd5909fef9803d7906896f1efe76b76d9edf88c","title":"Log","path":"/lrsiem/7.22.0/log","children":[]},{"id":"ci_135812916120c01bee8f5eeb59b232936909763f8bbe5c27cc3dbe8db5f240ac","title":"Network","path":"/lrsiem/7.22.0/network","children":[]},{"id":"ci_584f904a49a482ff03592e0f9c10dd068f25b68da5e46cd45ffcbc46d2256cce","title":"Host","path":"/lrsiem/7.22.0/host","children":[]}]}]}]}]},{"id":"ci_0735b7bbc9143f440daa6f13bf4835626b0925f0090cc7892dcb2cd3901acf71","title":"Data Indexer (DX) Dashboards","path":"/lrsiem/7.22.0/data-indexer-dx-dashboards","children":[]},{"id":"ci_93fcb1e4e645b4612d969050b0fa92838197a9b0c4e09a4d5ad4fadf58840316","title":"Lists in Web Console","path":"/lrsiem/7.22.0/lists-in-web-console","children":[{"id":"ci_11f8d1087e640f89080bcc17ab017ed164fbad6e61d7a6428bbfe8ae48e68f0c","title":"Add List Items in the Web Console","path":"/lrsiem/7.22.0/add-list-items-in-the-web-console","children":[]},{"id":"ci_4d1b18095af4b8ef89a1cb37988def6dfc079f0c84f09c6c3fe9786cd6b55211","title":"Add Related Lists","path":"/lrsiem/7.22.0/add-related-lists","children":[]},{"id":"ci_9c788e4ac0d6a96424d184ff7285bdaa99ea52582158dd1146bff3e9b76e6ef6","title":"Create a List in the Web Console","path":"/lrsiem/7.22.0/create-a-list-in-the-web-console","children":[]},{"id":"ci_7537791be693c045bdc699919640d22265c5a88135512cebcec8258646bbc3f4","title":"Filter and Sort Lists","path":"/lrsiem/7.22.0/filter-and-sort-lists","children":[]},{"id":"ci_81cd09eeecd386ef31841751da830f3e54ce4450141990be759064e03a18bf67","title":"Remove List Items in the Web Console","path":"/lrsiem/7.22.0/remove-list-items-in-the-web-console","children":[]},{"id":"ci_d7e564b9199fac1062f624dfe76e3807aceb9920fbfd58c9974301af2c49f169","title":"Select and View a List","path":"/lrsiem/7.22.0/select-and-view-a-list","children":[]},{"id":"ci_0751769a150005c78ae68c621bce3f289ffe8d4bb948112e7fd5c996638dfda1","title":"View Retired Lists","path":"/lrsiem/7.22.0/view-retired-lists","children":[]}]},{"id":"ci_ee2aa362234d857040262abc0c8b6222e530f2316047d7fe22e5b835fc128e56","title":"Log Collection in Web Console","path":"/lrsiem/7.22.0/log-collection-in-web-console","children":[{"id":"ci_12a420ed8b70819d95ba6cd382025a4a65b91f663b777c03f71fc1a0b8d37957","title":"Agents Grid","path":"/lrsiem/7.22.0/agents-grid","children":[]},{"id":"ci_f2259ea2bb484240335df8bc4a19c646989cbf40cf00e78ff5d9784519365e69","title":"Beats Grid","path":"/lrsiem/7.22.0/beats-grid","children":[]},{"id":"ci_71cc5622d439bf28ec89b438e71482b1cc613b1b926c5683614e118174922f40","title":"Log Sources Grid","path":"/lrsiem/7.22.0/log-sources-grid","children":[]},{"id":"ci_b0636a0065cea3d19f8d3ef483f690d97ec5e7f366d5265c6d25f751f2ccc3d6","title":"Open Collectors Grid","path":"/lrsiem/7.22.0/open-collectors-grid","children":[]},{"id":"ci_f4c5688eb75563225816303c1373b7339ffa66132438f4deec44ad47a5cfcff4","title":"Add a New Beat in Web Console","path":"/lrsiem/7.22.0/add-a-new-beat-in-web-console","children":[]},{"id":"ci_8224c7e975c2fb31cd31beffee367deeb4c7af3b75d9bbef5a8170386788969f","title":"Add a New Log Source in Web Console","path":"/lrsiem/7.22.0/add-a-new-log-source-in-web-console","children":[]},{"id":"ci_c037be23be0e3b5e8bd8a4c9b0f6da2fe56e5fc0dfadb4070a88783b3ca60325","title":"Manage Pending Log Sources","path":"/lrsiem/7.22.0/manage-pending-log-sources","children":[]},{"id":"ci_89f074c9cf890636dd443796d3eb66b9a237ec2b079b86a1ee287a0e64c7974a","title":"Retire Beats","path":"/lrsiem/7.22.0/retire-beats","children":[]},{"id":"ci_799889edabfa563ab5ad5ca678d2694dfdb8a5a4ddc6097edf00a052967fada7","title":"Retire Open Collectors","path":"/lrsiem/7.22.0/retire-open-collectors","children":[]}]},{"id":"ci_5b499db1607089e48a33c4dd05b087749681a4985b2aa413bb9008b0cab91a52","title":"Playbooks","path":"/lrsiem/7.22.0/playbooks","children":[{"id":"ci_fd471e23270a0854559907b8ca8188d71744ccf8b1cb5507c00482d00198f1fc","title":"Create Playbooks","path":"/lrsiem/7.22.0/create-playbooks","children":[]},{"id":"ci_e9978eed3fba47f7f2d763abae05d234a30c4c3b770a8cd41e9147532ae7eced","title":"Import Playbooks","path":"/lrsiem/7.22.0/import-playbooks","children":[]},{"id":"ci_2db74625f4aff1eed7f5bcd2129ea95c027ebedf6f73fcb4d245efa948a4601a","title":"Work with Playbooks","path":"/lrsiem/7.22.0/work-with-playbooks","children":[]},{"id":"ci_f8c4951aa390449654e798d28b4b7e6fb4bd083c2f215e949e88ee54da3ef2b2","title":"Add Playbooks to a Case","path":"/lrsiem/7.22.0/add-playbooks-to-a-case","children":[]},{"id":"ci_a382bd70a1e6fef491faeb17bc235d222efb8ed04e9d47cd188d2f08f58a46da","title":"Work with Playbooks in a Case","path":"/lrsiem/7.22.0/work-with-playbooks-in-a-case","children":[]},{"id":"ci_6ff4c09e04327a7c38e76749fdc9382505f19d8f4b8d65aff1850b2fdf61c536","title":"Procedures List Widget","path":"/lrsiem/7.22.0/procedures-list-widget","children":[]}]},{"id":"ci_836d58547e00b1f1344fdb7532852f7fec22964350bce85890cbc0ec3bd5f22c","title":"Reports","path":"/lrsiem/7.22.0/reports","children":[{"id":"ci_4dc99ed492ac60ca712ed732f7a86cd12983f5d80f5cdb4e8abcab553e8883da","title":"Completed Reports Widget","path":"/lrsiem/7.22.0/completed-reports-widget","children":[{"id":"ci_434b541dc3283b222d654753fd34869cd891c7a2e01080caad4bcfbd1096a214","title":"Configure Completed Reports Widgets","path":"/lrsiem/7.22.0/configure-completed-reports-widgets","children":[]}]},{"id":"ci_b4071ebeddb3d3e1f5b8a6ca100da1b05792fdb5e33da4a0c87f39cc0fa22848","title":"Download Reports from the Web Console","path":"/lrsiem/7.22.0/download-reports-from-the-web-console","children":[]},{"id":"ci_4289db033f16c91d6421f9711991ccd2e9eb794117896e25204f99bad3aa2c14","title":"Filter Report Packages on the Reports Grid","path":"/lrsiem/7.22.0/filter-report-packages-on-the-reports-grid","children":[]},{"id":"ci_b12c357d7102a9d4f93691d091f434d8ec83d9fc80851f2ad18cf09ff59b74d1","title":"Pin and Resize Reports Grid Columns","path":"/lrsiem/7.22.0/pin-and-resize-reports-grid-columns","children":[]},{"id":"ci_4542a27f33fd1243f060a08491bbd6142fb133420787bea9e053cc503cde22f0","title":"Run Searches from Report Filter Criteria","path":"/lrsiem/7.22.0/run-searches-from-report-filter-criteria","children":[]},{"id":"ci_7e235e0ff7f122c7c7c48932bb94dc04bbeaba803b735b29c88004ce54eb5368","title":"Sort Content on the Reports Grid","path":"/lrsiem/7.22.0/sort-content-on-the-reports-grid","children":[]},{"id":"ci_2bf86932078c5697ce2539246cae31d679041b04cbd4f1bdbd596abb3d37dd13","title":"View Package and Reports Details in the Inspector","path":"/lrsiem/7.22.0/view-package-and-reports-details-in-the-inspector","children":[]}]},{"id":"ci_a0b67069ed3b999fe3dbe4b9024516275676024ec110de8e74c3e8abd103bdec","title":"Search","path":"/lrsiem/7.22.0/search","children":[{"id":"ci_0369e19962b3bfd4c6957c5320317665c8c392a0d7d48f5b14d3ec5d2378dced","title":"Manage the Searches Page","path":"/lrsiem/7.22.0/manage-the-searches-page","children":[]},{"id":"ci_3892c96f03b4b442ba855bdbd092f30d4d187db980dcd9a995ebe78d3aa7c28e","title":"Run Searches from the Searches Page","path":"/lrsiem/7.22.0/run-searches-from-the-searches-page","children":[]},{"id":"ci_ef0b85afc92732457f57b9a6ea76945b6fdb8903ee40b1fb5f1717128c5e0181","title":"Use Search","path":"/lrsiem/7.22.0/use-search","children":[]},{"id":"ci_39bf28a60b336b34946823d2dec931dc5dfa383b2434713ee9967d38137b61b1","title":"Save Searches","path":"/lrsiem/7.22.0/save-searches","children":[]},{"id":"ci_92e8bd5ae83071fb0120e30ff225f96bd8782a22bbf19c04581f059535b36d20","title":"Perform Details Searches (User/Host)","path":"/lrsiem/7.22.0/perform-details-searches-user-host","children":[]},{"id":"ci_86258ac8da27f6f5b598e0f8bbd5262c88439598160f8f38d37b9771c1a62104","title":"Perform Pivot Searches","path":"/lrsiem/7.22.0/perform-pivot-searches","children":[]},{"id":"ci_c368fbd9eebecf043a03cbfccdd7378b94c9818f270ef26de42ddfaed8c50b52","title":"Search Tiers (Hot/Ultra-Warm/Warm/Cold)","path":"/lrsiem/7.22.0/search-tiers-hot-ultra-warm-warm-cold","children":[]}]},{"id":"ci_ee992a3c8f36052ec02cb0d41343476068e56efe1f382c5b71c8a970ff16fa1c","title":"SecondLook - Web Console","path":"/lrsiem/7.22.0/secondlook-web-console","children":[]},{"id":"ci_371a49b070017034e7386613cbba1ac259c5365118194c55eef9e8a8a3294dd1","title":"Single Sign-On","path":"/lrsiem/7.22.0/single-sign-on","children":[{"id":"ci_428134fafeb0d1539ad903462ddc9634a0555b807135e305312ff214274833f4","title":"SSO Known Issues and Recommendations","path":"/lrsiem/7.22.0/sso-known-issues-and-recommendations","children":[]},{"id":"ci_10bf54905e9febcab98e7208a3dc5690f6077c771a9f8ae102d3a6bc1e2e1ffe","title":"SSO User Auto-Provisioning","path":"/lrsiem/7.22.0/sso-user-auto-provisioning","children":[]},{"id":"ci_68a2c548482340fc935d7283586e9d6eb4a16fdcb3bbd523331e6bcde2a4a251","title":"SSO Configuration","path":"/lrsiem/7.22.0/sso-configuration","children":[{"id":"ci_4f4603121365e1e921fd75b9b4e09724b2fbe409363006ae3f14108ce73bcc4a","title":"Supported Identity Providers","path":"/lrsiem/7.22.0/supported-identity-providers","children":[{"id":"ci_b16a2edf0c81af45daa2fbad2b0846a96a90753fb3522bf3743b40fa5e1dbba8","title":"Configure SSO with Okta","path":"/lrsiem/7.22.0/configure-sso-with-okta","children":[]},{"id":"ci_ef1e637916fe9603780ba978d0f3a9b738fab4e8ac0fddf349dadb5c184548ce","title":"Configure SSO with Azure AD","path":"/lrsiem/7.22.0/configure-sso-with-azure-ad","children":[]},{"id":"ci_830d12533fe03e4eef8e3b6f68c8374f2d138b1f76afcd2bd2469b3d2a292c59","title":"Configure SSO with PingOne for Customers","path":"/lrsiem/7.22.0/configure-sso-with-pingone-for-customers","children":[]},{"id":"ci_eb7dbfa66b53386ebbf3fff09c63fe586aa0663a67030b4522827a009454f4bb","title":"Configure SSO with PingOne for Enterprise","path":"/lrsiem/7.22.0/configure-sso-with-pingone-for-enterprise","children":[]}]}]}]},{"id":"ci_6401a75387a54174650d3d0551109020d352f5fe491caae4268ad0d5ab50400d","title":"TrueIdentity","path":"/lrsiem/7.22.0/trueidentity","children":[{"id":"ci_37b040eaac2366c0fa4396e3a909f7c47e1a1f1d30fe6de5dc9c9ce78d3532dc","title":"Work with TrueIdentities","path":"/lrsiem/7.22.0/work-with-trueidentities","children":[]}]},{"id":"ci_2666792a3b6998de69d58c4512c3cd5da22d2b9fd734ac1c0dd95f2599499a4d","title":"User Interface","path":"/lrsiem/7.22.0/user-interface","children":[{"id":"ci_3bb3ae09aece4a2a6c20451965867c412649c89c6857732638752135d20f4803","title":"Resource Center","path":"/lrsiem/7.22.0/resource-center","children":[]},{"id":"ci_dd48678a5c984fe0960315998c8ab668b05003118eee2f0f97e6117875b863b4","title":"Pages","path":"/lrsiem/7.22.0/pages","children":[{"id":"ci_20d15483af57ee79555198d306bdded9b18d042d58d155d014f8f12ca762c1c9","title":"Alarms Page","path":"/lrsiem/7.22.0/alarms-page","children":[]},{"id":"ci_eeeaba2ca4e1500fd2a8044c7835b710ad01c955e3da715d9b6c9b2254cd36db","title":"Analyze Page","path":"/lrsiem/7.22.0/analyze-page","children":[]},{"id":"ci_f0849b5082050df1e0cbadaa8ff912ce7a3977ab54bafd1e74aa826b51e32864","title":"Cases Page","path":"/lrsiem/7.22.0/cases-page","children":[]},{"id":"ci_ee996dc8fd7f2da729f138a3eff03fc4dc835c68bb6673b6be2811344d708703","title":"Dashboards Page","path":"/lrsiem/7.22.0/dashboards-page","children":[]},{"id":"ci_2f9bb725c094ee0c0c05682ae918f2f70cb3c59a8cc8637912f36d3dd947dde4","title":"Host/User Detail Page","path":"/lrsiem/7.22.0/host-user-detail-page","children":[]},{"id":"ci_186afbb7b1ad6f31c377927a32182e5f205f07a206a8d3ac55d62b4b9d8f2b8b","title":"Lists Page","path":"/lrsiem/7.22.0/lists-page","children":[]},{"id":"ci_7cb5b89c5beff37e6f1e9eb119613a7459857cecc8f7675f681d9612a31ecb20","title":"Reports Page","path":"/lrsiem/7.22.0/reports-page","children":[]},{"id":"ci_38d628ca1caf46adc7988590c889d9c6af28c536183c31431f766b470a21ddb3","title":"Searches Page","path":"/lrsiem/7.22.0/searches-page","children":[]},{"id":"ci_9ad85d479ec37bc4f20bf481d0c95e0aaa144c3b3e1c0e5e0666c98c025d9ba4","title":"TrueIdentity Page","path":"/lrsiem/7.22.0/trueidentity-page","children":[]}]},{"id":"ci_283fe721c2c0f73aaf9ef4a2d0fec05cec6c3efd7e1f00cada1009a24f63a9e4","title":"Panels","path":"/lrsiem/7.22.0/panels","children":[{"id":"ci_effb9b80c1e881781ae00919355b78aba09fc768541f9ec418285bba5d92422a","title":"About the Analyzer Grid","path":"/lrsiem/7.22.0/about-the-analyzer-grid","children":[]},{"id":"ci_72ce2fd077096f66b435fadcfc37707ce557961cc82aaca1a9decc25c0ccea56","title":"Current Case Panel","path":"/lrsiem/7.22.0/current-case-panel","children":[]},{"id":"ci_3f0b77ca9bc1f8e3458e56aa6f5d5de9471630801b5e45bdc27370fdddebe019","title":"Inspector","path":"/lrsiem/7.22.0/inspector","children":[]}]},{"id":"ci_e8de618768907a621e16e25a4e276842628531e90b655a1074873862ff45f15b","title":"Tools","path":"/lrsiem/7.22.0/tools","children":[{"id":"ci_e9850055ee7d715978b5fd05c9a764d1b2e7d45aae340ccc4cf1e8a508b7bd34","title":"About Widgets","path":"/lrsiem/7.22.0/about-widgets","children":[]},{"id":"ci_0ab9147fbef0fcc0161f76dae0899aa82d9caf100de836bec54cd6d8d9f4fd2c","title":"Breadcrumbs","path":"/lrsiem/7.22.0/breadcrumbs","children":[]},{"id":"ci_3dabc71480c22fbebde99a4db2f6504eaf978ce24c0a1e11d62b7e388bfd4d89","title":"Hotkeys","path":"/lrsiem/7.22.0/hotkeys","children":[]},{"id":"ci_7c0465f475fa91afcc51cff077f6973016fba168ed3b07b8cd8827aad12873d6","title":"Icons","path":"/lrsiem/7.22.0/icons","children":[]},{"id":"ci_26680b87c2c8f0a91248e7b2f684d0c5f4d6d20e62ce1a82ff0887ff472e63c5","title":"Search Tools","path":"/lrsiem/7.22.0/search-tools","children":[]},{"id":"ci_968e387697d0ad97ed2b0fc3f193e9fe4b705be2de874a77a25757c79bd9ba82","title":"Taskbar","path":"/lrsiem/7.22.0/taskbar","children":[]},{"id":"ci_726d97b39e61d663bad30845c9ab460a18eee69786b5b48ceb8b680fe74f568f","title":"Typeahead Filters","path":"/lrsiem/7.22.0/typeahead-filters","children":[]}]}]},{"id":"ci_3af39618e915a7aa4b636e186be877c6d179192ac2a66b577a51347e9b5ad1fa","title":"User Settings","path":"/lrsiem/7.22.0/user-settings","children":[{"id":"ci_d55e10cc4a23c02018a3143d68ce7b4060ff0a640e7275b159b9852f803e73c7","title":"Access Web Console Help","path":"/lrsiem/7.22.0/access-web-console-help","children":[]},{"id":"ci_659db1b2a1d900f39ac57805bf43927ee2c6e9a3c6c1939e5681f24b9d9722de","title":"Change the Default Web Console Search Timeout Period","path":"/lrsiem/7.22.0/change-the-default-web-console-search-timeout-period","children":[]},{"id":"ci_3f95b3d82431bd0fc60974e788238c2e793993c5016169fe360b104c227b8eaf","title":"Change the Web Console NGINX Configuration to Modify Available Ciphers","path":"/lrsiem/7.22.0/change-the-web-console-nginx-configuration-to-modify-available-ciphers","children":[]},{"id":"ci_265acb14ceb013556eaea2c2d9be29567dbb8626f137927a2c665f20b0216f31","title":"Change Web Console Password","path":"/lrsiem/7.22.0/change-web-console-password","children":[]},{"id":"ci_05d34bbd8f47eeca342ba3f8bf24ecaa3614a57c22b5a5e3892c4e9b790ce5e4","title":"Configure Navigation Warning","path":"/lrsiem/7.22.0/configure-navigation-warning","children":[]},{"id":"ci_6ca4e2d0a4563426d84cff5c0aaf9f052d58fc40d041370c3afb292026be9cec","title":"Configure Search Results","path":"/lrsiem/7.22.0/configure-search-results","children":[]},{"id":"ci_9f7d12aec18ee8a99bdbaab9909d76903a8d1d6f57d94e69cbb5a69cd2252a3c","title":"Select Query Location","path":"/lrsiem/7.22.0/select-query-location","children":[]},{"id":"ci_7352e9a9276c7cb5dfed6432378867d3e65b7fe301bc3fd8acd45562fda6d169","title":"Set the Date Time Format","path":"/lrsiem/7.22.0/set-the-date-time-format","children":[]},{"id":"ci_dc1902971644582b46c6b09c1bbfe33c1daa70412b46f4443e03501dd4c8c8e8","title":"Set Your Drilldown Preference","path":"/lrsiem/7.22.0/set-your-drilldown-preference","children":[]},{"id":"ci_83381ea81431d4d4bddaba31d61d25ed09210fa171799f8a493321a702e634b9","title":"Switch Between Day and Night Modes","path":"/lrsiem/7.22.0/switch-between-day-and-night-modes","children":[]}]},{"id":"ci_263757100fcf887dd46ac4076dd96b2d3c026e302f14a8493350b10ebd56a7d2","title":"Widgets","path":"/lrsiem/7.22.0/widgets","children":[{"id":"ci_685e39921a97c11e403895698b11399e850159bc392b750625916199aeb00403","title":"Customize Dashboard Widgets","path":"/lrsiem/7.22.0/customize-dashboard-widgets","children":[{"id":"ci_e9ed63a33272f76c801e0fb8ce3975443194fa5765d0198d5c5ba8b8cf0ea938","title":"Add Widgets","path":"/lrsiem/7.22.0/add-widgets","children":[]},{"id":"ci_52695da570ec7b146e94f50676b22d1dbc0e4bcdab7f9e78e541e93064a6084a","title":"Configure Widget Settings","path":"/lrsiem/7.22.0/configure-widget-settings","children":[]},{"id":"ci_948ce04afc2b5286e7c4489d2621c6df6817e0dd252d9241429d741152ebe69a","title":"Copy Widgets","path":"/lrsiem/7.22.0/copy-widgets","children":[]},{"id":"ci_0c06f7d1b579eacf49983527cb9168b744cfe4b0c000e200f5e70dfd3108a326","title":"Delete Widgets from a Dashboard Layout","path":"/lrsiem/7.22.0/delete-widgets-from-a-dashboard-layout","children":[]},{"id":"ci_959a6af57f9c95ce11b980911f85c7ce7c2e0d87b3c8a59dd62cebb70d02a576","title":"Move Widgets","path":"/lrsiem/7.22.0/move-widgets","children":[]},{"id":"ci_d2e67dc42616c8702360ab9f03f72e54d497643ab29abc9291f10d1c047885ae","title":"Rename Widgets","path":"/lrsiem/7.22.0/rename-widgets","children":[]},{"id":"ci_8485f0146866b54245f343298cdc276ed1aa0bef60473fccc80cd4bf5a870a00","title":"Resize Widgets","path":"/lrsiem/7.22.0/resize-widgets","children":[]}]},{"id":"ci_b9d07c85f6e8809b770b93e494399a3ecad1a0a2359f9abdc96babcef4374be5","title":"Component Status Widget","path":"/lrsiem/7.22.0/component-status-widget","children":[]},{"id":"ci_92bedcab33c0851f083c9a496dbeb9d3350492c4e8441ee72eacadc79b9f57ec","title":"Current Processing Rate Widgets","path":"/lrsiem/7.22.0/current-processing-rate-widgets","children":[]},{"id":"ci_a082dfcb8d0a82c54690573802d6030da0095d7827169f328c4b477ec389172e","title":"Data Processing Trend Widgets","path":"/lrsiem/7.22.0/data-processing-trend-widgets","children":[]},{"id":"ci_232bbc3b8a222d3febb95fb8f33a33867e8a06466ae047d6879b60df87b27aea","title":"Metric Widget","path":"/lrsiem/7.22.0/metric-widget","children":[{"id":"ci_03c3a4b1d417b8a936a05799864670252fbfe34a044ba1c94eee88f8dfc2755d","title":"Configure Metric Widget Settings","path":"/lrsiem/7.22.0/configure-metric-widget-settings","children":[]}]},{"id":"ci_20f561b8750a2993e07a79e6add7dabbfd97b80af163cfdab2b60ccd9724dedc","title":"Node-Link Graph Widgets","path":"/lrsiem/7.22.0/node-link-graph-widgets","children":[]},{"id":"ci_8fecba769a580f4d930a813d60fbe0638963d44644dea6e85306e8387810846a","title":"System Database Usage Widget","path":"/lrsiem/7.22.0/system-database-usage-widget","children":[]},{"id":"ci_10566765a2bfcd3bca01a9f0f1418cc75f5cb44a0a571a35317504ee05f7c987","title":"Threat Activity Map","path":"/lrsiem/7.22.0/threat-activity-map","children":[{"id":"ci_787f1837aad8749cf071870933dec023000f7523de5e01e2edf0338edf50187e","title":"Configure Threat Activity Map Widget Settings","path":"/lrsiem/7.22.0/configure-threat-activity-map-widget-settings","children":[]},{"id":"ci_dfc1420309346cdc551baf4d8eed830980235591376d6582af90af01a1714c20","title":"Drill into Threat Activity Map Node Data","path":"/lrsiem/7.22.0/drill-into-threat-activity-map-node-data","children":[]},{"id":"ci_5334fabc90cc3666808a08fb24ecb73b75a89f8164cb228387081676e40fb2f8","title":"Troubleshoot Threat Activity Map","path":"/lrsiem/7.22.0/troubleshoot-threat-activity-map","children":[]},{"id":"ci_4e9e4536b635915a26159adf298ce5b66a4d919e5b8572ef4ba2b02dbc9875c9","title":"Zoom In and Out on the Map","path":"/lrsiem/7.22.0/zoom-in-and-out-on-the-map","children":[]}]},{"id":"ci_d67e836118025b3100e175fead5086863f958339daaa949de94a2178620e1d4c","title":"Timeline Widget","path":"/lrsiem/7.22.0/timeline-widget","children":[]},{"id":"ci_22afc83ea30a63051b1d396fe8fcf892bc685d95265729492c3587b4e6223892","title":"TopX Widgets","path":"/lrsiem/7.22.0/topx-widgets","children":[{"id":"ci_51446eb950f32d73a8467f7f975da6391790e3a8dbd064950de923863ce1d334","title":"Configure TopX Widget Data Settings","path":"/lrsiem/7.22.0/configure-topx-widget-data-settings","children":[]},{"id":"ci_c3995fc571310234a9ba0c9a3d663957ec7159f6149fb5aadf7d056909e9278d","title":"Configure TopX Widget Graph & Options Settings","path":"/lrsiem/7.22.0/configure-topx-widget-graph-options-settings","children":[]},{"id":"ci_1dbed45376cfd71f0514924745662010cf9a51c76673e7410d8adb55bd1b9746","title":"Drill into Chart Metadata from the Dashboards","path":"/lrsiem/7.22.0/drill-into-chart-metadata-from-the-dashboards","children":[]},{"id":"ci_ada5277f8caaeaa6af9e9b220d6e6fe6ca10335a9af80fce79794005472ba060","title":"Filter Data by Time Range on the Dashboards and Analyze Pages","path":"/lrsiem/7.22.0/filter-data-by-time-range-on-the-dashboards-and-analyze-pages","children":[]},{"id":"ci_3d0e87f1a360a70fe6687c58c71677320c4e62250cc32c5912b42cee3f17a1a8","title":"Resize TopX Data Labels on Bar Charts","path":"/lrsiem/7.22.0/resize-topx-data-labels-on-bar-charts","children":[]}]}]}]},{"id":"ci_74d887c59c84af503dc30ccebe2c55e1891932491afae8a6d0c9232ae042f9fa","title":"LogRhythm Schema Dictionary and Guide","path":"/lrsiem/7.22.0/logrhythm-schema-dictionary-and-guide","children":[{"id":"ci_87a10422b7d5321a4da5fbf7c2750ddce76db343b436865bc0b939c5afe38ba1","title":"Application Tab","path":"/lrsiem/7.22.0/application-tab","children":[{"id":"ci_3cc3e4a1e589140b6f1c9857a0f940adf72dae0baf0b1b1455a1018d793a513e","title":"Action [7.2]","path":"/lrsiem/7.22.0/action-7-2","children":[]},{"id":"ci_6984fbca82cca0f0ae2a111f08f175500875cca4d9461219e8f15a4545c2089e","title":"Amount","path":"/lrsiem/7.22.0/amount","children":[]},{"id":"ci_ac76f3b9a0ccbcba950fb2ccb0463b5771e83a0093a8eb47a0561c3ca818b18c","title":"Command","path":"/lrsiem/7.22.0/command","children":[]},{"id":"ci_4bd1303b59377cb895d35953101d1320e4350988629ccb55101d621de64bca4f","title":"Hash [7.2]","path":"/lrsiem/7.22.0/hash-7-2","children":[]},{"id":"ci_9ea3ff2cd55b80b248f3b196843bd61545f76303a6dd19904524b413fabf643f","title":"IANA Protocol Name","path":"/lrsiem/7.22.0/iana-protocol-name","children":[]},{"id":"ci_291dd6f2c72166b719930a7cb9e162dc5feea3a0be04204fa3a861e30164f23a","title":"IANA Protocol Number","path":"/lrsiem/7.22.0/iana-protocol-number","children":[]},{"id":"ci_6651e623afb9e5418d1046bfd6f66256434de1f620de5e2714c44f8fdea152cb","title":"Object","path":"/lrsiem/7.22.0/object","children":[]},{"id":"ci_c944e80869a3d0f3ae0288ff66ac245e7c9d950a024b8ad20dc0eb5c294c2420","title":"Object Name","path":"/lrsiem/7.22.0/object-name","children":[]},{"id":"ci_9c69f770d142eafbcbf35decaf36a6050d7d18c3f14f8230049b86acfb62e2be","title":"Object Type [7.2]","path":"/lrsiem/7.22.0/object-type-7-2","children":[]},{"id":"ci_7936f1f93cebf4855ff99c42e7fa1e4c801eac9e64edf2075e8afa8c362ac722","title":"Parent Process ID [7.2]","path":"/lrsiem/7.22.0/parent-process-id-7-2","children":[]},{"id":"ci_d42e599656320d12916179ca361948e34fd6b13454235fb31c932189e4f63313","title":"Parent Process Name [7.2]","path":"/lrsiem/7.22.0/parent-process-name-7-2","children":[]},{"id":"ci_12a87bac964d10549702f4439aca5b8d001ebfb85d4310d93f0cacf068830a57","title":"Parent Process Path [7.2]","path":"/lrsiem/7.22.0/parent-process-path-7-2","children":[]},{"id":"ci_0f91838710f3ac36804aa736fd58d24eec25f05f5a14a1b436fc958c78ba75b1","title":"Policy [7.2]","path":"/lrsiem/7.22.0/policy-7-2","children":[]},{"id":"ci_8ee331e8e6ab2583953945b6c897927fa721fb29569708c8fff261dac47c5c6c","title":"Process ID","path":"/lrsiem/7.22.0/process-id","children":[]},{"id":"ci_bb505accfa4729137205ff0ab2ff3d1b25d9ba8a5763b4f7b30f8dffa4b0a269","title":"Process Name","path":"/lrsiem/7.22.0/process-name","children":[]},{"id":"ci_98bc5c3137ea93a8ee2abf2a8d6c246e62b062d829c988df1578dcfa0731d777","title":"Quantity","path":"/lrsiem/7.22.0/quantity","children":[]},{"id":"ci_a090c63545029ec398dd8166b6fd723cc2a783666b093ab71d94d8d9ae877e9c","title":"Rate","path":"/lrsiem/7.22.0/rate","children":[]},{"id":"ci_7efab6c9314170a8b4b634a0cef48794a030e81f1e1684f26e0f0bf4992a91c3","title":"Reason [7.2]","path":"/lrsiem/7.22.0/reason-7-2","children":[]},{"id":"ci_b948344c62d6029f6d70a70365e18ff369054a69624e0f12e348e61776253bd3","title":"Response Code [7.2]","path":"/lrsiem/7.22.0/response-code-7-2","children":[]},{"id":"ci_f69060916b94d2b12fbcc997df172aff42490c8d0b2106a657ee8cfbc704dcb0","title":"Result [7.2]","path":"/lrsiem/7.22.0/result-7-2","children":[]},{"id":"ci_dbe47aad4bd871406bf331f2ad94665cacd6ca13b4db3d056468973714351959","title":"Session","path":"/lrsiem/7.22.0/session","children":[]},{"id":"ci_623001a7a628120d593e41413c1be98ff71fa395df6a2843219a23ab81926afe","title":"Session Type [7.2]","path":"/lrsiem/7.22.0/session-type-7-2","children":[]},{"id":"ci_a75ca83ec4d2a09c644ab0926c6e86f1c46f118eb469e0b220313231919193d2","title":"Size","path":"/lrsiem/7.22.0/size","children":[]},{"id":"ci_de0d5bab386ead0c4288f4543fdd57ec3ced504a9f76ef15addfe67befb77e6a","title":"Status [7.2]","path":"/lrsiem/7.22.0/status-7-2","children":[]},{"id":"ci_9726ab717575d5d6664131bb31b835647f430f58a036839693e8e0282fb51794","title":"Subject","path":"/lrsiem/7.22.0/subject","children":[]},{"id":"ci_00a46a48ce6b0c1cf2e2141553074b4db5511c2b4aa8fb640e017710c90bea50","title":"URL","path":"/lrsiem/7.22.0/url","children":[]},{"id":"ci_68447744f0a1f7fbc2db80d4d485533f22b98308a880c68b6a4cba2fa99b8f67","title":"User Agent [7.2]","path":"/lrsiem/7.22.0/user-agent-7-2","children":[]},{"id":"ci_e34696cc07b3169b25e8d86b158e2810b85fa1ddd6409101abf0cd65ee1c626e","title":"Version","path":"/lrsiem/7.22.0/version","children":[]}]},{"id":"ci_69234169d815053eecf3b9861a2688f96b4eadfc6bd26fcb636e139ad028d0be","title":"Kbytes/Packets Tab","path":"/lrsiem/7.22.0/kbytes-packets-tab","children":[{"id":"ci_99638c4fc306b3c9768f72661b3c479ae20bc9fbb76c50090e871599fecaae32","title":"[prefix] [Bits/Bytes] [blank/In/Out]","path":"/lrsiem/7.22.0/prefix-bits-bytes-blank-in-out","children":[]},{"id":"ci_f8d5eb7e215a2334422227c1279c683678e1c225f4371c4c0d7a6163e12a3e5c","title":"Packets [Total/In/Out]","path":"/lrsiem/7.22.0/packets-total-in-out","children":[]}]},{"id":"ci_ddc21c581696d14be472f5533bb65abb088a97fbd8a8ab9bd131789f17ecc6a7","title":"Classification Tab","path":"/lrsiem/7.22.0/classification-tab","children":[{"id":"ci_39a66742609f13bee6a3b847b70235584403c03d2d8ca5990de5445013e529e2","title":"CVE [7.2]","path":"/lrsiem/7.22.0/cve-7-2","children":[]},{"id":"ci_6e78399d06fa09295222c808066d03e2f3a7e89554970ac6a99ab6de8f731a05","title":"Severity","path":"/lrsiem/7.22.0/severity","children":[]},{"id":"ci_8104d934438bf648a59f25015d88ce4e12a7d45c33c7940d3dbfbc93fabe2547","title":"Threat ID [7.2]","path":"/lrsiem/7.22.0/threat-id-7-2","children":[]},{"id":"ci_216a913908340c5ab004b28999f57474de8d9d810563ee2d0fa0a401b9d8be2a","title":"Threat Name [7.2]","path":"/lrsiem/7.22.0/threat-name-7-2","children":[]},{"id":"ci_3d516788b4559464352cfadb850c02ef7ab25dae70ce2a08e4e463d577f6bee0","title":"Vendor Info [7.2]","path":"/lrsiem/7.22.0/vendor-info-7-2","children":[]},{"id":"ci_d11a31b8217e85a94dd936afd8a54ebf9fe953ed699515bbc2ff24f290a4dd71","title":"Vendor Message ID","path":"/lrsiem/7.22.0/vendor-message-id","children":[]}]},{"id":"ci_f760b2baddf8dbece1a4351b027c9321f1b2bffc97252f669f54342fdbb01c80","title":"Host Tab","path":"/lrsiem/7.22.0/host-tab","children":[{"id":"ci_8c387d67b602206d0524321340b988bae7168afb35e0ef74940a2296242aa465","title":"DIP/DestinationIP/Impacted IP","path":"/lrsiem/7.22.0/dip-destinationip-impacted-ip","children":[]},{"id":"ci_65d8bbb204ed25988cc878068e9b19cd4ce2faf8e46af6179dbfcf05bdb4aed7","title":"DIPv4","path":"/lrsiem/7.22.0/dipv4","children":[]},{"id":"ci_0052a76e29e06e5b231018dc672b199c54b5257b9cbe8c91c2223ca5832b03f5","title":"DIPv6","path":"/lrsiem/7.22.0/dipv6","children":[]},{"id":"ci_d1402a869a5a39183418ca3bebc7f32f45a1b547faa5a82d03e57cf59f78a0f7","title":"DIPv6E","path":"/lrsiem/7.22.0/dipv6e","children":[]},{"id":"ci_4872823d446e127a806b78ca4964069e21a11e80ed09ff2070b286438331fdc4","title":"Impacted Hostname","path":"/lrsiem/7.22.0/impacted-hostname","children":[]},{"id":"ci_42d8b4a73a6b4cfc2ed80da6c3908f749cc39542e849135f5fdc125037c881ed","title":"Impacted Hostname or IP","path":"/lrsiem/7.22.0/impacted-hostname-or-ip","children":[]},{"id":"ci_fbae384156fc463ecffbab0348abf987a775096d4b1b9cd3ec9a3a69e7a96ece","title":"Impacted Interface","path":"/lrsiem/7.22.0/impacted-interface","children":[]},{"id":"ci_82f9fa9e995bb239dcaadcd967f241700a289808386a03005c3301b60cacd707","title":"Impacted MAC Address","path":"/lrsiem/7.22.0/impacted-mac-address","children":[]},{"id":"ci_fce554202515769b6ed6f9dad9a30ae0d3879eae1ae45cd676eb4b74bbae4526","title":"Impacted NAT IP","path":"/lrsiem/7.22.0/impacted-nat-ip","children":[]},{"id":"ci_cbf76ceba170e6980b9b437178a2e6d60b6565245f7c00f12e055a0b8bf6ee36","title":"IP Address (Origin)","path":"/lrsiem/7.22.0/ip-address-origin","children":[]},{"id":"ci_514c39abafa3152da2181ef4188a4aa2a2ffd857408c64d79cbe111f37e08b51","title":"Origin Hostname","path":"/lrsiem/7.22.0/origin-hostname","children":[]},{"id":"ci_a8ca59c51536b1cb2501acdde3e86fadae84b3481bc2cb9eaca281edfe257671","title":"Origin Hostname or IP","path":"/lrsiem/7.22.0/origin-hostname-or-ip","children":[]},{"id":"ci_f06fa6edd564ba17de637d06d0029f4bf70c2dea4c7d1e0fc35c93ef9d431689","title":"Origin Interface","path":"/lrsiem/7.22.0/origin-interface","children":[]},{"id":"ci_c873ca1c330919d0c85ad33c863642ea483b0a769b511d2b30d69013a44412ca","title":"Origin MAC Address","path":"/lrsiem/7.22.0/origin-mac-address","children":[]},{"id":"ci_c385c4f64c28dcc78434840d26a06013435720315ef151d6529db478ee0c3afa","title":"Origin NAT IP","path":"/lrsiem/7.22.0/origin-nat-ip","children":[]},{"id":"ci_1893ae07d3ad6c35e54b0e191363f3e9df8a770d18e0adab0239e77a188a7592","title":"Serial Number [7.2]","path":"/lrsiem/7.22.0/serial-number-7-2","children":[]},{"id":"ci_ef640f3dde0564a27ec9f62f6ef305823c09e1e6e15f2cc3dfaf0a19e276974d","title":"SIPv4","path":"/lrsiem/7.22.0/sipv4","children":[]},{"id":"ci_67707f7f03a208bdc33e62bb45cd1f97d5500f0d1ea555b968458d9cb7df24d8","title":"SIPv6","path":"/lrsiem/7.22.0/sipv6","children":[]},{"id":"ci_64f038ddcc81d40775ba449d153931241c36c970a26b1c33771fefe1f9ccc985","title":"SIPv6E","path":"/lrsiem/7.22.0/sipv6e","children":[]}]},{"id":"ci_778a7604d9f72f0a316b7e8740a36da22962bc1fd054d5e25c75fdfe3cf2cb62","title":"Identity Tab","path":"/lrsiem/7.22.0/identity-tab","children":[{"id":"ci_e02ababb84afb9625f545958bfdc31248662902917c13f58c0ca8a9f49f0517d","title":"Account > User (Impacted)","path":"/lrsiem/7.22.0/account-user-impacted","children":[]},{"id":"ci_2a80c3f2ed53d992d6257ff67c2e877c1f971eede6cdc802a85641f1c43ccb51","title":"Group","path":"/lrsiem/7.22.0/group","children":[]},{"id":"ci_e2edd8b326acc100e8e61ee92ce9a958c65c48deae344dcc404c183e66b9853d","title":"Login > User (Origin)","path":"/lrsiem/7.22.0/login-user-origin","children":[]},{"id":"ci_92f8c485c1828bf92bb4235ef3d49a4194901f07511ea4eeb43ea7a199b1facc","title":"Recipient","path":"/lrsiem/7.22.0/recipient","children":[]},{"id":"ci_9c8e005a106d938474dba99277336ee6bec6d3d02a97006eae9130e6bccb6a2a","title":"Sender","path":"/lrsiem/7.22.0/sender","children":[]}]},{"id":"ci_8941e03fa3aeca4929dbc4ea6236fae0699273257cd5346bc18b9e13f703d3a0","title":"Location Tab","path":"/lrsiem/7.22.0/location-tab","children":[]},{"id":"ci_960dc99d5b625e88b1a238037a6912ba180bb99ca84582cf6614e9ce4addf00f","title":"Log Tab","path":"/lrsiem/7.22.0/log-tab","children":[]},{"id":"ci_a0df36b56616ff1a706a8fd3d7e39c562c1a3d74551f78d1d03bb3faf2bb9e5a","title":"Network Tab","path":"/lrsiem/7.22.0/network-tab","children":[{"id":"ci_21b44f03f90d5d5513459bd346347616482cb1b107d5eda8bacf1c8db83f1f32","title":"Domain (Origin) [7.4]","path":"/lrsiem/7.22.0/domain-origin-7-4","children":[]},{"id":"ci_4a8ba3e518b07e021daef1b5cee28c67e45c0cb53889b8a74bf53723ffe88610","title":"Domain [7.2] (Domain (Impacted))","path":"/lrsiem/7.22.0/domain-7-2-domain-impacted","children":[]},{"id":"ci_25d18d8c16c0deedabf425370d116d8cbcd98f76e5ce572167c07952c1952816","title":"Impacted NAT Port","path":"/lrsiem/7.22.0/impacted-nat-port","children":[]},{"id":"ci_1c96f93cc36f9f6fcac7e04045e0ff25a13265e1d8d13ef0323420a875908ccf","title":"Impacted Port","path":"/lrsiem/7.22.0/impacted-port","children":[]},{"id":"ci_36f2bc12e5dfadff33bc4f4f3a8b9e0863ba411a5d5724e0d3c239b102fa1877","title":"Origin NAT Port","path":"/lrsiem/7.22.0/origin-nat-port","children":[]},{"id":"ci_f39853d34533ae99c776b7893cd57dd0109298d7f72c350e4d324407b833d9cf","title":"Origin Port","path":"/lrsiem/7.22.0/origin-port","children":[]}]},{"id":"ci_0f87fb4869d96ae57f6d0078380b878435a6ce23fc691179209bd34a35647d70","title":"Other MPE Fields","path":"/lrsiem/7.22.0/other-mpe-fields","children":[{"id":"ci_baaba4d23afebffb9a6b47d484b15602822d611b54e6cb70ae398d7562a43e99","title":"[Tag1-Tag5]","path":"/lrsiem/7.22.0/tag1-tag5","children":[]},{"id":"ci_f1bf6d569daac6239d03c0dead18d7dac818a7f470c7925019165750aae69c77","title":"Items In","path":"/lrsiem/7.22.0/items-in","children":[]},{"id":"ci_34073251fdabd0a264d71ce25548136b780e36306f4134eafec556513b2f1754","title":"Items Out","path":"/lrsiem/7.22.0/items-out","children":[]}]},{"id":"ci_59a29ef62510edf3ec5a2f113d8b013dcfa37f345e8ed902aab1f81770158587","title":"Derived Data","path":"/lrsiem/7.22.0/derived-data","children":[{"id":"ci_d7af7360a51dd98c6eb9cf2a27125107a13792ee9c4648943b8862bff6e42f4c","title":"Identity-Derived Data","path":"/lrsiem/7.22.0/identity-derived-data","children":[]},{"id":"ci_9742b863d574227fc99c5c029e52359c2a0669991376daeec8763b8fc7ec082a","title":"Log-Derived Data","path":"/lrsiem/7.22.0/log-derived-data","children":[]}]}]},{"id":"ci_5bdc8c4c442df0c9f0abe779021bc7b6ec553466d90d540889c649f2b928af8a","title":"Other LogRhythm Applications","path":"/lrsiem/7.22.0/other-logrhythm-applications","children":[{"id":"ci_959941405590d085315832f5040bb6bc4562683bcbbf7db4c30a2ccd7c9fbbb4","title":"Threat Intelligence Service","path":"/lrsiem/7.22.0/threat-intelligence-service","children":[{"id":"ci_7e6921adc122f62764cd51f4558c2624ccaa4fa72f372806e8a0f99d82b9d710","title":"Install and Deploy the Threat Intelligence Service","path":"/lrsiem/7.22.0/install-and-deploy-the-threat-intelligence-service","children":[{"id":"ci_4ba70d6956467b699f201959f8f25af0a39894dffba2240b5fb6602cc02657b9","title":"Run the Threat Intelligence Service Installer","path":"/lrsiem/7.22.0/run-the-threat-intelligence-service-installer","children":[]},{"id":"ci_b2722c0f20bf59b7483167ecb4a1d56336ae4b2a05ca7dcd88663626d362cbce","title":"Modify, Repair, or Remove the Threat Intelligence Service","path":"/lrsiem/7.22.0/modify-repair-or-remove-the-threat-intelligence-service","children":[]},{"id":"ci_0640cf8e372a18a1586fa324822a6f0061437311dcfd1d03d5d9799974564457","title":"Enable and Import the Threat Intelligence Service Modules","path":"/lrsiem/7.22.0/enable-and-import-the-threat-intelligence-service-modules","children":[]},{"id":"ci_8105858be55c1a30c1b944479a1d08773f2fcbe7833ac8d5a1e938b9452a673b","title":"Associate Vendor Lists with LogRhythm Lists","path":"/lrsiem/7.22.0/associate-vendor-lists-with-logrhythm-lists","children":[]},{"id":"ci_b60827a8b979a99ceb34c885a5ca13a60bed0c5a31078c6f0201a35355d446b1","title":"Enable Threat List AIE Rules","path":"/lrsiem/7.22.0/enable-threat-list-aie-rules","children":[]},{"id":"ci_c9a8fadba935b243444feeb34cc6dc77de44c938391513b218f1eb26b5ba9dc7","title":"Start the LogRhythm Threat Intelligence Service","path":"/lrsiem/7.22.0/start-the-logrhythm-threat-intelligence-service","children":[]},{"id":"ci_2cbbcb535be4a9ba4cb64053a808de4182cedc9c062f47daaec0057f7a7ec14d","title":"Vendor Lists","path":"/lrsiem/7.22.0/vendor-lists","children":[{"id":"ci_52f2213c6dc3250c019e0e206ae02f285e7f41b4fef2f3803aea67a93030e706","title":"BrightCloud","path":"/lrsiem/7.22.0/brightcloud","children":[]},{"id":"ci_9037b7e0e43304401116dd72cd8030e03dd760765cd84ab267767ae6f64314e6","title":"CrowdStrike","path":"/lrsiem/7.22.0/crowdstrike","children":[]},{"id":"ci_b20de04fea700c8c643e9eec8b6e397032fee1ccf3dcd3218889617035773444","title":"Cisco AMP Threat Grid","path":"/lrsiem/7.22.0/cisco-amp-threat-grid","children":[]},{"id":"ci_53a10925ee5fb2143b145ff8ff8892ff79138d82f6c52abf771d7ee47c4d6b1c","title":"Symantec","path":"/lrsiem/7.22.0/symantec","children":[]},{"id":"ci_6d044357a0167f0c9e0be2d76684b13a8940b112a170ba26fe19a4c4c73cde7f","title":"Open Source","path":"/lrsiem/7.22.0/open-source","children":[]},{"id":"ci_4db4bbdb8f63b472a4dc960fd31d0492211369a8424eb24560e0eb39ef77ec5a","title":"Custom Providers","path":"/lrsiem/7.22.0/custom-providers","children":[]}]}]},{"id":"ci_76cc4c9306593da5b8ff0542eb4f408d82f1c0d8d44a3c8091860aaf76fc7e30","title":"Threat Intelligence Service User Guide","path":"/lrsiem/7.22.0/threat-intelligence-service-user-guide","children":[{"id":"ci_a00fdfdc51d2000c2b72ced6e21cbe3053db3cae2d9ec117f6d49b669c456a05","title":"Launch the Service Manager","path":"/lrsiem/7.22.0/launch-the-service-manager","children":[]},{"id":"ci_adc97dfc41162de57662f2723bcbdc7983c942a96cc956d7b9984dc8e486fe22","title":"Configure the Connection to LogRhythm","path":"/lrsiem/7.22.0/configure-the-connection-to-logrhythm","children":[]},{"id":"ci_912a490e98acf298a1be84b3c7371ea76655542396e66e3ab6e80719b6afd107","title":"Configure Proxy Settings","path":"/lrsiem/7.22.0/configure-proxy-settings","children":[]},{"id":"ci_4e75c493c3cf5ac255c377983f214adbe1c01b38c7f8796e2c995b96d5c972d1","title":"Configure Vendor Threat Feeds","path":"/lrsiem/7.22.0/configure-vendor-threat-feeds","children":[]},{"id":"ci_aa6f1a8fc03df48e9371199ac5ab1633bcba19da4fe9fde221a6c741e70fecc1","title":"Add a Custom STIX/TAXII Provider","path":"/lrsiem/7.22.0/add-a-custom-stix-taxii-provider","children":[{"id":"ci_41395230c8bd7cbe54e8931767e25de83304a43f7e410c589e561255f6832eb3","title":"Add a STIX Feed in TIS","path":"/lrsiem/7.22.0/add-a-stix-feed-in-tis","children":[]},{"id":"ci_94dc3e62ee29d46153fb6c23add38570ab4ba25745a8d693eb42edb4f4e86549","title":"Configure CustomObjectType in STIX/TAXII Feeds in TIS","path":"/lrsiem/7.22.0/configure-customobjecttype-in-stix-taxii-feeds-in-tis","children":[]}]},{"id":"ci_b867752df23653221f4aa74407bccea70d9284b11c209e1dd8d21f5651c41fe2","title":"Start and Stop the Service","path":"/lrsiem/7.22.0/start-and-stop-the-service","children":[]},{"id":"ci_e0671aa5bd08357517820b8e7788da5d11f7a6c489156dbebb931566ccf076ea","title":"Configure the Threat Intelligence Service Whitelist","path":"/lrsiem/7.22.0/configure-the-threat-intelligence-service-whitelist","children":[]},{"id":"ci_a69e908207bc8cfaef09a422aa26fba94dd32f53ae0e4efaffd24c36ba7d80a9","title":"URL Normalization","path":"/lrsiem/7.22.0/url-normalization","children":[]},{"id":"ci_03da35b20ecb9fa9b0626aeaf107be1d4c9f2a8c395774c18b470f5cbc4ec8cb","title":"Request Response Logging","path":"/lrsiem/7.22.0/request-response-logging","children":[]},{"id":"ci_a1e7c6153cada9a91680590e3baaf1c0210833a442739ce79ba6b91ebd1b8d64","title":"View Log Files","path":"/lrsiem/7.22.0/view-log-files","children":[]},{"id":"ci_9df9eea2b85a73a389a8e8bd27b937895865aa29f37cd1b14b43d98b633c8e93","title":"Troubleshoot the Threat Intelligence Service","path":"/lrsiem/7.22.0/troubleshoot-the-threat-intelligence-service","children":[{"id":"ci_cc414fad861f95dda59a3612d5e1d18ea3feb817390e7e7fa3a323f3b1bdb563","title":"Firewall Blocking Open Source URLs in TIS","path":"/lrsiem/7.22.0/firewall-blocking-open-source-urls-in-tis","children":[]},{"id":"ci_214d9f5997546181ea19133a8f72bfa2f6760e96abfa0c9db882a0b36e4ff5af","title":"Log Files in TIS","path":"/lrsiem/7.22.0/log-files-in-tis","children":[]},{"id":"ci_3125d9ee1057131a272a6e40b856844c04fe43fc464eff6ab447561681fed6fd","title":"Resource Utilization in TIS","path":"/lrsiem/7.22.0/resource-utilization-in-tis","children":[]},{"id":"ci_5d9458c2e8e6981a1290ad51258defcc07e7149e95cded78636566a622b7f04d","title":"Threat Intelligence Service Will Not Start","path":"/lrsiem/7.22.0/threat-intelligence-service-will-not-start","children":[]}]}]}]},{"id":"ci_ab2d64aa246fd07f5067885b91eaa8c442fb9c4b46887eece381a08c9e0a618b","title":"LogRhythm Echo","path":"/lrsiem/7.22.0/logrhythm-echo","children":[{"id":"ci_3e1160319c5b6db705f54834d49e41c1b2e5115f2a38599577e25ad4231c51e0","title":"Install or Upgrade LogRhythm Echo","path":"/lrsiem/7.22.0/install-or-upgrade-logrhythm-echo","children":[]},{"id":"ci_ecb2da9468a2af0ca95f95e92f676a88d66d669b96aa6b1b6c43d4e81b36dc0a","title":"Configure LogRhythm Echo","path":"/lrsiem/7.22.0/configure-logrhythm-echo","children":[]},{"id":"ci_412476fc1021759917f0bdf5557e2b3d35a1c07d81eb831eba712ae4b7ead64e","title":"Manage LogRhythm Echo Use Cases","path":"/lrsiem/7.22.0/manage-logrhythm-echo-use-cases","children":[]},{"id":"ci_761711c53c34010ec38258086ffd5ce6963eae7a8026df3be2b73224cb4bfa70","title":"Run LogRhythm Echo Use Cases","path":"/lrsiem/7.22.0/run-logrhythm-echo-use-cases","children":[]},{"id":"ci_c1fd959b9bc1302c83e4db73c3788d9511398d3cd1e1b9967d46b7b110fe5030","title":"Schedule LogRhythm Echo Use Cases","path":"/lrsiem/7.22.0/schedule-logrhythm-echo-use-cases","children":[]},{"id":"ci_f9fedb81e84cb6c692c2448efe5d03b63d05a5f8524c509f669dc658e2a446a3","title":"LogRhythm Echo API","path":"/lrsiem/7.22.0/logrhythm-echo-api","children":[]},{"id":"ci_5b829347056a8e29b1d65d44a32bd88eb08c570872231a7788e6b40fdca15cea","title":"LogRhythm Echo Troubleshooting","path":"/lrsiem/7.22.0/logrhythm-echo-troubleshooting","children":[]},{"id":"ci_414c638b6ec18c8f8ceebab0b46aaa96d409233072cbcba68053b87129472b30","title":"LogRhythm Echo Use Case DB","path":"/lrsiem/7.22.0/logrhythm-echo-use-case-db","children":[]},{"id":"ci_0c3b0a86a5cd34b50651bd5b7b1c4197458c29ad9724a0816ab95986802b5314","title":"LogRhythm Echo Use Cases and Their AIE Rules, Lists, and SmartResponses","path":"/lrsiem/7.22.0/logrhythm-echo-use-cases-and-their-aie-rules-lists-and-smartresponses","children":[]}]},{"id":"ci_68c4a2d8d7d3fe7f2658a2a8ef063f43ffb940735fbbef2a43f6dd9485db3952","title":"LogRhythm Intelligence","path":"/lrsiem/7.22.0/logrhythm-intelligence","children":[{"id":"ci_283299e0e67e7f8835019030115f8a45f8a28bfc9a954b3be52cd3d041caedd7","title":"LogRhythm Intelligence Threat Summary","path":"/lrsiem/7.22.0/logrhythm-intelligence-threat-summary","children":[]},{"id":"ci_cf055247b34b55a3ab9ab9043c9cf0dd6e8c036b5d570ce48194ec064fd91131","title":"LogRhythm Intelligence Cloud Data Security","path":"/lrsiem/7.22.0/logrhythm-intelligence-cloud-data-security","children":[]}]},{"id":"ci_c11c5dff51c5b2e73a7114228ac9ed891a1d3986ffc5cb45bfdc895f84bf1def","title":"LogRhythm Diagnostics Tool","path":"/lrsiem/7.22.0/logrhythm-diagnostics-tool","children":[{"id":"ci_71aa56dc9bcd2b11f67ac9d3678ee5b6022bf9d4dc7f324b8927dcdc441e7ae6","title":"Install the Diagnostics Agent and Diagnostics Tool","path":"/lrsiem/7.22.0/install-the-diagnostics-agent-and-diagnostics-tool","children":[]},{"id":"ci_1fa11b783c4ec9384aa04e32f5828dec70ebc0ef08725f1e996dcb5ddddfee1a","title":"Configure Collection on the Diagnostics Tool","path":"/lrsiem/7.22.0/configure-collection-on-the-diagnostics-tool","children":[]},{"id":"ci_8bb602844bfadc9621561a84ebee95879308e291a58932250685eb46ca12cb58","title":"Tabs in the Diagnostic Tool","path":"/lrsiem/7.22.0/tabs-in-the-diagnostic-tool","children":[]},{"id":"ci_2dc5668163cec0aaae310c04513252aaaba7d04a9ab396242f3ee0e8b64515c7","title":"Log Files and Data Collected by the Diagnostic Tool","path":"/lrsiem/7.22.0/log-files-and-data-collected-by-the-diagnostic-tool","children":[]},{"id":"ci_a577c5ef3ce1a4bc828ac9ee4ce0f4fd06a3586721d0e5ff40a2bae4b1b7965f","title":"Detailed .zip File Contents From the Diagnostics Tool","path":"/lrsiem/7.22.0/detailed-zip-file-contents-from-the-diagnostics-tool","children":[]}]},{"id":"ci_b4a2a106ecda8cbf683f1a0198d192a9ab64f1cdd287fe0943bad276e6b4b91b","title":"TrueIdentity Sync Client User Guide","path":"/lrsiem/7.22.0/trueidentity-sync-client-user-guide","children":[{"id":"ci_e2997c38a07bad9dcdb18b256988bf1eac182dc8c8e027361908233aa987b230","title":"TrueIdentity Sync Client Release Notes","path":"/lrsiem/7.22.0/trueidentity-sync-client-release-notes","children":[]},{"id":"ci_9d1dc22afb41edfa6d5ec830fce2b4ef3ff9269e1eebc23ef04a03493c0ffb71","title":"Install the TrueIdentity Sync Client","path":"/lrsiem/7.22.0/install-the-trueidentity-sync-client","children":[]},{"id":"ci_60e805f9ea7ee01d63dfef9c1eba2cf7e42b1611c3cb2d3484a2811a77c28ce9","title":"Create Custom Certificates","path":"/lrsiem/7.22.0/create-custom-certificates","children":[]},{"id":"ci_c6f5675edccaf5933934484d980b77690f987e51c69120d58bd11cc34d4440b1","title":"Generate LR API Token","path":"/lrsiem/7.22.0/generate-lr-api-token","children":[]},{"id":"ci_a71ddca93679496d9c99e7561b434b43cd98cb45513411d9993fe30aeef32603","title":"Launch the TrueIdentity Sync Client","path":"/lrsiem/7.22.0/launch-the-trueidentity-sync-client","children":[]},{"id":"ci_b51bca671afef5d333652160566b114f25f91411fc3a45d758e68fa5621aa065","title":"Add a TrueIdentity Sync Job","path":"/lrsiem/7.22.0/add-a-trueidentity-sync-job","children":[]},{"id":"ci_603053ad510a7816067acc2110f9835411fcf254e90d214be7cd0fbd71eff73c","title":"View Synchronized TrueIdentities","path":"/lrsiem/7.22.0/view-synchronized-trueidentities","children":[]},{"id":"ci_9dfbdad64482e6174882543dd8c08e92f1f273081d5961c60b3fa7c4e42a534e","title":"Troubleshoot the TrueIdentity Sync Client","path":"/lrsiem/7.22.0/troubleshoot-the-trueidentity-sync-client","children":[]}]},{"id":"ci_8398b193d3aa50f287cce85aff317ac2055411208f1f0fd271d07589f6bd6e10","title":"Using Kibana with LogRhythm SIEM","path":"/lrsiem/7.22.0/using-kibana-with-logrhythm-siem","children":[]},{"id":"ci_70d90e8940f09d30da0c1e593d612daf3e559d82d9622b63595f40e4315230df","title":"DX Upgrade Checker","path":"/lrsiem/7.22.0/dx-upgrade-checker","children":[]}]},{"id":"ci_669e613cb10b61d232690273ffbcb3c850623419417936f0a3c16878f771c88e","title":"Understand the LogRhythm Architecture","path":"/lrsiem/7.22.0/understand-the-logrhythm-architecture","children":[{"id":"ci_7e8fbf807cdf0c573d9d78a0907f690b7af5c7ddcb06a820a0b4e08b0a204168","title":"Licensing","path":"/lrsiem/7.22.0/licensing","children":[]},{"id":"ci_3fcda8822f6907954699c35b92b754a89fbdd60e838da07d45124f62b58ee38e","title":"Log Processing","path":"/lrsiem/7.22.0/log-processing","children":[{"id":"ci_e66674f7b26d9881d2c3393a4859901dc5abad9770a3290d398e8c0353fb8b0e","title":"Audit Classifications","path":"/lrsiem/7.22.0/audit-classifications","children":[]},{"id":"ci_6b243655c763c8393128e0fe9114b522603f7ea4a2f0200229fa11cd60f3ebfb","title":"Configuration and Log Processing","path":"/lrsiem/7.22.0/configuration-and-log-processing","children":[]},{"id":"ci_203df3667117b522c146c65c7bd48d8a4caf80aa60d2534e171e7d32e89f2d34","title":"Operations Classifications","path":"/lrsiem/7.22.0/operations-classifications","children":[]},{"id":"ci_c86088677148a6e14ba011ff142e689a57c2eea0ec6ae9c6e12ffd32de59f519","title":"Security Classifications","path":"/lrsiem/7.22.0/security-classifications","children":[]}]},{"id":"ci_f33f1cef8b2677428373cae468fc8c1fab8e95d9a20e9256f811d3806738c2e9","title":"LogRhythm SIEM Databases","path":"/lrsiem/7.22.0/logrhythm-siem-databases","children":[]},{"id":"ci_bf5ebd8882f5949babde7bb12e79742562a3a5aaaa4115a1fbdf7b1a6cc77306","title":"Logs, Events, and Alarms","path":"/lrsiem/7.22.0/logs-events-and-alarms","children":[]},{"id":"ci_a82d4c0ca10616c70768bab4f13b632ca128617f7b528405057fb367daf63c06","title":"Networking and Communication","path":"/lrsiem/7.22.0/networking-and-communication","children":[]},{"id":"ci_9b863df41d48868e93e825b19875473a8f28f519246dec2b74e70f8d9ebd4f36","title":"Component Reference","path":"/lrsiem/7.22.0/component-reference","children":[]}]},{"id":"ci_3da20a165b91d0d2ae19005fb517abbd63bea3f05af46eecc63ebf7726d4b982","title":"Find More Information","path":"/lrsiem/7.22.0/find-more-information","children":[{"id":"ci_56e7208e368237ccff313445a981679f86076dc9fb0af7ea53b1cca59eea5495","title":"Customer Support Guide","path":"/lrsiem/7.22.0/customer-support-guide","children":[]},{"id":"ci_ed2e91d43a71bc1a5971ba09be07f396efb4f0c546e4a1ae15f432179ba22771","title":"End of Life Policies for Software and Hardware","path":"/lrsiem/7.22.0/end-of-life-policies-for-software-and-hardware","children":[]},{"id":"ci_a3ab6f9b8bfdf30fa800ecd67626f28bc77afc836e0a029595b8afb6cffa11c4","title":"Glossary of LogRhythm Products and Components","path":"/lrsiem/7.22.0/glossary-of-logrhythm-products-and-components","children":[]},{"id":"ci_d608728b711b4eb4875fffa25ca64e1cfc540e1829579505ef9a4f9ddfe5048a","title":"Open Source License Acknowledgements","path":"/lrsiem/7.22.0/open-source-license-acknowledgements","children":[]},{"id":"ci_3e9de8a4f6a1e5e4c68c8d090baac010d70fb57e75aa84512083eb4efb81e2af","title":"Upgrade FAQ and Determining the Correct Upgrade Path","path":"/lrsiem/7.22.0/upgrade-faq-and-determining-the-correct-upgrade-path","children":[]}]},{"id":"ci_e1d43688bebd43cb92cfd7a3cc5dde189a817748b90223d80c420197fbf3c7b0","title":"Download PDFs","path":"/lrsiem/7.22.0/download-pdfs","children":[]}]