[{"id":"ci_2b62ff1c788693577b59f979a96af0570a9d9128cc8d61d60c8d44e6a3e99eaa","title":"LogRhythm Release Notes","path":"/lrsiem/7.23.0/logrhythm-release-notes","children":[{"id":"ci_2cfc6875984af835f9bdca8adf5d058d1ba19a06ec579e7cd277688661f2a244","title":"7.23.0.119 Release Notes - 29 January 2026","path":"/lrsiem/7.23.0/7-23-0-119-release-notes-29-january-2026","children":[]},{"id":"ci_9f2ff0f1760a2ecdebb9f96211f06be826f1a48f626499efd23d35fb9f22aeb7","title":"7.23.0 GA Release Notes - 6 January 2026","path":"/lrsiem/7.23.0/7-23-0-ga-release-notes-6-january-2026","children":[]},{"id":"ci_39c22200dfcbd679c6ce8e646b5389bc79ccf906b0f91d8c10ffbaa57fa1deb9","title":"7.22.0 GA Release Notes - 1 October 2025","path":"/lrsiem/7.23.0/7-22-0-ga-release-notes-1-october-2025","children":[]},{"id":"ci_50f3732cf6633139082ec0815ab2d4d316d0e72300c0ddbaebe4d0039c242c1c","title":"7.21.0.97 Release Notes - 6 August 2025","path":"/lrsiem/7.23.0/7-21-0-97-release-notes-6-august-2025","children":[]},{"id":"ci_425553ceb3676788fd773b7974e36aba7d56405be33eafcbd94cb6fad63f4dd4","title":"7.21.0 GA Release Notes - 1 July 2025","path":"/lrsiem/7.23.0/7-21-0-ga-release-notes-1-july-2025","children":[]},{"id":"ci_4c5033e715aa36d6ef20f8b3e9539e7acbde9dc0b637fde53bebd30b0ca3781a","title":"7.20.0.71 Release Notes - 23 April 2025","path":"/lrsiem/7.23.0/7-20-0-71-release-notes-23-april-2025","children":[]},{"id":"ci_c71382b198e5a338f20df8429921a0a5953297a307ef15838c93d6a8fc9e3694","title":"7.20.0 GA Release Notes - 1 April 2025","path":"/lrsiem/7.23.0/7-20-0-ga-release-notes-1-april-2025","children":[]},{"id":"ci_77c2fa0db9b8fda295724d24ec2f387cd3b7b378d922e3ab45a87adadc57b412","title":"7.19.0.54 Release Notes - 3 February 2025","path":"/lrsiem/7.23.0/7-19-0-54-release-notes-3-february-2025","children":[]},{"id":"ci_fbaaccb62753414f222b66938a3ab9a3686a8daebcb802b7d41522bcd23de318","title":"7.19.0 GA Release Notes - 7 January 2025","path":"/lrsiem/7.23.0/7-19-0-ga-release-notes-7-january-2025","children":[]},{"id":"ci_84c0a2f308923c31f1601cfb5fa0badb6873cc7a1a066b488395012821d7575f","title":"7.18.0.48 Release Notes - 7 November 2024","path":"/lrsiem/7.23.0/7-18-0-48-release-notes-7-november-2024","children":[]},{"id":"ci_18c6a73c41a4320d827cac8c612114535556699d66ac321f6d5ac5e9ffae5a49","title":"7.18.0.46 Release Notes - 31 October 2024","path":"/lrsiem/7.23.0/7-18-0-46-release-notes-31-october-2024","children":[]},{"id":"ci_e4eb837a30d52799f4142b33daaa116495b6cd8b91c4064eb911361a67b1e0da","title":"7.18.0 GA Release Notes - 1 October 2024","path":"/lrsiem/7.23.0/7-18-0-ga-release-notes-1-october-2024","children":[]},{"id":"ci_738a1a6c5168a0c43303d4b3d5140190b3da05d2d7c62af4ed8e2a8e6518c99c","title":"7.17.0.55 Release Notes - 12 August 2024","path":"/lrsiem/7.23.0/7-17-0-55-release-notes-12-august-2024","children":[]},{"id":"ci_58b498fb608cf066c5cd144a74ef019593b6e3965c63e6f997e26b281d570c69","title":"7.17.0 GA Release Notes - 1 July 2024","path":"/lrsiem/7.23.0/7-17-0-ga-release-notes-1-july-2024","children":[]},{"id":"ci_3acfbd8cbe416cf3d48fd1016e5e79f836dff6d3f7734c7c35b3a5fa6e91a4b7","title":"7.16.0.45 Release Notes - 24 April 2024","path":"/lrsiem/7.23.0/7-16-0-45-release-notes-24-april-2024","children":[]},{"id":"ci_cca84d3bc1c75c7a4a08820537da87871760f6e2df4a1f5a964e30b95583b91f","title":"7.16.0 GA Release Notes - 1 April 2024","path":"/lrsiem/7.23.0/7-16-0-ga-release-notes-1-april-2024","children":[]},{"id":"ci_9cfd006edc8960487b09a315271fe9c39fbc9b282809a20e17847219249e1399","title":"7.15.0.64 Release Notes - 5 February 2024","path":"/lrsiem/7.23.0/7-15-0-64-release-notes-5-february-2024","children":[]},{"id":"ci_6bf473be14353e97f458b6fb16fbc375204bf83bc2ad5d74e1854b83d811df41","title":"7.15.0 GA Release Notes - 4 January 2024","path":"/lrsiem/7.23.0/7-15-0-ga-release-notes-4-january-2024","children":[]}]},{"id":"ci_3f5208da658b2313a98a0ac58854d81f82e00b3c70a006d5d54554fae9315191","title":"Get Started with LogRhythm SIEM","path":"/lrsiem/7.23.0/get-started-with-logrhythm-siem","children":[{"id":"ci_be887306f9866b53c33881a0f27bf0dd0382e755afa1e25bc76c8c352fa71b68","title":"Log in to the Client Console","path":"/lrsiem/7.23.0/log-in-to-the-client-console","children":[]},{"id":"ci_85efd383fe6ca01f019e63e88704a5bd815821d659eb5f69b046c3ca1cc329c2","title":"Complete the New Deployment Wizard","path":"/lrsiem/7.23.0/complete-the-new-deployment-wizard","children":[]},{"id":"ci_b75c015917bee2b6823c36d068405186148d0c746d2ee93577a55998607a75a2","title":"Assign LogRhythm Licenses","path":"/lrsiem/7.23.0/assign-logrhythm-licenses","children":[]},{"id":"ci_7dab356c35f5731bff9aab270b54e89241fc0198cebeb6118161452a4ad23d95","title":"Log in to the Web Console","path":"/lrsiem/7.23.0/log-in-to-the-web-console","children":[]},{"id":"ci_5bdd511638f996939b846e48d6cb7082612cbe0f59f648c34b47b5e6f2c18f6f","title":"Verify the Web Console Connection Status","path":"/lrsiem/7.23.0/verify-the-web-console-connection-status","children":[]},{"id":"ci_a988bcfc1b1ba013f2ee37a576b4ab2bdefc7439cad1af3bdfc01127b9849714","title":"Configure NetMon to Integrate with the Web Console","path":"/lrsiem/7.23.0/configure-netmon-to-integrate-with-the-web-console","children":[]}]},{"id":"ci_eaa658e20ba471c9bc53a51e32198d97b316dadca468384428840986c24e3ca9","title":"Client Console Administrator Guide","path":"/lrsiem/7.23.0/client-console-administrator-guide","children":[{"id":"ci_beaabe45b6d2906e28bf25c46ed83a9769e367e6eab8308c841a31eea4be0307","title":"Advanced Intelligence Engine","path":"/lrsiem/7.23.0/advanced-intelligence-engine","children":[{"id":"ci_6fa39e1697678696f2b4183ba87553c05ac6d515051f1f1565c8ef9b12fcd6e9","title":"Add AI Engine Servers","path":"/lrsiem/7.23.0/add-ai-engine-servers","children":[]},{"id":"ci_ddaee1cab95955cfa025dbafa37805b33c592b3171ce0a31508b9c5a760c1ffd","title":"Apply Recommended Values to an AI Engine Server","path":"/lrsiem/7.23.0/apply-recommended-values-to-an-ai-engine-server","children":[]},{"id":"ci_316488a60afc4b29a0ba4910548e4e683e8de7dc1ef24dc90a4cc741cd332c7a","title":"Create New AI Engine Rules","path":"/lrsiem/7.23.0/create-new-ai-engine-rules","children":[]},{"id":"ci_bbe833386c21a8c5bd0aa41f312d6969dc55e8cd37bc53bbe970b6b7310fb8a6","title":"Define AI Engine Linked Data Block Relationships","path":"/lrsiem/7.23.0/define-ai-engine-linked-data-block-relationships","children":[]},{"id":"ci_458d06bb544c48ff93cdcf7cbab91af728afbc7c4d3f91c6d4a7fa6251405809","title":"Define AI Engine Rule Block Relationships","path":"/lrsiem/7.23.0/define-ai-engine-rule-block-relationships","children":[]},{"id":"ci_ccbf8315a4729c812df0fd5b10821098d7784c5bf3ec29e65507f1484da2b62f","title":"Drill Down on AI Engine Results","path":"/lrsiem/7.23.0/drill-down-on-ai-engine-results","children":[]},{"id":"ci_72eb1f80a597097c96fd2fd2f2aa4ac6311fc41a32b8ffa702655909bdb9a34a","title":"Import or Export AI Engine Rules from the Grid","path":"/lrsiem/7.23.0/import-or-export-ai-engine-rules-from-the-grid","children":[]},{"id":"ci_e336e65ee33e9f81a7ec5ad24a8f84c7b1cdf6ae58fb83062ae496c2b49e0cab","title":"Modify AI Engine Rules","path":"/lrsiem/7.23.0/modify-ai-engine-rules","children":[]},{"id":"ci_3d8dd6131c71829fe8758364bded6682503dee4f546c12e1c8b9676df0f4ab45","title":"Restart AI Engine Servers","path":"/lrsiem/7.23.0/restart-ai-engine-servers","children":[]},{"id":"ci_f5482723be12624be2a76ca4ecf55823bd2f84410a8f68a07a4f2371976bdf13","title":"Revert an AI Engine Server to a Previous Configuration","path":"/lrsiem/7.23.0/revert-an-ai-engine-server-to-a-previous-configuration","children":[]},{"id":"ci_a872d461a001c55113af26e855cd7569b5eddd8828990ba0033715656af26872","title":"Update the IP Address of an AI Engine","path":"/lrsiem/7.23.0/update-the-ip-address-of-an-ai-engine","children":[]},{"id":"ci_26fc304538e3f6c45cae756c228f9f637df8c79aec0564cfcc7fd2d97eab6b55","title":"Use AI Engine Rule Sets","path":"/lrsiem/7.23.0/use-ai-engine-rule-sets","children":[]},{"id":"ci_8cbf010d48c32ac83015eb1af7febe72ecc070e71f6671ba4286573f237c4970","title":"Use AI Engine Workloads","path":"/lrsiem/7.23.0/use-ai-engine-workloads","children":[]},{"id":"ci_08fb0e494f23baf65516bcb7f45dc5ae598527f4a11121bad7afaf4c8e61c894","title":"Use Saved AI Engine Filters","path":"/lrsiem/7.23.0/use-saved-ai-engine-filters","children":[]},{"id":"ci_cd60f4b4d5d508c095f97a8002929c173c06a46fb89e2ca06cfcb002206d0f68","title":"Use the AI Engine Local Configuration Manager","path":"/lrsiem/7.23.0/use-the-ai-engine-local-configuration-manager","children":[]},{"id":"ci_029112efd1c7a36a2ff6ce598c166f1b791c7c6fb11eca8f08de8e05d9f72924","title":"View AI Engine Generated Alarms","path":"/lrsiem/7.23.0/view-ai-engine-generated-alarms","children":[]},{"id":"ci_c0e0cdea4a54e4928b7c3637aa162b2010c1a9cb9ede0eb3e5a8e3ded1724753","title":"View AI Engine Rules","path":"/lrsiem/7.23.0/view-ai-engine-rules","children":[]},{"id":"ci_7d0cb411de48fd3f570b5c1077db8f1c64b6c2cfa9ee9c7986eba7ef43ab565f","title":"Work with Existing AI Engine Rules","path":"/lrsiem/7.23.0/work-with-existing-ai-engine-rules","children":[]},{"id":"ci_606cbe26d0131828bc6c941d4002b585d9ca300d122015c7f3260c6d90d70e12","title":"Configure the Advanced Intelligence Engine","path":"/lrsiem/7.23.0/configure-the-advanced-intelligence-engine","children":[]}]},{"id":"ci_3b7292b25d435fd2346bc9a847656eec41bf8b6df886cdc50a490007d57d2310","title":"Alarm Rules","path":"/lrsiem/7.23.0/alarm-rules","children":[{"id":"ci_9113229d8b9850bceea023dfd4dd284801660c276381290f3a1b8ef83285c520","title":"Alarm Notification Policies","path":"/lrsiem/7.23.0/alarm-notification-policies","children":[{"id":"ci_d60997a94e43fa2accaedcc29b07a65fbe804ccaeabe27fcfe8211fb61f5b6cb","title":"Create Group Notifications for Alarms","path":"/lrsiem/7.23.0/create-group-notifications-for-alarms","children":[]},{"id":"ci_01605cc86f520b17f69e0889dab2c649807a2c6782434f3fd1e32449d6103cfd","title":"Create New Email Alarm Notification Policies","path":"/lrsiem/7.23.0/create-new-email-alarm-notification-policies","children":[]},{"id":"ci_035e8550d5cc0e42036188bef33488369c3637c123f811cadc304a71f7012b09","title":"Create New SNMP Alarm Notification Policies","path":"/lrsiem/7.23.0/create-new-snmp-alarm-notification-policies","children":[]},{"id":"ci_3f9cd06704a5166f1a2551ffc93c3169250bcb597bc3318a7a694a11b3a0fde8","title":"Create New Text File Alarm Notification Policies","path":"/lrsiem/7.23.0/create-new-text-file-alarm-notification-policies","children":[]},{"id":"ci_d174ae8ced8a2dfa3bd410ca717a41cb401745c4ef89f385522590154186ce99","title":"Define a Text File Notification Policy","path":"/lrsiem/7.23.0/define-a-text-file-notification-policy","children":[]}]},{"id":"ci_d701b5426dd03f2e7c452384827b911ce6a93f2a2c6e45faa612556f34c4dab4","title":"Create Alarm Rules","path":"/lrsiem/7.23.0/create-alarm-rules","children":[]},{"id":"ci_f40b9410e5fdd1ddafac58645920b00edc8f695f735b5c86982c43447bd05ee3","title":"Create Alarm Rules for Known Logs","path":"/lrsiem/7.23.0/create-alarm-rules-for-known-logs","children":[]},{"id":"ci_832666f58189096c679e4e033d469e57afa4d59a7a0f679db8d4ea1f9486527b","title":"Enable and Disable Alarm Rules","path":"/lrsiem/7.23.0/enable-and-disable-alarm-rules","children":[]},{"id":"ci_7837710b3af0d1f3edf472b3815f2ba45cfe52bc9a18758fc42965bf3cef7d62","title":"Modify Alarm Rule Notifications in Batch","path":"/lrsiem/7.23.0/modify-alarm-rule-notifications-in-batch","children":[]},{"id":"ci_21e79dc0a60fcb2946a8a0de4c0a4a869793c2fb900945bae7f6c488097574cb","title":"Modify Alarm Rules","path":"/lrsiem/7.23.0/modify-alarm-rules","children":[]},{"id":"ci_7614a8dfa44a8d35d99dc3d12cdc0c7c7edde048b7b813eb2cafad7e5f55cccf","title":"Retire or Activate Alarm Rules","path":"/lrsiem/7.23.0/retire-or-activate-alarm-rules","children":[]}]},{"id":"ci_5f464f17f8421077cbc26369f7894863e4b90e68b6e39322e8576ab17d9287d4","title":"Automatic Host Contextualization","path":"/lrsiem/7.23.0/automatic-host-contextualization","children":[{"id":"ci_734eb53fc7b76b6432c3e500b7dbdd9dda1d2e57342eb79725b7f7e181c60493","title":"Disable Automatic Host Contextualization","path":"/lrsiem/7.23.0/disable-automatic-host-contextualization","children":[]},{"id":"ci_a78dcf939a53369435a368c434e7b19084c4ffd79fb4b57511581edd96a8151c","title":"Map Ports","path":"/lrsiem/7.23.0/map-ports","children":[]}]},{"id":"ci_7c875fd15193754296a492231a5003fc7e0243c175d0e3b6eaee0b4f42380b4b","title":"Data Archives and Restoration","path":"/lrsiem/7.23.0/data-archives-and-restoration","children":[{"id":"ci_82082d3fcdfd81414f30310c629c9c59f67fc86d4215073767876cdaedd1d2bc","title":"Add a Data Processor to Restore Archives","path":"/lrsiem/7.23.0/add-a-data-processor-to-restore-archives","children":[]},{"id":"ci_9c07cc3be9bb8a2d99e1fb0457cae2a8d2903f6f2d41f8dd11935fffcadfa927","title":"Backup and Recovery Procedures","path":"/lrsiem/7.23.0/backup-and-recovery-procedures","children":[{"id":"ci_e7c5fa65f08a9b450ac32624bca6123d1d244b08951198fc1b0e2b29f554eb6e","title":"Back Up LogRhythm Archives","path":"/lrsiem/7.23.0/back-up-logrhythm-archives","children":[]},{"id":"ci_13ec76f183b50bf428bb00b1cc98d6e950263efa85e03dd637c74a0de16d0cdc","title":"Configure Automated Platform Manager Database Backups","path":"/lrsiem/7.23.0/configure-automated-platform-manager-database-backups","children":[]},{"id":"ci_bc12d698cf6c1136a4a82911a3e6f667a9aec09ef43a33f87cfc0b08e193d277","title":"Perform a Manual Platform Manager Backup","path":"/lrsiem/7.23.0/perform-a-manual-platform-manager-backup","children":[]},{"id":"ci_0da40ced827c297ab23af7c28949216e2f64a4e58008b839ce945f0fc181942d","title":"Restore From a Database Backup","path":"/lrsiem/7.23.0/restore-from-a-database-backup","children":[]},{"id":"ci_1f9f0378a4105f137fd28b9e3b1b8d34f3b1a35273ed5e0b92e1c92233583ece","title":"Restore Service State","path":"/lrsiem/7.23.0/restore-service-state","children":[]},{"id":"ci_39c70cf43bb4b2cd8a7ac38d6e787279f0e41687e031d1de4a48a0e255e3c271","title":"Use a Dark Spare Backup Appliance","path":"/lrsiem/7.23.0/use-a-dark-spare-backup-appliance","children":[]}]},{"id":"ci_46b7b99a6461ffae7be5a26360995147c5c614768db0ffbddb5de8679851f101","title":"Configure Object Access Auditing for LogRhythm Archive Files","path":"/lrsiem/7.23.0/configure-object-access-auditing-for-logrhythm-archive-files","children":[]},{"id":"ci_2d79819a75f3182294877a5ec901e9aa984e5f0188af6a5543ccffb9c0f55c28","title":"Restore Platform Managers","path":"/lrsiem/7.23.0/restore-platform-managers","children":[]},{"id":"ci_ee4efc6be73e4b63bf37ac2317b14594fb0625d74726138bf640ab6b236a1cde","title":"SecondLook","path":"/lrsiem/7.23.0/secondlook","children":[{"id":"ci_e7624bdc5a7fcb6b2e95c5d3b7764daa694cae796021e71da54abb5a7b32cf99","title":"Run a Saved SecondLook Restore","path":"/lrsiem/7.23.0/run-a-saved-secondlook-restore","children":[]},{"id":"ci_4a1661963ada0bfdaf3e90315e4a97584199e22f27a5fd7bfaf42ebee700cf65","title":"Create a SecondLook Restore","path":"/lrsiem/7.23.0/create-a-secondlook-restore","children":[]}]},{"id":"ci_f7acc63c85011f2074d6d122d6de4e095a5689ed77241262a4adacebb1c9cc9d","title":"Use Intelligent Indexing","path":"/lrsiem/7.23.0/use-intelligent-indexing","children":[]},{"id":"ci_50354d0b5bb02c19409ab74d03d8f0d98f11a26acf013bec4fa7b9dda7a724b1","title":"Change Archive Location","path":"/lrsiem/7.23.0/change-archive-location","children":[]}]},{"id":"ci_99d9e602ef4f97447cd45901a34ad99cf32f43504877fa6ccf62df8a433bbf23","title":"Data Indexer","path":"/lrsiem/7.23.0/data-indexer","children":[{"id":"ci_384dc76b02df99c5fd138e2125a211c60769d0f922e7270e66393f1145e9934b","title":"Add a Data Indexer Node","path":"/lrsiem/7.23.0/add-a-data-indexer-node","children":[]},{"id":"ci_9a89358ae89c4b1465b3a7b6eb0e97e0416a07d2076d531e507d0712ecbd48aa","title":"Configure the Data Indexer","path":"/lrsiem/7.23.0/configure-the-data-indexer","children":[]},{"id":"ci_655dee6c926275c838807871ff7b858b5e7a2abeb7c86bca41bb0a048fd2820e","title":"Apply System Updates to a Data Indexer","path":"/lrsiem/7.23.0/apply-system-updates-to-a-data-indexer","children":[]}]},{"id":"ci_2499ba87e67b4cd846bfd0376a09da6d94fdea4162ffd82a45228a4401a90b04","title":"Data Processor","path":"/lrsiem/7.23.0/data-processor","children":[{"id":"ci_c0b12cf5cc833333fddd76fd40b5887570a6f7edf7abdc40f3eb6bb39553a847","title":"Add a Data Processor","path":"/lrsiem/7.23.0/add-a-data-processor","children":[]},{"id":"ci_5925f2b55d1e40cf232e3f3489b9d7442a6c052af2965d047127f4e5d5efdb0e","title":"Apply Recommended Data Processor Values","path":"/lrsiem/7.23.0/apply-recommended-data-processor-values","children":[]},{"id":"ci_e8fe3f1351c6a669acba6423a60627a866e6105c328e37f75af4f6bd816de8ed","title":"Configure a Data Processor to Duplicate Data Indexer Logs","path":"/lrsiem/7.23.0/configure-a-data-processor-to-duplicate-data-indexer-logs","children":[]},{"id":"ci_9e309a181cd1675846a605a62ca8d247adbfa47c6ae693cc9895e6dd62e22413","title":"Configure the Mediator for Automatic Startup","path":"/lrsiem/7.23.0/configure-the-mediator-for-automatic-startup","children":[]},{"id":"ci_0ff344ec4dfa5dcf74795b80c7cd57fb744c749a855127d5f15e5e8084ab87f7","title":"Create a Custom Certificate for Communication Between the Data Processor and AI Engine","path":"/lrsiem/7.23.0/create-a-custom-certificate-for-communication-between-the-data-processor-and-ai-engine","children":[]},{"id":"ci_121b4107da4effda8e036b855ea498e41845a4a73fed2404117354ef002f9e2f","title":"TrueIdentity Entity Segregation","path":"/lrsiem/7.23.0/trueidentity-entity-segregation","children":[]},{"id":"ci_8f09d15c4c9fe6a1d1861469cf5d8b16277b4d7de4c938434ded3139edb8f687","title":"Filter LogRhythm Diagnostic Events","path":"/lrsiem/7.23.0/filter-logrhythm-diagnostic-events","children":[]},{"id":"ci_faf6d662cb33b7bb5d0d7927c85c405ed75c3c41de2341e50dbe66ea8ccc99fe","title":"Modify Data Processor Advanced Properties","path":"/lrsiem/7.23.0/modify-data-processor-advanced-properties","children":[]},{"id":"ci_33f056758aa2cffc2ea4bdc5169adc21a62080797231603a7eb9bc8bf830b956","title":"Modify Data Processor Basic Properties","path":"/lrsiem/7.23.0/modify-data-processor-basic-properties","children":[]},{"id":"ci_63351e0653a2426e3939ab1171a72f158da76b47cd901f24df2acc7ced39cbf1","title":"Retire a Data Processor","path":"/lrsiem/7.23.0/retire-a-data-processor","children":[]},{"id":"ci_e609dd66b035e6f8a4fb97f60ff39554603edea56a6317e63c8ac175d2abedf2","title":"Revert to a Previous Data Processor Configuration","path":"/lrsiem/7.23.0/revert-to-a-previous-data-processor-configuration","children":[]},{"id":"ci_acf63d9b04725272fa5b7107a8a81a2106d483ee2445df521a128425c28bea11","title":"Set Data Processor Messages Per Second Value","path":"/lrsiem/7.23.0/set-data-processor-messages-per-second-value","children":[]},{"id":"ci_0888bf4aea31edbbf9d484bdf7491596d18cd00fe174edd0891643308805e014","title":"Start, Stop, and Restart Data Processor Services","path":"/lrsiem/7.23.0/start-stop-and-restart-data-processor-services","children":[]},{"id":"ci_accb58f7340c9e8a7b1d1a9c5d4b736bf088cacf53f4baf031832bc630e2a0e6","title":"Throttle the Mediator","path":"/lrsiem/7.23.0/throttle-the-mediator","children":[]},{"id":"ci_0f9cd59e41d54c4232b1909ca5f570300bef7b9d626deb89a3b06b88deef9202","title":"Update the IP Address of a Data Processor","path":"/lrsiem/7.23.0/update-the-ip-address-of-a-data-processor","children":[]},{"id":"ci_5fb1c9f122eadf808bca4b596c5c684b1fec47c9e65e918ba729ccebd96e3b51","title":"Use the Data Processor Configuration Manager","path":"/lrsiem/7.23.0/use-the-data-processor-configuration-manager","children":[]}]},{"id":"ci_3c90ac744484b456cbd8488c045d735c96405651cf60499aa47a0dcda65b991f","title":"Deployment Health","path":"/lrsiem/7.23.0/deployment-health","children":[{"id":"ci_b567ce2fc19e8719a7a413c818df97727bcad2e8f0c1ed2b8bf7f8f7074efd1b","title":"Centralized Service Metrics","path":"/lrsiem/7.23.0/centralized-service-metrics","children":[{"id":"ci_5788c2a662ffc10b4845346fd17a4629862ff2a312b7cd854d5db506e072298d","title":"Install and Work With Centralized Service Metrics","path":"/lrsiem/7.23.0/install-and-work-with-centralized-service-metrics","children":[]},{"id":"ci_966c777c4d387a8a2eddedf6c4de424106e009788ac8d57dc28fe0eaab22bf5e","title":"Troubleshoot Centralized Service Metrics","path":"/lrsiem/7.23.0/troubleshoot-centralized-service-metrics","children":[]}]},{"id":"ci_075e8d8e1abac05b63fb778f95af77e4d45672f7d1e575b88981d4a0ebcd030f","title":"Deployment Monitor","path":"/lrsiem/7.23.0/deployment-monitor","children":[]},{"id":"ci_99764235794edef4beb5d2d8c08a220e3b07a4ddd76235bde339706669c2d70a","title":"Log Processing Reports","path":"/lrsiem/7.23.0/log-processing-reports","children":[{"id":"ci_2cedfe067670aac91c59682b1f624b97e2634f089015d7315dce76ea6af5c94e","title":"LPS Detail Report","path":"/lrsiem/7.23.0/lps-detail-report","children":[]},{"id":"ci_a4209ebe40c13d86ced4ca4cb04316c5a2731e826ae02ba7a718cdeac41b65d6","title":"LPS Policy Sorting Stats Report","path":"/lrsiem/7.23.0/lps-policy-sorting-stats-report","children":[]}]},{"id":"ci_563dd4107ad47561f7b14464400e6e20b0f434027526281722f6bde2101161a5","title":"Performance Counters","path":"/lrsiem/7.23.0/performance-counters","children":[{"id":"ci_550a186b9eaa7104ca4e7c3a718582b25126a8b2eeff5c0b11b7442164e36301","title":"Performance Counters—LR AI Engine Communication Manager","path":"/lrsiem/7.23.0/performance-counterslr-ai-engine-communication-manager","children":[]},{"id":"ci_70b3aa13e7dd317c641e956d97831b77f42d722165cc07638c1528c4c13bc142","title":"Performance Counters—LR AI Engine Data Provider","path":"/lrsiem/7.23.0/performance-counterslr-ai-engine-data-provider","children":[]},{"id":"ci_b99f49760bf8a4bbeeb9e7b6109d679c246989a8dbce4d8eeb83e701cbbd9642","title":"Performance Counters—LR AI Engine Server","path":"/lrsiem/7.23.0/performance-counterslr-ai-engine-server","children":[]},{"id":"ci_bc2ad00d1ede1e5df6fe828a4367bdd3ffabbb101765accfbefefd37fedb9161","title":"Performance Counters—LR Alarming and Response Manager","path":"/lrsiem/7.23.0/performance-counterslr-alarming-and-response-manager","children":[]},{"id":"ci_473366a6fa7d556fa9a54fe09ce52b748e486b93a0d432fdee6ffdad11392012","title":"Performance Counters—LR Mediator, Log Distribution Services","path":"/lrsiem/7.23.0/performance-counterslr-mediator-log-distribution-services","children":[]},{"id":"ci_2954a05f4f93b0c8f5b6e144996baf6287a54d6f1ff0031681961d21b163c152","title":"Performance Counters—LR Mediator, LDS, Sender","path":"/lrsiem/7.23.0/performance-counterslr-mediator-lds-sender","children":[]},{"id":"ci_7669e96e0805a231c4d97e9d753342ae4b53d0e9fd37166e53d7020a491999d0","title":"Performance Counters—LR Mediator, LogMart","path":"/lrsiem/7.23.0/performance-counterslr-mediator-logmart","children":[]},{"id":"ci_bb749b8e357e82e04c7dac1bef4e22b491b1570ec4ebadb04965f6de56af787c","title":"Performance Counters—LR Mediator, Processing","path":"/lrsiem/7.23.0/performance-counterslr-mediator-processing","children":[]},{"id":"ci_c8e155961e556ab5c2229ba5927a5aec33f3c736118af17e94f18a43d94290f5","title":"Performance Counters—LR Mediator, Stats","path":"/lrsiem/7.23.0/performance-counterslr-mediator-stats","children":[]},{"id":"ci_bfd165c11b4ccfde55fd73a0de0b023009259bed573ff2d705f96b337f1d6636","title":"Performance Counters—LR Mediator, True Source","path":"/lrsiem/7.23.0/performance-counterslr-mediator-true-source","children":[]},{"id":"ci_701699da692d0618ccb96f860195b760bdfdbd5925997b773495ed422ddc80f1","title":"Performance Counters—LR Messaging (DP to DX)","path":"/lrsiem/7.23.0/performance-counterslr-messaging-dp-to-dx","children":[]},{"id":"ci_56ba5be0afe7bce69aa95b3e5012d5bf3b197d4243378760b484ef85ec169136","title":"Performance Counters—LR System Monitor","path":"/lrsiem/7.23.0/performance-counterslr-system-monitor","children":[]},{"id":"ci_30aa35ee1dfd5672f7c08591c13959dbf66fc70443758c0eb2cd7b4d5537d990","title":"View and Add Performance Counters","path":"/lrsiem/7.23.0/view-and-add-performance-counters","children":[]}]}]},{"id":"ci_a439ba5e2eb5b4a42dac4e1a441007e528ed6e3c86dae72aacb7c0a9837a33eb","title":"Deployment Manager","path":"/lrsiem/7.23.0/deployment-manager","children":[]},{"id":"ci_f1246d6c9de6bb9c83d9b722d146d9475a81a80900a5ceee7129a1769bd678f7","title":"Deployment Security","path":"/lrsiem/7.23.0/deployment-security","children":[{"id":"ci_c5fc878687e9a2e1a8b32ad71449ec85db1c01e02cc3605a831947655dbc88b0","title":"Common Criteria Audit Data Generation","path":"/lrsiem/7.23.0/common-criteria-audit-data-generation","children":[{"id":"ci_ebce6d7d53fad5fc2e9b1fbf6ce1dd3da14b0873ff4f0505b075f7a31fc3eea1","title":"Set Up the Audit Functionality","path":"/lrsiem/7.23.0/set-up-the-audit-functionality","children":[]},{"id":"ci_a1d1af4e274147df7691f91eab4940035bf336b0e1aa5955f09b90b1cd4d8ba5","title":"Set up Discretionary Access Controls on the Trace Folder on an NTFS File System","path":"/lrsiem/7.23.0/set-up-discretionary-access-controls-on-the-trace-folder-on-an-ntfs-file-system","children":[]},{"id":"ci_07e33fb2d45203c049826e5b668dec296a26ec7f27d5c726d1885e3e9b934f4e","title":"Configure Windows Task to Alarm on Audit Trace Failure","path":"/lrsiem/7.23.0/configure-windows-task-to-alarm-on-audit-trace-failure","children":[]},{"id":"ci_4757406519e0d0f435fcff911b26994c1d0c8d81fdc9321d09c0865c48fd17f9","title":"Configure SQL Server to Run Under Domain Account","path":"/lrsiem/7.23.0/configure-sql-server-to-run-under-domain-account","children":[]},{"id":"ci_24151a70763d942f606e512a05d5f256f8999ab7fc4be65a485db63aca09a452","title":"SQL Server Trace File Converter (TFC) User Guide","path":"/lrsiem/7.23.0/sql-server-trace-file-converter-tfc-user-guide","children":[{"id":"ci_4692d2f188dbb76a01ccb7ea1e55051616aec74f707c3e9214cbabcc38e254b1","title":"Download the SQL TFC Installer","path":"/lrsiem/7.23.0/download-the-sql-tfc-installer","children":[]},{"id":"ci_27e48a1a3cb42f43add31c8a342dcb0f2cc6e5bc6aa996ffe003bebacdcec3e7","title":"Install the SQL Server TFC Server","path":"/lrsiem/7.23.0/install-the-sql-server-tfc-server","children":[]},{"id":"ci_d8a8daa5bb94b29f0340538dbd2bb3af514bae79c55984440d503c0a05cf3a43","title":"Configure SQL Server TFC","path":"/lrsiem/7.23.0/configure-sql-server-tfc","children":[]},{"id":"ci_89431827924ab2cbf2a840f61fc609210c9159db0c64ff8a3db35688b8964b51","title":"Add a SQL Server TFC Log Source","path":"/lrsiem/7.23.0/add-a-sql-server-tfc-log-source","children":[]}]}]},{"id":"ci_1a1845b96c4b7c5d9927d3ff9caa1ec598cd1658171d673fe474aff100477132","title":"Common Criteria","path":"/lrsiem/7.23.0/common-criteria","children":[{"id":"ci_e251c9d9be065a37e63726b5077feae5b7bbc94195c673e5c547d234eb6903a9","title":"Web Console Compliance","path":"/lrsiem/7.23.0/web-console-compliance","children":[{"id":"ci_87d2467f7cda62a434944977dfe1efc3bdd46c36e3af8e441ca636b2e68cb780","title":"Auto Logout for Idle Users (US9521)","path":"/lrsiem/7.23.0/auto-logout-for-idle-users-us9521","children":[]},{"id":"ci_e5b772ebd405aa95756fea6169a52fb8fb251d73dcfe9d21d0edaa37bc33f450","title":"Nginx File Configuration Updates (US9305)","path":"/lrsiem/7.23.0/nginx-file-configuration-updates-us9305","children":[]},{"id":"ci_bf2a24375616c607b94673f0fa0794d5d348dd458fa608ec11ecd442174224b4","title":"Requirements","path":"/lrsiem/7.23.0/requirements","children":[]},{"id":"ci_37b073ffa7b1ff6fd043b45ea6d0289b32b503caff59882d6824c9c39e028d72","title":"Warning Banner on Login Page (US9518)","path":"/lrsiem/7.23.0/warning-banner-on-login-page-us9518","children":[]},{"id":"ci_aa1362bb2fdb6f056607e6088bfc3db900c3bfffb3504f360c083a4ccaf4fc01","title":"Web Console FIPS Compliance Configuration (US9525)","path":"/lrsiem/7.23.0/web-console-fips-compliance-configuration-us9525","children":[]},{"id":"ci_81231aa6f052e755bc77d4eb0db321ee4707019070399f3c9522449a0e3d6a86","title":"Web Console Logout Button (US9519)","path":"/lrsiem/7.23.0/web-console-logout-button-us9519","children":[]}]}]},{"id":"ci_13327cbe902dd1f05fa5d9844412143c1fefd4bebecc39cd0f2079971e6a2d03","title":"Federal Information Processing Standards (FIPS)","path":"/lrsiem/7.23.0/federal-information-processing-standards-fips","children":[{"id":"ci_717f6a65886df4cb1f0920410e5ea56dbb360285512351bd2829c9dc126446cd","title":"Configure User Access Control for FIPS Mode","path":"/lrsiem/7.23.0/configure-user-access-control-for-fips-mode","children":[]},{"id":"ci_3e81cbe3db78c6f6a3df4f282f0ef400fb652a00b7c58057dc632c0f2e0f6be3","title":"Configure LogRhythm XM for FIPS Mode","path":"/lrsiem/7.23.0/configure-logrhythm-xm-for-fips-mode","children":[]},{"id":"ci_bea57a3dff38f13f8b89692f3b48bdb0f1a449c059d6e6b43bdda07c520f6052","title":"Configure LogRhythm DPAWC + DX for FIPS Mode","path":"/lrsiem/7.23.0/configure-logrhythm-dpawc-dx-for-fips-mode","children":[{"id":"ci_00833ec5f2136023cbae0bf3f9eb92eef14ae269483b343a6fe9795cd38df409","title":"Configure LogRhythm DPAWC","path":"/lrsiem/7.23.0/configure-logrhythm-dpawc","children":[]},{"id":"ci_170a46228fd0bd3e8842435fccba0358c7e2779a5da11ca7758487aa8a163514","title":"Configure LogRhythm DX","path":"/lrsiem/7.23.0/configure-logrhythm-dx","children":[]},{"id":"ci_59a528755ab9e3826687712e2ba059a32dc82d6637d4e715d93139f75fb827bf","title":"Establishing IPsec Communications between Windows & Linux OS","path":"/lrsiem/7.23.0/establishing-ipsec-communications-between-windows-linux-os","children":[{"id":"ci_840c0ef6670c2396310da02ba9ecd6ebd113027737243faed36af46d757c0c05","title":"Windows OS IPsec Configuration","path":"/lrsiem/7.23.0/windows-os-ipsec-configuration","children":[{"id":"ci_2d04b171540904759b108d6b11f27ca52213da6f843bffc7127f2482fcddd0ff","title":"Create a Custom MMC Console","path":"/lrsiem/7.23.0/create-a-custom-mmc-console","children":[]},{"id":"ci_39742b31c6fcc58c2033b289b7e5c04c84dfa37f17eb4b1e00ce784e6ee0d113","title":"Enable Audit Policy for Your Computer","path":"/lrsiem/7.23.0/enable-audit-policy-for-your-computer","children":[]},{"id":"ci_0d694cc37782a464be2f8edab6281ca57c204c2ce22e6962c3362e52cfef633c","title":"Build a Custom IPsec Policy","path":"/lrsiem/7.23.0/build-a-custom-ipsec-policy","children":[]},{"id":"ci_09e7383a858aeb73b42260f24a20c4147d7c9c749123a4650a53e21e1f050e69","title":"Configure an IPsec Filter List","path":"/lrsiem/7.23.0/configure-an-ipsec-filter-list","children":[]},{"id":"ci_aba8eabfe52dcf2c74868eb67cbde9b845237965b195fc1215b19e09938ea95d","title":"Configure an IKE Authentication Method","path":"/lrsiem/7.23.0/configure-an-ike-authentication-method","children":[]}]},{"id":"ci_0e33e4a476126ffc33dcd64de98f030303474a9a8aa302b3b1664be51862d365","title":"Linux/CentOS IPsec Configuration","path":"/lrsiem/7.23.0/linux-centos-ipsec-configuration","children":[{"id":"ci_fcb691a71f90311fe32b2cababad84a90d51b3db84567bde2b5c2cf8ef365059","title":"Configure IPsec on Linux Machine","path":"/lrsiem/7.23.0/configure-ipsec-on-linux-machine","children":[]},{"id":"ci_277a2704f74c5b9c77ffa006d0ff3922bfb00a4e36e73a6b56e690b69443397c","title":"Put Linux/CentOS into FIPS Mode","path":"/lrsiem/7.23.0/put-linux-centos-into-fips-mode","children":[]}]},{"id":"ci_03b9b374f2bda4a7c342ab7862f6f0e20b62997ee7e89968cd2c89d5f56dce23","title":"Test Your Custom IPsec Policy on both Computers","path":"/lrsiem/7.23.0/test-your-custom-ipsec-policy-on-both-computers","children":[]}]}]},{"id":"ci_d708b32a8c44acfb2b57965e2a17dc724de0f1a6cd0dc2ce16ba9182b2389f66","title":"Force Encrypted Connections for SQL (Recommended)","path":"/lrsiem/7.23.0/force-encrypted-connections-for-sql-recommended","children":[]},{"id":"ci_850a47827fcaaf34fe8f657042c133bd93eed5e9414349e095f1352c4e476db3","title":"Deploy LogRhythm in a FIPS-Enabled Domain","path":"/lrsiem/7.23.0/deploy-logrhythm-in-a-fips-enabled-domain","children":[]},{"id":"ci_f78de7303bc5502db681b031fac61aaf6d49bb90755be829030abdfd1668eea6","title":"Put Windows into FIPS Mode","path":"/lrsiem/7.23.0/put-windows-into-fips-mode","children":[]},{"id":"ci_e246f5090bd1361f04aa764509c6f0f3ee3b0171202b9683f9c42bb323544e50","title":"Configure LogRhythm Services and the Windows Data Indexer for FIPS Mode","path":"/lrsiem/7.23.0/configure-logrhythm-services-and-the-windows-data-indexer-for-fips-mode","children":[]}]},{"id":"ci_51fad2b79e649f4ba0872d3357d7e59d1f9760648804ff14eb36ec0a22a24616","title":"Integrated Security","path":"/lrsiem/7.23.0/integrated-security","children":[{"id":"ci_1cbd45d7908d7a187c99effe9ebd4d96ae704139baf347c48c6f866b07d146eb","title":"Create Accounts for LogRhythm Components","path":"/lrsiem/7.23.0/create-accounts-for-logrhythm-components","children":[]},{"id":"ci_3128869a1aa751ff74aa6ddd8c5bfb0a6507ff8ba0f2a4c4abec3fc1f4753dc0","title":"Configure Database Access","path":"/lrsiem/7.23.0/configure-database-access","children":[]},{"id":"ci_d0111fce0c9240b33a7f936daf946084e7069d63a844bb22cb5d0c44a2141cef","title":"Shut Down LogRhythm Services","path":"/lrsiem/7.23.0/shut-down-logrhythm-services","children":[]},{"id":"ci_c7db2dfc108dcde8c789a0e380ebebf1ef306cd8c94f27655623fffb41c0ae96","title":"Reconfigure LogRhythm Services to Use Integrated Security","path":"/lrsiem/7.23.0/reconfigure-logrhythm-services-to-use-integrated-security","children":[]},{"id":"ci_3598c6869a324e48a8a9eed5fe9774b04fabee88634eaf6e6dd90a638bcf4b9a","title":"Enable Mixed Authentication Mode","path":"/lrsiem/7.23.0/enable-mixed-authentication-mode","children":[]},{"id":"ci_e6a2da311818ac6c0afd23f232487045a2c4d91d2519ad319e87ceb076a949e9","title":"Restart LogRhythm Services","path":"/lrsiem/7.23.0/restart-logrhythm-services","children":[]}]},{"id":"ci_30640e695d18e51f97da8da6390204b04472859a625f8ffdb93334fbab5628de","title":"Least Privileged User","path":"/lrsiem/7.23.0/least-privileged-user","children":[{"id":"ci_cc1d85b2dea1aabf6b02caff2891ad1441e48a4130d3484b250ee23cf5436310","title":"Configuring LogRhythm Permissions","path":"/lrsiem/7.23.0/configuring-logrhythm-permissions","children":[]},{"id":"ci_3e92b01cced8123bd70e8ef041eae654b6ecc47c7b1135a19d83e088439b6f4e","title":"Least Privileged User: DP, Mediator Server","path":"/lrsiem/7.23.0/least-privileged-user-dp-mediator-server","children":[]},{"id":"ci_98213f8949234c847784fc83d6a2d96ec75d932b76e91afd150f1088d9131a6e","title":"Least Privileged User: DX, Linux","path":"/lrsiem/7.23.0/least-privileged-user-dx-linux","children":[]},{"id":"ci_60f86227be8f00b22b9f52126a4608d04881bb9ee4c45ceef74af782d23acd2c","title":"Least Privileged User: DX, Windows","path":"/lrsiem/7.23.0/least-privileged-user-dx-windows","children":[]},{"id":"ci_05904f9cce710982dad2aa1735ae91dd12761993e966b14c3908825aeb4e2775","title":"Least Privileged User: PM, Advanced Intelligence Engine","path":"/lrsiem/7.23.0/least-privileged-user-pm-advanced-intelligence-engine","children":[]},{"id":"ci_1744297dfdc9d07ee04c20af944b03aa68e81f215a575adb3045a5394395f15d","title":"Least Privileged User: PM, AIE Communication Manager","path":"/lrsiem/7.23.0/least-privileged-user-pm-aie-communication-manager","children":[]},{"id":"ci_17650e077f2e07c3d914cee59a281a291af85ec83825658a139c72d985085c2d","title":"Least Privileged User: PM, Alarming and Response Manager","path":"/lrsiem/7.23.0/least-privileged-user-pm-alarming-and-response-manager","children":[]},{"id":"ci_89ac8fe0a964f85adc78545b37c81ec81eac8bc924348f31081a10a6149ef0a9","title":"Least Privileged User: PM, Disaster Recovery","path":"/lrsiem/7.23.0/least-privileged-user-pm-disaster-recovery","children":[]},{"id":"ci_b9ce2afbbd553d3d47a0a60a429ec8ad5bc3faba14a39209f6de436bf2c69a8b","title":"Least Privileged User: PM, High Availability","path":"/lrsiem/7.23.0/least-privileged-user-pm-high-availability","children":[]},{"id":"ci_5d7e6633d94766cedfe262640e348f4f87975eabe9c4543e1aa755108be6b825","title":"Least Privileged User: PM, Job Manager","path":"/lrsiem/7.23.0/least-privileged-user-pm-job-manager","children":[]},{"id":"ci_71ffe3fceccbe0e4a55affb7ad55a9a8ec1ccb833287fafe1013e98a5e8a2d7b","title":"Least Privileged User: PM, Web Console","path":"/lrsiem/7.23.0/least-privileged-user-pm-web-console","children":[]},{"id":"ci_195a76981e8d089ca666f2a516b074fb9cc2fa4cd6339e9ee502118b9d59b42c","title":"Least Privileged User: SysMon, Linux, Unix","path":"/lrsiem/7.23.0/least-privileged-user-sysmon-linux-unix","children":[]},{"id":"ci_6b090c356bee5ab0bdfe3b3698b78a29645de72f98e947cdafd62aa710d45ac3","title":"Least Privileged User: SysMon, Windows","path":"/lrsiem/7.23.0/least-privileged-user-sysmon-windows","children":[]}]},{"id":"ci_7943d91ab016dd6914bc1d0bfe79b05214ccf50ac677675520e7d21705f4de48","title":"Public Key Infrastructure (PKI) Support","path":"/lrsiem/7.23.0/public-key-infrastructure-pki-support","children":[{"id":"ci_e47d5e5542baab0a34522d02ce01674b10f7c3e55b9daa3dd7c393335729d95c","title":"Certificate Configuration for LogRhythm Component Connections","path":"/lrsiem/7.23.0/certificate-configuration-for-logrhythm-component-connections","children":[]},{"id":"ci_e650c5d6565a503934769a86596ba78de58269d308f08b2b22b4555b20879de6","title":"Create a Certificate for Microsoft SQL Server Connections","path":"/lrsiem/7.23.0/create-a-certificate-for-microsoft-sql-server-connections","children":[]},{"id":"ci_ae1b3b81766a51078d97bfb5c6cf648ba26da5985952dd5ddcb136b2c688aad1","title":"Create Client and Server Certificates","path":"/lrsiem/7.23.0/create-client-and-server-certificates","children":[]},{"id":"ci_b1ba17a0df4fbc2170168dc9c4dc9602c810557545592c3e0b5c9bcc59a657d4","title":"Verify Certificates","path":"/lrsiem/7.23.0/verify-certificates","children":[]},{"id":"ci_9aa50cf692796324e75de43d2589efe6f525d414f06c81adaa02c07a5a7d1307","title":"View an Example of Configuring Mutual Authentication in LogRhythm","path":"/lrsiem/7.23.0/view-an-example-of-configuring-mutual-authentication-in-logrhythm","children":[]},{"id":"ci_fe515a8a638075a6557681586314c359650f321d8b9bb7e66216e2bcefed2c8e","title":"View an Example of Configuring Certificates for AI Engine","path":"/lrsiem/7.23.0/view-an-example-of-configuring-certificates-for-ai-engine","children":[]}]},{"id":"ci_e61ace4e568f031bbdb1c4ff254a64998965154d8afd9c6fb565557edc13508c","title":"Security Banners","path":"/lrsiem/7.23.0/security-banners","children":[{"id":"ci_3bcbf90e03a5f860e50e9e9abb21f80c1e2dd658e44a351873f5a5f7418d1a50","title":"Configure the Session-Timeout Error Message","path":"/lrsiem/7.23.0/configure-the-session-timeout-error-message","children":[]},{"id":"ci_93307ee6086a2cfa21e8dac7f702ac1e21b72e327cfefcf856e904ff23a21625","title":"Configure the Start-Up Warning","path":"/lrsiem/7.23.0/configure-the-start-up-warning","children":[]}]},{"id":"ci_72a77f8052c589af713b5f083095a2271efc933992e66921c6f48db63898fb82","title":"Enhanced Auditing","path":"/lrsiem/7.23.0/enhanced-auditing","children":[{"id":"ci_d7e56662cc9aa2c985ae2966bd34ef7712e1781e95bf5da214654319a34d49b6","title":"Collect Enhanced Audit Logs","path":"/lrsiem/7.23.0/collect-enhanced-audit-logs","children":[]}]},{"id":"ci_cb5f0c165128adc560242813634957b471514686da977b89b41a5183dee5329e","title":"Query Auditing","path":"/lrsiem/7.23.0/query-auditing","children":[]},{"id":"ci_0d1bc82cec06a8c66bdfe16c24f4aefe4a7b69b6b6bc2b8272316d87008c6b58","title":"LogRhythm Default Passwords","path":"/lrsiem/7.23.0/logrhythm-default-passwords","children":[]}]},{"id":"ci_7df89b3aa966b0ec7179a35eb67ae99528b4a11227f85c3a5d0ba4daef2e95e6","title":"Endpoint Monitoring","path":"/lrsiem/7.23.0/endpoint-monitoring","children":[{"id":"ci_f126a59eb807ba4354b7443488225ca174537d51a78bef60700b09fab6809108","title":"Data Loss Defender (DLD)","path":"/lrsiem/7.23.0/data-loss-defender-dld","children":[{"id":"ci_e87cc8292e78f22fcf451759936fe50091f758ae6af5199915792f966296a435","title":"Create DLD Policies","path":"/lrsiem/7.23.0/create-dld-policies","children":[]},{"id":"ci_616425f67689d05bb4724030109092891681737b386eeb4542b55cf868561911","title":"Delete DLD Policies","path":"/lrsiem/7.23.0/delete-dld-policies","children":[]},{"id":"ci_02d00844c28762de34b89affb31b0765ce8afd041e7b4742637dfd9cf6d67b4e","title":"Enable DLD for an Agent","path":"/lrsiem/7.23.0/enable-dld-for-an-agent","children":[]},{"id":"ci_420d2c6b9bb50a999081b9d975aa13c3f06ec32be5f85714e6b9cb28c8719866","title":"Modify DLD Policies","path":"/lrsiem/7.23.0/modify-dld-policies","children":[]}]},{"id":"ci_1243187bbe292caad54bc345b8eb82f8fcd903b88a38915fb0eb33e5be535cdf","title":"File Integrity Monitor (FIM)","path":"/lrsiem/7.23.0/file-integrity-monitor-fim","children":[{"id":"ci_02b29058388fc204bcf08315f1471a9c6acb71507323d19de4f1d5da80916bf6","title":"Create File Integrity Monitor Policies","path":"/lrsiem/7.23.0/create-file-integrity-monitor-policies","children":[]},{"id":"ci_4ac66f815d5dd792d5536e29307a3616baa0bfc59a20e8b667cae503c731a835","title":"Create Inclusions and Exclusions for FIM","path":"/lrsiem/7.23.0/create-inclusions-and-exclusions-for-fim","children":[]},{"id":"ci_36f0f68f38a201d864eac9ff337f58c268f81ded218c4375a612fcfe02fea637","title":"Associate a File Integrity Monitor Policy With an Agent","path":"/lrsiem/7.23.0/associate-a-file-integrity-monitor-policy-with-an-agent","children":[]},{"id":"ci_fc82f59be140e76153eafb2990a9984282e65d0f8bdbb3872abf7ef9e14a74ea","title":"Modify File Integrity Monitor Policies","path":"/lrsiem/7.23.0/modify-file-integrity-monitor-policies","children":[]},{"id":"ci_b50e915c9d0f2bb21b05e698751b146f4b91af9534e368d3783f8412503bd6c6","title":"Clone File Integrity Monitor Policies","path":"/lrsiem/7.23.0/clone-file-integrity-monitor-policies","children":[]},{"id":"ci_d7d2eadc7d67531deebf49b8cee0d6f51b1bac4f3a511e7c2417b6453aea8300","title":"Delete File Integrity Monitor Policies","path":"/lrsiem/7.23.0/delete-file-integrity-monitor-policies","children":[]}]},{"id":"ci_5f5c63208221d40672f1889a80f62da991ca69ed17ceefd576179f609e30f5e4","title":"Network Connection Monitor (NCM)","path":"/lrsiem/7.23.0/network-connection-monitor-ncm","children":[{"id":"ci_c95e806167c1dc627ef263a9a756f95d8412cf8cc4f1d68a4a3a6cc870d1b30c","title":"Enable NCM for an Agent","path":"/lrsiem/7.23.0/enable-ncm-for-an-agent","children":[]}]},{"id":"ci_7c0be7e44f39fe0a04628d7ef74a09e1bc42af3f6799eda463b1c63ef7b189be","title":"Process Monitor","path":"/lrsiem/7.23.0/process-monitor","children":[{"id":"ci_30818dbe5b2cfd4ab4592eabe9748e6a7a346680ff19229847f9c96dacae0a78","title":"Enable Process Monitor for an Agent","path":"/lrsiem/7.23.0/enable-process-monitor-for-an-agent","children":[]}]},{"id":"ci_785bfcd7361f67116e25ca05d798ef20581d98fd70c66830f388319780507ec9","title":"Registry Integrity Monitor (RIM)","path":"/lrsiem/7.23.0/registry-integrity-monitor-rim","children":[{"id":"ci_a4f6d1eb20b28e2ca66e6c0e090b3be7061d0c978da3efc97d82de44d4b6ac27","title":"Associate Items to RIM Policies","path":"/lrsiem/7.23.0/associate-items-to-rim-policies","children":[]},{"id":"ci_014fa556146cc329ffc63afca956216f34e5b12c6276f54d8ca0b47136a35c76","title":"Associate RIM Policies to Windows System Monitor Agents","path":"/lrsiem/7.23.0/associate-rim-policies-to-windows-system-monitor-agents","children":[]},{"id":"ci_1245193ac70303d4c0bdf6e40f99437ae3ab36d8e969f25e9cc4074ae33cfe8f","title":"Configure RIM Policy Items","path":"/lrsiem/7.23.0/configure-rim-policy-items","children":[]},{"id":"ci_5a6cd77c0d25c43011eef1730e29817a5c66da30ec0e7511023e65dbb2d01988","title":"Create RIM Policies","path":"/lrsiem/7.23.0/create-rim-policies","children":[]},{"id":"ci_71e4ce53cc7a4522c929d6098148a4126fae24649cdb4e5bec7a346b5854fe16","title":"Delete RIM Policies","path":"/lrsiem/7.23.0/delete-rim-policies","children":[]},{"id":"ci_1063fbcee9ffc409c6650aecedcbcf83a57ab59e0892785db86d0d029be5fc46","title":"Delete RIM Policy Items","path":"/lrsiem/7.23.0/delete-rim-policy-items","children":[]},{"id":"ci_1a58bf4e01bd9a353f982fc12beee0dc63733e73a23654c7b916901b55e7ea21","title":"Modify RIM Policies","path":"/lrsiem/7.23.0/modify-rim-policies","children":[]},{"id":"ci_7685fdde402bae632ad1704c463a19d893c6af67429e62ff9d16c245e6fdf8d8","title":"Modify RIM Policy Items","path":"/lrsiem/7.23.0/modify-rim-policy-items","children":[]}]},{"id":"ci_fe339c73f8063446fd84e9d7d5895bc4173d27ba55f6f60fd5d6a184003cad90","title":"User Activity Monitor (UAM)","path":"/lrsiem/7.23.0/user-activity-monitor-uam","children":[{"id":"ci_030521c57f28503f2a5f4486984067443724b290b38dcedfc178cdaf7613417a","title":"Enable UAM for an Agent","path":"/lrsiem/7.23.0/enable-uam-for-an-agent","children":[]},{"id":"ci_18f89e8f1c57f7b441ff525a21241299546b6e602068c3dd00fe002d5eec1374","title":"Include UAM in File Integrity Monitor","path":"/lrsiem/7.23.0/include-uam-in-file-integrity-monitor","children":[]}]}]},{"id":"ci_229484a9e32e096868975141bdeff69bf25817405db158b5e86a496b0796f803","title":"Entities","path":"/lrsiem/7.23.0/entities","children":[{"id":"ci_5305bde992eaef263819c5ece489eb33c43200c1360ed3b039c90ba79fff99a8","title":"Add a Single Entity","path":"/lrsiem/7.23.0/add-a-single-entity","children":[]},{"id":"ci_f3aa1d26c2b22fb617a296058582eb828dc1d913780f62f16be12971b730d819","title":"Bulk Import Entities From a File","path":"/lrsiem/7.23.0/bulk-import-entities-from-a-file","children":[]},{"id":"ci_473d61a31a2f5506f6ab088520dba7c8734c510ce7a8b5057f5fff773a003b39","title":"Delete Entities","path":"/lrsiem/7.23.0/delete-entities","children":[]},{"id":"ci_316a3b2f366b09eff7b0972d5fe2d0cba74f5172e02accf8df1315ea40a1e63b","title":"Modify Entities","path":"/lrsiem/7.23.0/modify-entities","children":[]},{"id":"ci_c9067cd8a6b7dd117268439ab98930c9dce1d740e849d0d73aeec2a97d4bb6cd","title":"Run the Entities Reorganization Wizard","path":"/lrsiem/7.23.0/run-the-entities-reorganization-wizard","children":[]}]},{"id":"ci_94bf6ce0733ba494af745f1f98edba60392c31c8979666fb7800f6a984af37bd","title":"Global Log Processing Rules","path":"/lrsiem/7.23.0/global-log-processing-rules","children":[{"id":"ci_7d08b7ab73dd223f39a520d30c8d4aff7d117662e3f9dff6fc9c5169f501c235","title":"Create Global Log Processing Rules","path":"/lrsiem/7.23.0/create-global-log-processing-rules","children":[]},{"id":"ci_77d998199cdb8e2e676ffdf4c1a7806569a0cb717cdc90c625db41d672e0d35f","title":"Modify Global Log Processing Rules","path":"/lrsiem/7.23.0/modify-global-log-processing-rules","children":[]}]},{"id":"ci_ddbf9f6dfdadc5dc15b62aad2f70ae8441ffd222a57fe604c6e8d5e2252c8eb9","title":"Host Records","path":"/lrsiem/7.23.0/host-records","children":[{"id":"ci_7d6b0f4a72fd8decf35769bdaa41583bfd1aea5450c8b3cb0ebdc9105e0fe0e0","title":"Add Host Records Manually","path":"/lrsiem/7.23.0/add-host-records-manually","children":[]},{"id":"ci_28001bb56595d9629d4b857ac88b455ea7cafffb9b9013a1be24878459a1c073","title":"Add Hosts From Clipboard","path":"/lrsiem/7.23.0/add-hosts-from-clipboard","children":[]},{"id":"ci_5365a663c3cddb58b19f1e1789af54ebe3986fb8951df7a6476edf919f4cbb35","title":"Add Hosts From File","path":"/lrsiem/7.23.0/add-hosts-from-file","children":[]},{"id":"ci_a01aa7211ddda8e3f71920f747b18eb72886e0fae43ed76a40de427332458874","title":"Add Origin Hosts or Impacted Hosts as Known Hosts","path":"/lrsiem/7.23.0/add-origin-hosts-or-impacted-hosts-as-known-hosts","children":[]},{"id":"ci_4c0799ec8529ea94926f26f2e877e94616fa6052626c282457d66dc2a4c8d673","title":"Add or Remove Multiple Host Roles","path":"/lrsiem/7.23.0/add-or-remove-multiple-host-roles","children":[]},{"id":"ci_fedb90f8daa68e9891fe745b52fbb67e3e23567d1325f7e81249b6f4cd130f24","title":"Export Multiple Host Roles to File","path":"/lrsiem/7.23.0/export-multiple-host-roles-to-file","children":[]},{"id":"ci_7bd1afa5a960b15deef048b88780d33070f7fc036deff45b5c8010a99f02add7","title":"Modify Properties for a Single Host Record","path":"/lrsiem/7.23.0/modify-properties-for-a-single-host-record","children":[]},{"id":"ci_d8ade5aa14736422f59937c7b797a2b50982928b0be6d5a0b0f35886eb37afff","title":"Modify Properties for Multiple Host Records","path":"/lrsiem/7.23.0/modify-properties-for-multiple-host-records","children":[]},{"id":"ci_aea01007cbecb689d144c8620b5180a63749a904298d25bad3dc0879b1678536","title":"Resolve Known Hosts","path":"/lrsiem/7.23.0/resolve-known-hosts","children":[]},{"id":"ci_0efd2aa48e627ffa7a15b0dee4abcc3437bec81781c453578048fbeb89392b06","title":"Retire Host Records","path":"/lrsiem/7.23.0/retire-host-records","children":[]},{"id":"ci_1cd5052516dfd186f5ecaeebb6a0c319cccc9eba1e4914e67c0cef1fdf08701b","title":"Search for Hosts","path":"/lrsiem/7.23.0/search-for-hosts","children":[]},{"id":"ci_0182659f02312659d56dbde27bb62b6897dce69d057c8d018f2eb3b15538b7ac","title":"Windows Host Wizard","path":"/lrsiem/7.23.0/windows-host-wizard","children":[{"id":"ci_dd0605b60042918285abd2fcbee3c1343b6a7e541286b50519f42a28d5bc7368","title":"Configure Initial Host Settings in Windows Host Wizard","path":"/lrsiem/7.23.0/configure-initial-host-settings-in-windows-host-wizard","children":[]},{"id":"ci_e268ecab9370f1171f73225a604dc4550010717449a7f329ac4da6bd2ff5318b","title":"Import Computers for Log Collection","path":"/lrsiem/7.23.0/import-computers-for-log-collection","children":[]},{"id":"ci_3d444f610967a41d60b2c0079ca03652fcbfa1e536732cf5b3d04187574110e3","title":"Perform Optional Configuration for Remote Log Collection","path":"/lrsiem/7.23.0/perform-optional-configuration-for-remote-log-collection","children":[]},{"id":"ci_c4a6cc2e0d4111ae65c813990cb73374c3e33efe5ae37cdddc95dfd39df8ec45","title":"Query Computers with Windows Host Wizard","path":"/lrsiem/7.23.0/query-computers-with-windows-host-wizard","children":[]},{"id":"ci_f38c5c1009089969b32fe6a25d6c0a324b43e097cd987ad3736394c214c89382","title":"Review Computers with Windows Host Wizard","path":"/lrsiem/7.23.0/review-computers-with-windows-host-wizard","children":[]},{"id":"ci_04c0f1f2bbd22eba4a19d1a3fac4ee2fa224a9fcffdce27a9072a77a330f9b37","title":"Scan a Domain for Computers","path":"/lrsiem/7.23.0/scan-a-domain-for-computers","children":[]},{"id":"ci_d88d49647d6e3dac8e85bbe8339e92b25e5efe2ec277e15a32ab8030fd759042","title":"Work with Hosts and Agents in Windows Host Wizard","path":"/lrsiem/7.23.0/work-with-hosts-and-agents-in-windows-host-wizard","children":[]}]}]},{"id":"ci_ae57d49b8b3597974cf884c8539a4a56d79e35fc221285a3e0b2ea58c509f04e","title":"Knowledge Base","path":"/lrsiem/7.23.0/knowledge-base","children":[{"id":"ci_9e05fdba79ad683d0ef8bf40e26372ce3f53dc7823867828e0ffcda0d0731375","title":"Back Up the EMDB","path":"/lrsiem/7.23.0/back-up-the-emdb","children":[]},{"id":"ci_057ba1c9e548c80dbc5da0f94fd7d7fbfbb124200fcdb26444f85010cc9ee361","title":"Configure Knowledge Base Synchronization Settings","path":"/lrsiem/7.23.0/configure-knowledge-base-synchronization-settings","children":[]},{"id":"ci_afb8f16c7bcc63ec068a371951a41a85551acab411c35bce5fe4d399f4152698","title":"Download the Knowledge Base File","path":"/lrsiem/7.23.0/download-the-knowledge-base-file","children":[]},{"id":"ci_14204cd5fcba3797ee3c74d12b96c1f4e8499e757d73e428e8d2b81b7a7f3151","title":"Import a Knowledge Base","path":"/lrsiem/7.23.0/import-a-knowledge-base","children":[]},{"id":"ci_903e95da11e01bc5caa3c255f62fbfddee1d14803b717fe924d2b86451110642","title":"Knowledge Base Manager","path":"/lrsiem/7.23.0/knowledge-base-manager","children":[{"id":"ci_036dcfba6ae7ae644e917add4a1f9e0faa826ebc07b11341c79ce998438d88bd","title":"Disable Knowledge Base Modules","path":"/lrsiem/7.23.0/disable-knowledge-base-modules","children":[]},{"id":"ci_e2567412fa64d0bd3c5603100034812f86082473f65530539a13e9e6f5fcba87","title":"Enable Knowledge Base Modules","path":"/lrsiem/7.23.0/enable-knowledge-base-modules","children":[]},{"id":"ci_6ab490cccd09264ea018d19ab9d0d37777e083b11059241d406147c58541ba56","title":"Export Knowledge Base Module Information to a File","path":"/lrsiem/7.23.0/export-knowledge-base-module-information-to-a-file","children":[]},{"id":"ci_afd64304dfcaaf8e151bff99a49ebedc3f8ab7e3bd08e8182c8de9bb1d4f3ccc","title":"Migrate Common Events","path":"/lrsiem/7.23.0/migrate-common-events","children":[]},{"id":"ci_df4ddc0eed584a86c95e765fa82b7a2d24d266526e629566abdc3687a3a5d15b","title":"Modify the Properties of Knowledge Base Modules","path":"/lrsiem/7.23.0/modify-the-properties-of-knowledge-base-modules","children":[]},{"id":"ci_dd813a6d994ec8148748841a9f423d4259c889dd73e9b7bb323b99b05b3b15e2","title":"View Knowledge Base Module Dependent Objects","path":"/lrsiem/7.23.0/view-knowledge-base-module-dependent-objects","children":[]}]}]},{"id":"ci_a9f56bdb6977878718a59b3883f58830e06cc446949d9e37839df6a9b3484ff1","title":"Log Distribution Services","path":"/lrsiem/7.23.0/log-distribution-services","children":[{"id":"ci_777f0f42890832c8da38366eb7f79a60588043f45f65b0e244bebdb41d7a7249","title":"Log Distribution Receiver Manager","path":"/lrsiem/7.23.0/log-distribution-receiver-manager","children":[{"id":"ci_8393b82642c5322c3e4cc58bb499a55e00481f23446b091c4a13e61fcc6bfa4e","title":"Create Log Distribution Receivers","path":"/lrsiem/7.23.0/create-log-distribution-receivers","children":[]},{"id":"ci_99c231a3365feacfb9d86ec2afd803fd45aeefffa824495d609bfa8efb6ea5c3","title":"Enable Log Distribution Receivers","path":"/lrsiem/7.23.0/enable-log-distribution-receivers","children":[]},{"id":"ci_f18a48abe2564daa083e6acfb8fea778ead4839798bdc75570521a0784b88c57","title":"Modify Log Distribution Receivers","path":"/lrsiem/7.23.0/modify-log-distribution-receivers","children":[]}]},{"id":"ci_ee98093882773698f8f3a281ed08a42e3973b1746750c8d1c066b38de097599b","title":"Log Distribution Policy Manager","path":"/lrsiem/7.23.0/log-distribution-policy-manager","children":[{"id":"ci_0c91a3e19e87ab69f14f0bb29ad04b0f88e853549d4b10c158a3776aae13ea3a","title":"Create Log Distribution Service Policies","path":"/lrsiem/7.23.0/create-log-distribution-service-policies","children":[]},{"id":"ci_158e52d3216f783786c69e13bff5c24c48649fcdde7055136f77049bdee07ce5","title":"Enable or Disable Log Distribution Service Policies","path":"/lrsiem/7.23.0/enable-or-disable-log-distribution-service-policies","children":[]},{"id":"ci_4c16e86723a26f977eb431a39955dedb84edaa356c270085db59d8ed9d9df9dd","title":"Modify Log Distribution Service Policies","path":"/lrsiem/7.23.0/modify-log-distribution-service-policies","children":[]}]},{"id":"ci_ca09b113729094bfe40c5e8686c8b2536ee0041c32236768dfbe3d662586e848","title":"LogRhythm Log Distribution Services Version 2","path":"/lrsiem/7.23.0/logrhythm-log-distribution-services-version-2","children":[{"id":"ci_d0b980c42002cf6f852914da8b6d316e04dd9c883ef4316b5f0de20ca89465de","title":"Determine When to Switch to Log Distribution Services v2","path":"/lrsiem/7.23.0/determine-when-to-switch-to-log-distribution-services-v2","children":[]},{"id":"ci_e6fb69793cd493b70f6bc392750059d83ceae18d36292b93f84d2d4258896671","title":"Enable Log Distribution Services v2","path":"/lrsiem/7.23.0/enable-log-distribution-services-v2","children":[]},{"id":"ci_3f2b0d3281abdfad3dcd76919f9499a0b325bb65d4906846a0ef5ac4d7cbc584","title":"Troubleshoot Log Distribution Services v2","path":"/lrsiem/7.23.0/troubleshoot-log-distribution-services-v2","children":[]}]},{"id":"ci_685ba83d8e9af3f0ebb66ad69451c79786d1c16c234ddd5e060ab5c7d5bed7c4","title":"Modify Log Distribution Service Properties in Data Processors","path":"/lrsiem/7.23.0/modify-log-distribution-service-properties-in-data-processors","children":[]}]},{"id":"ci_6f854e1ffd98b4c8a338a62be5d924a905993cacf4520ba54d2c4998f9404b55","title":"Log Processing Policies","path":"/lrsiem/7.23.0/log-processing-policies","children":[{"id":"ci_ece3da06bf34cb5c4305398683b2734448055fd5ba5f633d9c5605285b4f2a47","title":"Create Log Processing Policies","path":"/lrsiem/7.23.0/create-log-processing-policies","children":[]},{"id":"ci_50bbd57e55ef2cd579e2467a3e3941d19ae806da35387dd6de7393a379c8698b","title":"Assign Log Processing Policies","path":"/lrsiem/7.23.0/assign-log-processing-policies","children":[]},{"id":"ci_de2eed7e7c76c80d15d2e972b5dd9a6a4e52bc1f2d0d486533c602504201e02e","title":"Modify Log Processing Policies","path":"/lrsiem/7.23.0/modify-log-processing-policies","children":[]},{"id":"ci_fd004382cb0e65520d85dbb45876535191e329a060163931a01ff58953fe93fb","title":"Delete Log Processing Policies","path":"/lrsiem/7.23.0/delete-log-processing-policies","children":[]},{"id":"ci_e52799c6d4153a607bc017112d5e5e665ca85defe201b4219f2929adbe9bda53","title":"Troubleshoot MPE Rule Performance","path":"/lrsiem/7.23.0/troubleshoot-mpe-rule-performance","children":[]}]},{"id":"ci_af801a526385957524cd5e2774771d351b3178f00fb6ddf439591e762c8f0e88","title":"Log Sources","path":"/lrsiem/7.23.0/log-sources","children":[{"id":"ci_0189ac05ada3129cf568e3f3e3b4117a6ccad125632718d77a32110fdd844475","title":"Work With Log Sources","path":"/lrsiem/7.23.0/work-with-log-sources","children":[{"id":"ci_10731538bb47b9f0a6d972de80647bf4b10344688ebfd23885e1eeabe62cd2e5","title":"Add a Single Log Source","path":"/lrsiem/7.23.0/add-a-single-log-source","children":[]},{"id":"ci_fee6f2ab2e2c9711fd7fadb3679ea88881f634aa6691f6b752ad5e26a3fdb4c0","title":"Add Multiple Log Sources","path":"/lrsiem/7.23.0/add-multiple-log-sources","children":[]},{"id":"ci_e97f0d509e249f6f796ba7dc11ce18c934306092fc1326375df05eab7d57c8e6","title":"Associate New Log Sources","path":"/lrsiem/7.23.0/associate-new-log-sources","children":[]},{"id":"ci_24f45a2e018ecf8ff611d509b9180deac244786941229dd679e75512d340edb6","title":"Collect Local Event Logs with the Server Service Disabled","path":"/lrsiem/7.23.0/collect-local-event-logs-with-the-server-service-disabled","children":[]},{"id":"ci_2a36c39a1ee3ec56f0b2088d9bbd68b9f29de44d2439508792e0efa27d0c2ee3","title":"Configure Log Sources Automatically","path":"/lrsiem/7.23.0/configure-log-sources-automatically","children":[{"id":"ci_533df4304f70bdd7d6a951f4d9e8af1e7b8f1375d4e6476b1a0e9d7e5e46deff","title":"Add and Delete SNMP Connections","path":"/lrsiem/7.23.0/add-and-delete-snmp-connections","children":[]},{"id":"ci_f48edf73af0ec81ff36992002fca5dc883fe0318bfbc804a45cd5a883b0307be","title":"Enable Automatic Log Source Configuration","path":"/lrsiem/7.23.0/enable-automatic-log-source-configuration","children":[]},{"id":"ci_b7cc8a8e3e6031f48d8449a443ad0079e98ba7c31807bb0491344a905d65977f","title":"Use the Advanced Criteria Manager","path":"/lrsiem/7.23.0/use-the-advanced-criteria-manager","children":[]}]},{"id":"ci_ef1992dcc4d9a791933b963a038b56d07e3cc80cc1bb0f08991d93449ec1f1f1","title":"Configure Support for Multi-Line Logs","path":"/lrsiem/7.23.0/configure-support-for-multi-line-logs","children":[]},{"id":"ci_b4b13188c7e8afa273800e0ac34d71d99b8225cec2472e705fcee5b7ced3171c","title":"Export Log Sources","path":"/lrsiem/7.23.0/export-log-sources","children":[]},{"id":"ci_d01393d46a77ce2a6c564f3f9ae72f7e5721f7fad00c649d5c9a83de91f72f4d","title":"Modify a Single Log Source","path":"/lrsiem/7.23.0/modify-a-single-log-source","children":[]},{"id":"ci_a3e93ca9adc20882fd2524be7ebc29b961bf02198cfa7221116b5b356d3e5a01","title":"Modify Event Settings","path":"/lrsiem/7.23.0/modify-event-settings","children":[]},{"id":"ci_3e7d0a74d0b5d595e2c0ff3865bedf073c19b589cc76e8dd6b429987225341e6","title":"Modify Multiple Log Sources","path":"/lrsiem/7.23.0/modify-multiple-log-sources","children":[]},{"id":"ci_cd99ba792a305131a545003ba42100980b5ad5250e5f77ab45b39fd2367a64a6","title":"Move Log Sources to New Hosts","path":"/lrsiem/7.23.0/move-log-sources-to-new-hosts","children":[]},{"id":"ci_d21c7eb7fb5c16cc1d0bf49215750db86879d1cc050116cd9c89d5d2c747d824","title":"Preregister Log Sources","path":"/lrsiem/7.23.0/preregister-log-sources","children":[]},{"id":"ci_e6e7fe40b7438a02351155ba82a3b5473b8952afdbfad574a662b061f8e4d09a","title":"Resolve Log Source Hosts","path":"/lrsiem/7.23.0/resolve-log-source-hosts","children":[]},{"id":"ci_3b6afdffb7d20ef3e3bf28f43e4ab8aced29aa87196d033ee3317dc317420aaf","title":"Retire or Activate Log Sources","path":"/lrsiem/7.23.0/retire-or-activate-log-sources","children":[]}]},{"id":"ci_8edebb4e0e73d75081c97859d98f8bc251c1d81cc3a704d908abddd1b5189152","title":"Log Source Types","path":"/lrsiem/7.23.0/log-source-types","children":[{"id":"ci_d0684050211bbec5bb7e41d12f013b5e9f3e3675fb07619773f3a32d45434c51","title":"Create Custom Log Source Types","path":"/lrsiem/7.23.0/create-custom-log-source-types","children":[]},{"id":"ci_b5215fe98ae13f60626462d4ec4bbf536389d508242fbfcc96152f0419436002","title":"Delete Custom Log Source Types","path":"/lrsiem/7.23.0/delete-custom-log-source-types","children":[]},{"id":"ci_489b6cdda340c79115287ebc4a8332a543bc9fd071acf4cd687ce5d3922e02dc","title":"Modify Custom Log Source Type","path":"/lrsiem/7.23.0/modify-custom-log-source-type","children":[]},{"id":"ci_eeb2b42482378803e78bcdd80d2aae3ef942151ca0c7f5617bb26d60716701cd","title":"Modify Type for Pending Log Source","path":"/lrsiem/7.23.0/modify-type-for-pending-log-source","children":[]}]},{"id":"ci_e5e78407046c9733d0f6d3085a88d7f4e713c54c0f5094ce1e587e191e8ff14d","title":"Data Masking","path":"/lrsiem/7.23.0/data-masking","children":[{"id":"ci_e72094ee2345254287e97db84e266c17158cd3be6cbd9d47c2446d1c21691a83","title":"Add New Data Masking Rules","path":"/lrsiem/7.23.0/add-new-data-masking-rules","children":[]},{"id":"ci_9d390b7520152d309c31ce55ca5601e38070903175b630947b8b4a228e00606e","title":"Import and Export Data Masking Rules","path":"/lrsiem/7.23.0/import-and-export-data-masking-rules","children":[]},{"id":"ci_d72ce46fcccd2329c667f97b6fd9863e764da3d1fee41692b053fa8d37fb88e8","title":"Enable and Disable Data Masking Rules","path":"/lrsiem/7.23.0/enable-and-disable-data-masking-rules","children":[]},{"id":"ci_b9f99180af2c431451d9cdf7fc4140f9effd6103a1e1b0799ce66a090ea02fd9","title":"Reorder Data Masking Rules","path":"/lrsiem/7.23.0/reorder-data-masking-rules","children":[]},{"id":"ci_b2ee14116494f77dc8435db4f3efc3a67e2179d83e55a2b1ff417cea79f594f6","title":"Delete Data Masking Rules","path":"/lrsiem/7.23.0/delete-data-masking-rules","children":[]}]},{"id":"ci_ef55b6d6ed7e93f8de2a5005863f725783db9279038aab798982081ea80475aa","title":"Log Source Identification and Acceptance","path":"/lrsiem/7.23.0/log-source-identification-and-acceptance","children":[{"id":"ci_8a763a8b3be9ad91034d68743e4c5c23692774fccc7c9a5160d76f7afa60c51f","title":"Accept New Log Sources","path":"/lrsiem/7.23.0/accept-new-log-sources","children":[]},{"id":"ci_4d775a8909362ed0dbbb4c01ab6379580b8cc3d43323f9d4c12cf3556a0b3689","title":"Accept New Log Sources Automatically","path":"/lrsiem/7.23.0/accept-new-log-sources-automatically","children":[{"id":"ci_f1598ba73a95ae534a2ea786af50a4bbcbb6a782a1407f0bf6ceca029cc7c198","title":"Create IP Range Log Source Acceptance Rules","path":"/lrsiem/7.23.0/create-ip-range-log-source-acceptance-rules","children":[]},{"id":"ci_ec24f3a793d308271b612071b128e0d6d023f5bf527526b96f7192c2bdcf156c","title":"Create Pattern Match Log Source Acceptance Rules","path":"/lrsiem/7.23.0/create-pattern-match-log-source-acceptance-rules","children":[]},{"id":"ci_0399c13372ffdbf143812ec883a95e8cb12a3598ffeaff435b1f47799cede3e9","title":"Manage Automatic Log Source Acceptance Rules","path":"/lrsiem/7.23.0/manage-automatic-log-source-acceptance-rules","children":[]}]},{"id":"ci_9c62d65206801728e3ef4aee0c7a175e385168a7b6b613771ed825799bd8f991","title":"Set the Log Source Identification Search Scope","path":"/lrsiem/7.23.0/set-the-log-source-identification-search-scope","children":[]},{"id":"ci_d7fdbc5da81052ac40fc30088c62aef3cb3dcc198590b991a253d3be7516f0b1","title":"View Log Source Acceptance Properties","path":"/lrsiem/7.23.0/view-log-source-acceptance-properties","children":[]}]},{"id":"ci_663332bdae9ebfd25616543001b46f82f17b340e0ceb4b08772e44a95ec03657","title":"Log Sources and Agents","path":"/lrsiem/7.23.0/log-sources-and-agents","children":[{"id":"ci_53183f34b42ef89dfd188dec517ecddd6658da59017b54c50537655297ca524d","title":"Limit the Number of Agents Available for Batch Updates","path":"/lrsiem/7.23.0/limit-the-number-of-agents-available-for-batch-updates","children":[]},{"id":"ci_adfe917db82203895153be06bb3ffbcaa039fde76d357897b0dc661048a3f247","title":"Move Log Sources Between Agents","path":"/lrsiem/7.23.0/move-log-sources-between-agents","children":[]}]},{"id":"ci_98e9a68793115c2c4eba1b3bb9a338153e4b8fe49f37504f603ad485e8788c71","title":"Flat File Collection","path":"/lrsiem/7.23.0/flat-file-collection","children":[{"id":"ci_033d9d99fbea41c08a59195b8e384c0005c4261de17978129e8bd49cebbd8454","title":"Configure a Host for Local Flat File Collection","path":"/lrsiem/7.23.0/configure-a-host-for-local-flat-file-collection","children":[]},{"id":"ci_d6759ce14a5b5afdb67aafbe2fd9a14c3a9eddf5c583be9797353f814c960bdc","title":"Configure an Agent for IIS Log Collection","path":"/lrsiem/7.23.0/configure-an-agent-for-iis-log-collection","children":[]},{"id":"ci_c9bf979e67181b5a2902361d4a7eb6e65b5f9794d8b42ad7910c73fc9668dd36","title":"Convert Flat File to Epoch Time","path":"/lrsiem/7.23.0/convert-flat-file-to-epoch-time","children":[]},{"id":"ci_b6c9ee9bbaab53684a2b8f4e6c071372ca9726a945cab62be69953a0101e814b","title":"Supported Date Parsing Formats","path":"/lrsiem/7.23.0/supported-date-parsing-formats","children":[]}]},{"id":"ci_20a6cc5682a5525fec4e10bca38dc3462c2c039905efadc77bf924affc3389af","title":"UDLA Collection","path":"/lrsiem/7.23.0/udla-collection","children":[{"id":"ci_789c1e78ca69cab41351ccd9dfb5ce575de2dfa98ce71a0e39a0b739d415ccb0","title":"Configure UDLA Log Collection","path":"/lrsiem/7.23.0/configure-udla-log-collection","children":[]},{"id":"ci_c46d1aa5f6146f0dff22391df01889daf547d900e07acb104d064f847e7ddbcb","title":"Create a Sample McAfee ePolicy Orchestrator (ePO) Event Log Source","path":"/lrsiem/7.23.0/create-a-sample-mcafee-epolicy-orchestrator-epo-event-log-source","children":[]},{"id":"ci_cbe85f990f50d80e8a8b7ef3311dd415d82b7a8e3e5ff186945028fdf59fc296","title":"Create a Sample Oracle 10g Audit Trail UDLA Log Source","path":"/lrsiem/7.23.0/create-a-sample-oracle-10g-audit-trail-udla-log-source","children":[]},{"id":"ci_d4caee5b2cb53877a45de116ddeb554fb3972a91230c726f86d7a4287654a1ec","title":"Export and Import UDLA Log Source Configurations","path":"/lrsiem/7.23.0/export-and-import-udla-log-source-configurations","children":[]},{"id":"ci_8dab094cf4e084dad2f9333e419b43d0700ec6a0d6eb22df56ea675796f671c7","title":"Override UDLA SQL","path":"/lrsiem/7.23.0/override-udla-sql","children":[]}]},{"id":"ci_fccc62d4cf13d01c48dd0aa32822be292f46c359c6124735ba03db56e16a694e","title":"Log Source Virtualization","path":"/lrsiem/7.23.0/log-source-virtualization","children":[{"id":"ci_95ebb1e96ba79af1a230c30a1c67c6244c67b78c910530a43b03e25f676436dc","title":"Create Log Source Virtualization Templates","path":"/lrsiem/7.23.0/create-log-source-virtualization-templates","children":[]},{"id":"ci_33aba1633a3ee0051f60182a16368b59e61264699fefcbcced832bedcbe54059","title":"Create Virtual Log Sources","path":"/lrsiem/7.23.0/create-virtual-log-sources","children":[]},{"id":"ci_96582910adcf7d41b0f86c5d345028c97fc5ce8c90b7673636c8776d4a1fed5f","title":"Delete Log Source Virtualization Templates","path":"/lrsiem/7.23.0/delete-log-source-virtualization-templates","children":[]},{"id":"ci_50176ee1388c6094f4b5a2bbebab3a8f92412ff829f6f7689eab9e2e29f7040c","title":"Delete Virtual Log Sources","path":"/lrsiem/7.23.0/delete-virtual-log-sources","children":[]},{"id":"ci_f147177f01cffbc498590cee9f93c421a16182e1e5238ebdf80bdec1008ae0eb","title":"Enable Virtualization on a Single Log Source","path":"/lrsiem/7.23.0/enable-virtualization-on-a-single-log-source","children":[]},{"id":"ci_25e306246107ab5526c0ec999547c6a3793c07e85be9e5fe6d0b6281382cf7e2","title":"Enable Virtualization on Multiple Log Sources","path":"/lrsiem/7.23.0/enable-virtualization-on-multiple-log-sources","children":[]},{"id":"ci_afdc4c1372a0f7dd6d3528ae65b89a54f95724ea1f99ff431608729e8e6357a7","title":"Export Log Source Virtualization Templates","path":"/lrsiem/7.23.0/export-log-source-virtualization-templates","children":[]},{"id":"ci_6fcfe43eabb8955ec0da48288d75197fa20333e02f099e0fd8354d4ef35fed9a","title":"Filter Virtual Logs at the Agent","path":"/lrsiem/7.23.0/filter-virtual-logs-at-the-agent","children":[]},{"id":"ci_821bacde1a905e48f285d826abc9e49015bc65e38e3f0ff7d3151350553dd864","title":"Import Log Source Virtualization Templates","path":"/lrsiem/7.23.0/import-log-source-virtualization-templates","children":[]},{"id":"ci_a5654f9faeb3071047b23798eeb3f450446554486f051298a6adac73a1b05e44","title":"Modify Catch-All Sources on a Batch of Parent Log Sources","path":"/lrsiem/7.23.0/modify-catch-all-sources-on-a-batch-of-parent-log-sources","children":[]},{"id":"ci_a59860e8c4862eda222bd2b0a5d247f58fa4c97bbe7de0509f354906b52cd84f","title":"Modify Log Source Virtualization Templates","path":"/lrsiem/7.23.0/modify-log-source-virtualization-templates","children":[]},{"id":"ci_b5671bab49c80d9aefa2399235e5d7e383c53b1d9f65be666a0c7cc4acf5e309","title":"Modify Virtual Log Sources","path":"/lrsiem/7.23.0/modify-virtual-log-sources","children":[]}]}]},{"id":"ci_e7b8fd72a1228558d759a7d6ef4c7c77a2d1b2cf9116f229fbbdbb58cd2bc895","title":"Network Monitor","path":"/lrsiem/7.23.0/network-monitor","children":[{"id":"ci_c064e2a095191424158038c31277569eda4d0709b2cad6862263ef4c9fb223c5","title":"Add NetMon in the Client Console","path":"/lrsiem/7.23.0/add-netmon-in-the-client-console","children":[]},{"id":"ci_ebe102a8b73909f0859ad00c97b433021579545ad59a3e85a613ec98a2e7479c","title":"Configure NetMon in the Client Console","path":"/lrsiem/7.23.0/configure-netmon-in-the-client-console","children":[]},{"id":"ci_c2b727b75d0b55bcbe8478ca9ec7313c0b06f4a9632eeede5381142719f9195a","title":"Delete NetMon in the Client Console","path":"/lrsiem/7.23.0/delete-netmon-in-the-client-console","children":[]},{"id":"ci_ab88e4969bc2249905a73d4aa3c830a0fa1a90b80c31e31c5370731d19705a52","title":"Modify NetMon in the Client Console","path":"/lrsiem/7.23.0/modify-netmon-in-the-client-console","children":[]},{"id":"ci_a23a77ed604c85f716d9b9f115818da1c95f0cc624ebd4ed35ec8a8857e82747","title":"Monitor NetMon in the Client Console","path":"/lrsiem/7.23.0/monitor-netmon-in-the-client-console","children":[]}]},{"id":"ci_f880150190dfe158b83dc814377663c9588c19f9beb25cf6d80de71f7e2e4cdb","title":"Network Records","path":"/lrsiem/7.23.0/network-records","children":[{"id":"ci_88f1554a41eebf306862d5e7a8cfba2d6cee6d9ea2da71854b50ab1350165153","title":"Add Network Records from File","path":"/lrsiem/7.23.0/add-network-records-from-file","children":[]},{"id":"ci_79d89dc1daa636ac615c0a147676f1f11b174e0124867f397caabd038d0c942f","title":"Manually Add Network Records","path":"/lrsiem/7.23.0/manually-add-network-records","children":[]},{"id":"ci_7631a395de84fe997ca6a65422961b6d20b3db505e53d79c1257c65a8c1d8f30","title":"Modify Properties for a Single Network","path":"/lrsiem/7.23.0/modify-properties-for-a-single-network","children":[]},{"id":"ci_fc0a51f80ef80aedcc7cbeaf00ca2e214c6b98c7488f62866399e93bd6c8abd6","title":"Modify Properties for Multiple Network Records","path":"/lrsiem/7.23.0/modify-properties-for-multiple-network-records","children":[]},{"id":"ci_360e51603a019140561490cd304cbda7643448b2e62ada6e638bd72c981f408b","title":"Resolve Known Networks","path":"/lrsiem/7.23.0/resolve-known-networks","children":[]},{"id":"ci_f7ac32597b6e968333243af62de338e7efe65f5784951c212e90718a2c706787","title":"Retire Network Records","path":"/lrsiem/7.23.0/retire-network-records","children":[]},{"id":"ci_42cfebad3ad0af08a0775d902b81089624d01fbe503d18882cac4b74677f6f9f","title":"Search for Networks","path":"/lrsiem/7.23.0/search-for-networks","children":[]}]},{"id":"ci_757d6c1ac9361b3a64fcc837f10c924240c93dd110dcd11957764749b82ecf89","title":"Object Permissions Manager","path":"/lrsiem/7.23.0/object-permissions-manager","children":[{"id":"ci_93356156c3a77368d76542a28e0f123c522a0492a411c24e9704edde61e4b20d","title":"Modify Objects' Security Settings","path":"/lrsiem/7.23.0/modify-objects-security-settings","children":[]}]},{"id":"ci_a613b8d0c7487f2eb724cca00a7ff45f35b80ea467cefa50137079e69c6e2cc0","title":"People and Users","path":"/lrsiem/7.23.0/people-and-users","children":[{"id":"ci_7967b600d80de7defd098984b70530587e3d18c11af966b8baef02acce268f3f","title":"Add Person Records or Roles","path":"/lrsiem/7.23.0/add-person-records-or-roles","children":[]},{"id":"ci_4017cdbae58c53da7279cd904d80d50569110757912a05bd5974ae077cec4211","title":"Assign Active Directory Credentials to Local Users","path":"/lrsiem/7.23.0/assign-active-directory-credentials-to-local-users","children":[]},{"id":"ci_52a1e841b9f430aec0f51e84d857869b464e17ebc757b338e19817c4bb3d9059","title":"Create User Accounts for Person Records or Roles","path":"/lrsiem/7.23.0/create-user-accounts-for-person-records-or-roles","children":[]},{"id":"ci_5adb4c8d6c018866dd3081e9dd4efa05b92a71450de231da6a7feabf0c8084c3","title":"Direct Requests to the Case API URL","path":"/lrsiem/7.23.0/direct-requests-to-the-case-api-url","children":[]},{"id":"ci_d02002e76cef916aecbdae9bb314db58f76dd43c1ec1fb98389254e151890380","title":"Disable Person Records or Roles","path":"/lrsiem/7.23.0/disable-person-records-or-roles","children":[]},{"id":"ci_7a622c23f6e38f33c6ec858a8fdbe85e3266daffcb7ddecd0046ff6213c16548","title":"Modify Logins for Person Records or Roles","path":"/lrsiem/7.23.0/modify-logins-for-person-records-or-roles","children":[]},{"id":"ci_d0be6693e9dc6d5f4e7ae4fcc4b0c3e2546360f51929e6c09c773f3d12e24489","title":"Modify Person Records or Roles","path":"/lrsiem/7.23.0/modify-person-records-or-roles","children":[]},{"id":"ci_03f5c5cc97fdc292daba7d92ddf97040635a95c98e1e10232e7b8c039b3152b3","title":"Rename LogRhythm Users","path":"/lrsiem/7.23.0/rename-logrhythm-users","children":[]},{"id":"ci_94fdf65d88aa160813bf633ba78c78ace267edbd433db36c39a9c85f561b244a","title":"Reset Multi-Factor Authentication Access to the Web Console","path":"/lrsiem/7.23.0/reset-multi-factor-authentication-access-to-the-web-console","children":[]},{"id":"ci_89a6f2559792c2208b9b853b6be30956ae8bd334d68f4f1a2c7eff0e32938943","title":"User Profile Manager","path":"/lrsiem/7.23.0/user-profile-manager","children":[{"id":"ci_9c574414eaca194bc9f3551db3dd468bd0dcfd012c9e0f65fbc134f64677b4e5","title":"Create a New User Profile","path":"/lrsiem/7.23.0/create-a-new-user-profile","children":[]},{"id":"ci_1f078a82a1c8065846725190051f8d181db4021d13c24b37154748aa2878c08d","title":"Manage User Profile SmartResponse Access Rights","path":"/lrsiem/7.23.0/manage-user-profile-smartresponse-access-rights","children":[]},{"id":"ci_7ac219d0b5f7ea88d4b667a33cfccd7d05c8b16617d57ae627e2f08eaa795192","title":"Modify User Profile Data Processor Access Rights","path":"/lrsiem/7.23.0/modify-user-profile-data-processor-access-rights","children":[]},{"id":"ci_85455db429322ce1f95ca606a5e301bc0161462dbe602448841370e68a8db4c6","title":"Modify User Profile Effective Log Sources Settings","path":"/lrsiem/7.23.0/modify-user-profile-effective-log-sources-settings","children":[]},{"id":"ci_bdfe8ab09f8118db22e9da332b16bafdb6dc2fd3fdbdaa7086b41e2ce80b6bc4","title":"Modify User Profile Entities Settings","path":"/lrsiem/7.23.0/modify-user-profile-entities-settings","children":[]},{"id":"ci_58eb8bfc35ee6d77e32b65ce1a5d058d09b72bbe68cbd6422bedf8c39858c027","title":"Modify User Profile General Settings","path":"/lrsiem/7.23.0/modify-user-profile-general-settings","children":[]},{"id":"ci_7bd58560f96d30fcb047673ca3eda4e9740e2047aac38e3705ef2ba782221316","title":"Modify User Profile Log Sources Access Rights","path":"/lrsiem/7.23.0/modify-user-profile-log-sources-access-rights","children":[]},{"id":"ci_75c9a231862123d5e30d9355e7a350c8427bd35274d7c12aac74a129e8321134","title":"Manage User Profile Notification Group Access Rights","path":"/lrsiem/7.23.0/manage-user-profile-notification-group-access-rights","children":[]},{"id":"ci_e752165df0134218585aa72b0debd4a900b45c0595eedee4b86672f4876c2efd","title":"Modify User Profile Management Permissions","path":"/lrsiem/7.23.0/modify-user-profile-management-permissions","children":[]}]}]},{"id":"ci_ae83f73f7986da23edf3be6e0431bcc91ee453cbfa75b02f64cc850a4c75eecc","title":"Platform Manager","path":"/lrsiem/7.23.0/platform-manager","children":[{"id":"ci_b2c15fbd42f49dea4d7a1d6c191f1e080340ab18ffb30df4774ce898f885cb22","title":"Alarming, Reporting, and Response Manager Services","path":"/lrsiem/7.23.0/alarming-reporting-and-response-manager-services","children":[{"id":"ci_c75a724110e7b47e689d24c5c52294bfc168aeb3186a1ad6d5ca75a8f5374ccf","title":"Apply Recommended Platform Manager Values","path":"/lrsiem/7.23.0/apply-recommended-platform-manager-values","children":[]},{"id":"ci_6407e81ecf07f096ea9999c05b0832234f6b321193c0d0eb5e89186df92f9927","title":"Integrate LogRhythm and McAfee ePolicy Orchestrator","path":"/lrsiem/7.23.0/integrate-logrhythm-and-mcafee-epolicy-orchestrator","children":[]},{"id":"ci_9a0073d1511edfa6c311756140f5dc663cebaff7496d4aa784a24832ac2abd2e","title":"Modify Platform Manager Advanced Properties","path":"/lrsiem/7.23.0/modify-platform-manager-advanced-properties","children":[]},{"id":"ci_8395f1adec4eca926deadb0b1d42d7a0f8c3fd192eeef75b9ffe672c4a4f965d","title":"Modify Platform Manager Basic Properties","path":"/lrsiem/7.23.0/modify-platform-manager-basic-properties","children":[]},{"id":"ci_580b06fdad55a956dac2fb231bb892e338f633f41f60956b35f696f10c55c680","title":"Revert to a Previous Platform Manager Configuration","path":"/lrsiem/7.23.0/revert-to-a-previous-platform-manager-configuration","children":[]},{"id":"ci_b8a44571c2b571e34c1816d3a23d32a6069a11bf8262590ae8ddbe27fcb312e5","title":"Specific SMTP Servers to Allow for Failover","path":"/lrsiem/7.23.0/specific-smtp-servers-to-allow-for-failover","children":[]},{"id":"ci_34c6933eb3f1f68171e5663fe03f55c9924f27ca76310b5f39c2341d9706fb7d","title":"Start, Stop, and Restart Platform Manager Services","path":"/lrsiem/7.23.0/start-stop-and-restart-platform-manager-services","children":[]}]},{"id":"ci_fd458ad1506641fc2a864a940a07a2f5fff3bcdc28e6bfef303db72991cb3c34","title":"Global Risk Based Priority","path":"/lrsiem/7.23.0/global-risk-based-priority","children":[{"id":"ci_aa566a4ea664c9841a873901ed26b2de3a4ae16ef01a7db0dd4a42d70ba2900d","title":"Determine the MPE RBP Manually","path":"/lrsiem/7.23.0/determine-the-mpe-rbp-manually","children":[]},{"id":"ci_b023f4efc635b59723a6eaab074436bf5d77c118ea6e8374abbeb7dee51a83f2","title":"Modify AIE Risk Based Priority Settings","path":"/lrsiem/7.23.0/modify-aie-risk-based-priority-settings","children":[]},{"id":"ci_ae2bbfbb227abc85a6f24447131e26ad8da0e98cc195557f16a21015ff886fc7","title":"Modify the Default Destination Risk Level","path":"/lrsiem/7.23.0/modify-the-default-destination-risk-level","children":[]},{"id":"ci_b14df977ef7b73d14bbafe7b86f93119f4e65d9c1a09153063aaef40328ee555","title":"Modify the Default Source Threat Level","path":"/lrsiem/7.23.0/modify-the-default-source-threat-level","children":[]},{"id":"ci_63a8fa287bfa644ec272f4159cb29d83eabbf6ce676816ecb4b530e7f1d86f05","title":"Modify the MPE Risk Based Priority Settings","path":"/lrsiem/7.23.0/modify-the-mpe-risk-based-priority-settings","children":[]},{"id":"ci_850e1c1d7b4221e415f5251d1bbb00bff91646c6025156aa40b7cc812f180b24","title":"Risk Based Priority Calculator","path":"/lrsiem/7.23.0/risk-based-priority-calculator","children":[{"id":"ci_ba835c56c5b84d4ee7e650f5947b487d596047f671351f8f4f1a493cfaaad098","title":"Install the RBP Calculator","path":"/lrsiem/7.23.0/install-the-rbp-calculator","children":[]},{"id":"ci_b5398fa9b1c1181432e11eb1ba1b9db2b2a004b9ba107e708208801f235885a4","title":"Determine MPE or AIE Risk Based Priority With The RBP Calculator","path":"/lrsiem/7.23.0/determine-mpe-or-aie-risk-based-priority-with-the-rbp-calculator","children":[]},{"id":"ci_1fe5d73de1bcf5320288d77e4e2eab206d339410eb0de018a972edc5fefe0e3b","title":"Transfer AIE RBP Calculator Values to a LogRhythm Deployment","path":"/lrsiem/7.23.0/transfer-aie-rbp-calculator-values-to-a-logrhythm-deployment","children":[]},{"id":"ci_94bbd02fc1e0f3db8eba4b2c462433c707d1819bc9da6018d38d2c1c467d5d2e","title":"Host, Network, and Default DRL and STL Settings","path":"/lrsiem/7.23.0/host-network-and-default-drl-and-stl-settings","children":[{"id":"ci_7006978b71ce8747b6091c559bf54aeccd0dfc7e99b0d790aac585cc34e9a15b","title":"Known Host and Network Search Algorithm","path":"/lrsiem/7.23.0/known-host-and-network-search-algorithm","children":[]}]},{"id":"ci_0144a218f2e46de53d36cf012aed368067e0efc8b94b075fab02c6c8564e1d34","title":"Message Processing Engine RBP Algorithm","path":"/lrsiem/7.23.0/message-processing-engine-rbp-algorithm","children":[]},{"id":"ci_82a3f086fa43cf42e16df5d12c417129845166f86274a57459ffea0d37fcee0a","title":"AI Engine RBP Algorithms","path":"/lrsiem/7.23.0/ai-engine-rbp-algorithms","children":[]}]}]},{"id":"ci_ca17b4e1112cf333d987f57b8021a74b3ea51566a54e5c8d587e0a43998d60d8","title":"Job Manager Services","path":"/lrsiem/7.23.0/job-manager-services","children":[{"id":"ci_e1a0599633a9f8da998d09e53fc86b4d66a60c0d13f4ccd90891c30431080496","title":"Modify Job Manager Advanced Properties","path":"/lrsiem/7.23.0/modify-job-manager-advanced-properties","children":[]},{"id":"ci_8b671c07d04144a2dca7a6c344a9710374863d1c48c59f931bb68f60d9d04a42","title":"Modify Job Manager Basic Properties","path":"/lrsiem/7.23.0/modify-job-manager-basic-properties","children":[]},{"id":"ci_7c1ffa50fc1c21e6fab1ad99bb478ea99977556599cc8983175e4ba9841e50c0","title":"Start, Stop, and Restart Job Manager Services","path":"/lrsiem/7.23.0/start-stop-and-restart-job-manager-services","children":[]},{"id":"ci_b22d46b1d47fee349205b80fe1fdeb1bbffc629700e7aa47a2d66f2ce4aea19e","title":"Use the Job Manager Configuration Manager","path":"/lrsiem/7.23.0/use-the-job-manager-configuration-manager","children":[]}]},{"id":"ci_254ac14ba72e3206338a2830b9f694d63da761ffad541b261ee17d6f06b2bd63","title":"System Management Settings","path":"/lrsiem/7.23.0/system-management-settings","children":[{"id":"ci_790b8e58ba8d9baae07dbfff0830a4c33f275fc2c84330d0a6fb730a82a38f06","title":"Active Directory Domain Manager","path":"/lrsiem/7.23.0/active-directory-domain-manager","children":[{"id":"ci_c970ff507eb6dd8e3001c653a5191d48e746b1a47c97c342a2fbfcca15bb57a4","title":"Add Active Directory Groups as Filters","path":"/lrsiem/7.23.0/add-active-directory-groups-as-filters","children":[]},{"id":"ci_6d64c7488db772a37972a4f6183bf4d8e70d2b385ab53123c6b65b593a4cef5f","title":"Add New Active Directory Domains","path":"/lrsiem/7.23.0/add-new-active-directory-domains","children":[]},{"id":"ci_d4b6f9ff51acdd940ed2dbd775d9ff5edf5a9b7ec581d92dd0aaea6e0b00fef2","title":"Check the Active Directory Synchronization Status","path":"/lrsiem/7.23.0/check-the-active-directory-synchronization-status","children":[]},{"id":"ci_a5d580026a9ac470cbd90615d21355dddb1bbfbce3b0599259f1ca5d0af52415","title":"Modify Active Directory Domains","path":"/lrsiem/7.23.0/modify-active-directory-domains","children":[]},{"id":"ci_028de80473866e291d10a862b63b1aa4e12e2faab8f184a6fafcefe28dfe3609","title":"Retire or Activate Active Directory Domains","path":"/lrsiem/7.23.0/retire-or-activate-active-directory-domains","children":[]},{"id":"ci_15945a56bce74957b9c50aefd1ef8ff408962b68c528b799d9e1370abcea6bf7","title":"Run Active Directory Browser Investigations","path":"/lrsiem/7.23.0/run-active-directory-browser-investigations","children":[]}]},{"id":"ci_b8ef412de08d8135c496a7663fc0f5a7b2b3ea76095da980aa34e0cd4cc23715","title":"Configure Global Maintenance Settings","path":"/lrsiem/7.23.0/configure-global-maintenance-settings","children":[]},{"id":"ci_ea222ee623a13b04da4f30eb7afbbde097c0408f3abf6508592e7740b49158b2","title":"Set or Modify Data Management Settings","path":"/lrsiem/7.23.0/set-or-modify-data-management-settings","children":[]},{"id":"ci_d075948a5c3fb94afbeeba8c2e27de0e279414dce7b62d70be40daa83ccb6d86","title":"Enable Intelligent Indexing Globally","path":"/lrsiem/7.23.0/enable-intelligent-indexing-globally","children":[]}]},{"id":"ci_cd074d6b4acb3a5d0ea2879b8ec36b62ff4464cdfca30fe2abf591e566fbf8ad","title":"Update the IP Address of the Platform Manager","path":"/lrsiem/7.23.0/update-the-ip-address-of-the-platform-manager","children":[]},{"id":"ci_a570a798fa977a6705351571e67658ece419098bb4040320cd173609993cebe4","title":"Use the Platform Manager Configuration Manager","path":"/lrsiem/7.23.0/use-the-platform-manager-configuration-manager","children":[]}]},{"id":"ci_4e872e2f3c7817d988dc7bc3448867b048668cb62f53380bc5c9b7478637baf1","title":"SmartResponse","path":"/lrsiem/7.23.0/smartresponse","children":[{"id":"ci_06a091fe070411e34b1267dd33ff87c476d3e456b950b4fd6a3bb612d00d28ff","title":"Approve or Deny SmartResponse Actions in the Client Console","path":"/lrsiem/7.23.0/approve-or-deny-smartresponse-actions-in-the-client-console","children":[]},{"id":"ci_fb1e1867c3eac60a953f58d42a8f08a5bdd4cd124d6feb21e9dd3e04898e669d","title":"Develop SmartResponse Plugins","path":"/lrsiem/7.23.0/develop-smartresponse-plugins","children":[{"id":"ci_6372124e359a09015dd45a8c4301cb9e93cbef89f3dea0f749886830b172d932","title":"Create the Payload","path":"/lrsiem/7.23.0/create-the-payload","children":[]},{"id":"ci_515eadbb9fab21de4a584f66d6128b16643fcbd89ec1640c22851eee073f562e","title":"Create the Configuration File","path":"/lrsiem/7.23.0/create-the-configuration-file","children":[]},{"id":"ci_5e4ecfee955198f8f68eb49ad82eba30694f21be52f819856acb547be98f92b4","title":"Package and Test the SmartResponse","path":"/lrsiem/7.23.0/package-and-test-the-smartresponse","children":[]},{"id":"ci_f3a373e9efc6e7575cb350e703fb732bc7910fdb581b1ceb998f5e3f73baf011","title":"Deploy Custom SmartResponse Plugins","path":"/lrsiem/7.23.0/deploy-custom-smartresponse-plugins","children":[]}]},{"id":"ci_97858a3ddd3849723e92a206901adf26061ee0aaa272bee467ee9611a31e102c","title":"Import SmartResponse Plugins","path":"/lrsiem/7.23.0/import-smartresponse-plugins","children":[]},{"id":"ci_a8e7c113f609da4eff8a2b2e1bfae38f47004395df955ad5d8f5a4f4011b41b0","title":"Initiate SmartResponse","path":"/lrsiem/7.23.0/initiate-smartresponse","children":[]},{"id":"ci_509f78c999f17e5b1c4f279d6462afc05bac8a6a947260f1a4226e309147f489","title":"Preview SmartResponse Command Execution","path":"/lrsiem/7.23.0/preview-smartresponse-command-execution","children":[]},{"id":"ci_a9dd99d102259f5136a942a638306652ea6c6d4f6389bc0353ceec144bf9f4f3","title":"Test SmartResponse Plugin Actions","path":"/lrsiem/7.23.0/test-smartresponse-plugin-actions","children":[]},{"id":"ci_66a34ac048e64180c5fcc224ac2bbc3f7665f14d697857aadf3797c243f8210e","title":"Troubleshoot SmartResponse Action Testing","path":"/lrsiem/7.23.0/troubleshoot-smartresponse-action-testing","children":[]},{"id":"ci_4508be2da5c94a64b17d2ac17e0f75bd248f3f701e77ac21aa3663472892aeb8","title":"Validate SmartResponse Plugins","path":"/lrsiem/7.23.0/validate-smartresponse-plugins","children":[]}]},{"id":"ci_487deb6599569217d67aad93a3059af027336c1359a2a0c6bab6f3abf2354372","title":"System Monitor","path":"/lrsiem/7.23.0/system-monitor","children":[{"id":"ci_fd3118fb3808803ba7104b67f625719e26ef6b4a4667c814c6abe144acdf512b","title":"Agent Identification and Acceptance","path":"/lrsiem/7.23.0/agent-identification-and-acceptance","children":[{"id":"ci_310d52a6b8e37324eb47c6dbcfe6c285c553ae940979c2fabe9cfad37eaa73a1","title":"Accept a New System Monitor","path":"/lrsiem/7.23.0/accept-a-new-system-monitor","children":[]},{"id":"ci_3342206950bd4ef2b565769bdeee2f64b932d955a5c25049f3d4e711b43ba007","title":"Associate a System Monitor Agent","path":"/lrsiem/7.23.0/associate-a-system-monitor-agent","children":[]},{"id":"ci_4bac655fbe2c5c6bc2aec6b2b14930245452dcb8a2ea999099e911df73979d6b","title":"Work With New System Monitors","path":"/lrsiem/7.23.0/work-with-new-system-monitors","children":[]}]},{"id":"ci_e0b11fb0916ee94c795ede654919374429fac87538bfe7f90936fad25b2a17ef","title":"NetFlow, IPFIX, and J-Flow Collection","path":"/lrsiem/7.23.0/netflow-ipfix-and-j-flow-collection","children":[{"id":"ci_db3f9c525ca4fb1a84513bbe52b90e06319ebe6a073b93a993a776adbd603736","title":"Configure a Device or Host for NetFlow, IPFIX, or J-Flow Collection","path":"/lrsiem/7.23.0/configure-a-device-or-host-for-netflow-ipfix-or-j-flow-collection","children":[]},{"id":"ci_a4daf629f2c3d4033f7cc49a9f7d876113444691edda56bbaeb0879919e971cd","title":"Customize IPFIX Logs","path":"/lrsiem/7.23.0/customize-ipfix-logs","children":[]}]},{"id":"ci_833f0256e35b19712aaf5a463ecbc40a5952208ba3aba8404a4094e849dc5d59","title":"Work With System Monitor Agents","path":"/lrsiem/7.23.0/work-with-system-monitor-agents","children":[{"id":"ci_792f2f126fbe8903da42917908fb1e1888d21fde723fe289683f51d38f4c263f","title":"Add System Monitors","path":"/lrsiem/7.23.0/add-system-monitors","children":[]},{"id":"ci_5353f51850e413fd179a9d1f492d2d5e09e002c8ff370f037b8b75a55aa82c8b","title":"Configure the scsm Service","path":"/lrsiem/7.23.0/configure-the-scsm-service","children":[]},{"id":"ci_ef1b840b8c3c36acf9121985283bbaa23328ae21f8b829ab927443ae8fad3012","title":"Connect System Monitor Agents to Different Entities","path":"/lrsiem/7.23.0/connect-system-monitor-agents-to-different-entities","children":[]},{"id":"ci_8c32fa9c02b899714401c573dfcadcb6bcefcd0b484f76d3799ec96f96a4f285","title":"Connect System Monitor Agents to New Data Processors","path":"/lrsiem/7.23.0/connect-system-monitor-agents-to-new-data-processors","children":[]},{"id":"ci_c1276aedafc41575c62d8ff38c01543622910d66be2f10a1278b9f139e18ce67","title":"Connect System Monitor Agents to Existing Data Processors","path":"/lrsiem/7.23.0/connect-system-monitor-agents-to-existing-data-processors","children":[]},{"id":"ci_26e6d4cc0cf9f99f20132483835df535182460026eb34f5059ed7ddbb8f783cb","title":"Data Processor Pooling","path":"/lrsiem/7.23.0/data-processor-pooling","children":[{"id":"ci_49ff840de8b5f6b9264a557df71d4029f67b263c13f52940d0769753087c7a11","title":"Data Processor Pool Manager","path":"/lrsiem/7.23.0/data-processor-pool-manager","children":[]},{"id":"ci_d2cfa2d20c35d8fef2ac0e2dd5b0f88d621a28ef3d1d1f399083a459e0570661","title":"Assign a Data Processor to a DP Pool","path":"/lrsiem/7.23.0/assign-a-data-processor-to-a-dp-pool","children":[]},{"id":"ci_a13cd9678959b38121281026da2077a8cc01df9f0a23436ac5bc1e0281cdf601","title":"Remove a Data Processor from a DP Pool","path":"/lrsiem/7.23.0/remove-a-data-processor-from-a-dp-pool","children":[]},{"id":"ci_4e8842f940be3f7d26f330081e8ab24cbd310e0682f2304fe8058a251ead3a90","title":"Configure a System Monitor Agent into DP Pool Mode","path":"/lrsiem/7.23.0/configure-a-system-monitor-agent-into-dp-pool-mode","children":[]},{"id":"ci_287d1daced03c97adbb556cf62f64db5b6e1833f2f560b57660ea5809ff857ea","title":"Edit System Monitor Data Processor Settings","path":"/lrsiem/7.23.0/edit-system-monitor-data-processor-settings","children":[]},{"id":"ci_585fd06dd8eb88ceb0c62ca05b3ec2156bb73e01203fd56f43e6e8939990fcd2","title":"Assign a DP Pool to a System Monitor Configuration Policy","path":"/lrsiem/7.23.0/assign-a-dp-pool-to-a-system-monitor-configuration-policy","children":[]}]},{"id":"ci_c123fb1db6ae3183295c6370491befcef53d641dbd96613e91b6525755061657","title":"License System Monitors","path":"/lrsiem/7.23.0/license-system-monitors","children":[]},{"id":"ci_75756267f7916fecda2c2aa9b0f1e1054730fb8f4a7d1424732c08e7fc1560b7","title":"Load Balanced Agent Groups","path":"/lrsiem/7.23.0/load-balanced-agent-groups","children":[{"id":"ci_b6b33987bf9df96b43a1097b40ebf75ee5af8e26394ecb920574cf0083f0110f","title":"Load Balanced Group Manager","path":"/lrsiem/7.23.0/load-balanced-group-manager","children":[]},{"id":"ci_48e5d766b285196dda84e147b565dc949603ff75bd41026b6f0dc539efa35293","title":"Assign Agents to a Load Balanced Group","path":"/lrsiem/7.23.0/assign-agents-to-a-load-balanced-group","children":[]}]},{"id":"ci_fa7339202d4b2bf39f1de0afae249e0ecd3511a983ec02cefb3c1141fcd1f03c","title":"Modify System Monitor Advanced Properties","path":"/lrsiem/7.23.0/modify-system-monitor-advanced-properties","children":[]},{"id":"ci_5dc801c667af92c68c726cf227fe30598af23a41fbb41054e858b8dfac112d6d","title":"Modify Properties of Multiple System Monitor Agents","path":"/lrsiem/7.23.0/modify-properties-of-multiple-system-monitor-agents","children":[]},{"id":"ci_acae54ad5d66b3ced0eb9460a835c67c7a1a26f56400e682bec094e7be29e663","title":"Modify System Monitors","path":"/lrsiem/7.23.0/modify-system-monitors","children":[]},{"id":"ci_b0203a89ee17679be256d6b8aefd22773b7111af5a3a9b8d7989e60c3e749d13","title":"Configure a Secure Syslog Agent","path":"/lrsiem/7.23.0/configure-a-secure-syslog-agent","children":[]},{"id":"ci_98f72a9eed5669af240ab6306813510722f44baa94efa1deccdc1051baec05ae","title":"Retire or Activate System Monitor Agents","path":"/lrsiem/7.23.0/retire-or-activate-system-monitor-agents","children":[]},{"id":"ci_f957e294719062ec3a7eec38664b2a9c7ce682ba5636c0590ef35c85bf1e86e3","title":"Revert System Monitor Agents to Previous Configurations","path":"/lrsiem/7.23.0/revert-system-monitor-agents-to-previous-configurations","children":[]},{"id":"ci_a424a7cc02bdfdf4fd52f40c6a623e6b765ba3f25e942b2e20287e018b394199","title":"Startup and Shutdown System Monitors on Linux","path":"/lrsiem/7.23.0/startup-and-shutdown-system-monitors-on-linux","children":[]},{"id":"ci_85bf0d619de157d0908907faf164ed31fa1d1b4ebe4f28409918d1a93d2130a1","title":"Stop, Start, and Restart Agent Services on Windows","path":"/lrsiem/7.23.0/stop-start-and-restart-agent-services-on-windows","children":[]},{"id":"ci_66891716433eceeea21260a360c1f03d36742c3e47f477adf27d319aa784eeb7","title":"Generic JSON Collector","path":"/lrsiem/7.23.0/generic-json-collector","children":[]},{"id":"ci_ba84a57402bd6f335fabfe81d8b982e0e288255c2861c5bd358d193dd9a34284","title":"Modify System Monitor Basic Properties","path":"/lrsiem/7.23.0/modify-system-monitor-basic-properties","children":[]}]},{"id":"ci_d8b16a6b1a866a5ce823cede862aad24130cedeaa3f4ec2a6bb15478d833ab87","title":"Register Agent to Host with Duplicate Name","path":"/lrsiem/7.23.0/register-agent-to-host-with-duplicate-name","children":[]},{"id":"ci_29c025a6a186970647d71031c4071d82aa9b8db0cab1d94f4577c89447bcf7f5","title":"sFlow Collection","path":"/lrsiem/7.23.0/sflow-collection","children":[{"id":"ci_92670e3e7f1a7bef84d53b10869063012fff93ba731d4628c36629fb86262338","title":"Configure a Device or Host for sFlow Collection","path":"/lrsiem/7.23.0/configure-a-device-or-host-for-sflow-collection","children":[]}]},{"id":"ci_49fb9d8526102309bba8748a673320b6961475109f5380dfc02e514b2af3879c","title":"SNMP Trap Receivers","path":"/lrsiem/7.23.0/snmp-trap-receivers","children":[{"id":"ci_c9ff7d22a7e940eab874effa4f09523cb22fb5ee07164c09b17c165a3dd2ee4f","title":"Configure a System Monitor for SNMP Trap Receiver","path":"/lrsiem/7.23.0/configure-a-system-monitor-for-snmp-trap-receiver","children":[]}]},{"id":"ci_f8a316cfcf494a3877b398b1797086701f2bb58a0b4e91b9551f422812ba8050","title":"System Monitor Configuration Policy Manager","path":"/lrsiem/7.23.0/system-monitor-configuration-policy-manager","children":[{"id":"ci_b22dbe77e0eaef6035f623c8026e813fdbf8b01419589d4e0e77d208e46bc302","title":"Apply System Monitor Configuration Policies","path":"/lrsiem/7.23.0/apply-system-monitor-configuration-policies","children":[]},{"id":"ci_652f89abaabbe622560b9f99e19ee8fb567416bb8ff48d67f8288d2c0601de8b","title":"Assign Configuration Policies to Multiple System Monitor Agents","path":"/lrsiem/7.23.0/assign-configuration-policies-to-multiple-system-monitor-agents","children":[]},{"id":"ci_3f1ab05b2f5a2b78fd4a09d9bdf320da3dc388b0b541124fa08ca7286c7d4800","title":"Create New System Monitor Configuration Policies","path":"/lrsiem/7.23.0/create-new-system-monitor-configuration-policies","children":[]},{"id":"ci_3de6deedab94599ae51f608a7a53e3cff13d6e5f91ca08cfe67e6c16797e554b","title":"Delete System Monitor Configuration Policies","path":"/lrsiem/7.23.0/delete-system-monitor-configuration-policies","children":[]},{"id":"ci_9b9cd34fda0038406beff486c1e3218e1ea20b68c5125d3931113b96c9127a19","title":"Modify Configuration Policies on System Monitor Agents","path":"/lrsiem/7.23.0/modify-configuration-policies-on-system-monitor-agents","children":[]},{"id":"ci_0ad9fc56f663972f44cfd96d7bfdccf54de6655b9a996e7df5504832d6de614b","title":"Modify System Monitor Configuration Policies","path":"/lrsiem/7.23.0/modify-system-monitor-configuration-policies","children":[]}]},{"id":"ci_4bd7189e75d2a36e3ccb9a1e24138fafee67247e26bbe8ab9387d7a9b797a747","title":"Unidirectional Windows Agent Settings","path":"/lrsiem/7.23.0/unidirectional-windows-agent-settings","children":[{"id":"ci_298ad47ce0449078593b2306d08f8a8fe717bb421fba6112d59926bc56ee04c7","title":"Confirm a SysMon Agent is Sending Logs","path":"/lrsiem/7.23.0/confirm-a-sysmon-agent-is-sending-logs","children":[]},{"id":"ci_4bfccabb7fd0bdb78e06f4283a54cdc708107ea2a7e9c5da8abd72e12eb498b1","title":"Copy the System Monitor Agent Configuration File to the Agent Machine","path":"/lrsiem/7.23.0/copy-the-system-monitor-agent-configuration-file-to-the-agent-machine","children":[]},{"id":"ci_b964e36e2d9c87e0fbadde0c4d4f4c1090c14a9fd8985c030bdb26ac69c39307","title":"Enable the Unidirectional Feature on the Data Processor","path":"/lrsiem/7.23.0/enable-the-unidirectional-feature-on-the-data-processor","children":[]},{"id":"ci_6e3611357300d80f5f1ade27365e4df0422c9f2035642c429b7de69e4e6aa7b5","title":"Enable the Unidirectional Feature on the System Monitor Agent","path":"/lrsiem/7.23.0/enable-the-unidirectional-feature-on-the-system-monitor-agent","children":[]},{"id":"ci_7ee81601ab93e1c52d54d188d77345e3f0f89ffeee16ce9a2b73216b5a69d5e1","title":"Export the System Monitor Agent's Local Configuration File","path":"/lrsiem/7.23.0/export-the-system-monitor-agent-s-local-configuration-file","children":[]}]},{"id":"ci_6d2889f2a42dab50af344c54a0aa1ccd1b81d12e9f05e9d20c3d05cd44c1f3b8","title":"Windows Event Log Collection","path":"/lrsiem/7.23.0/windows-event-log-collection","children":[{"id":"ci_da136d3ef18505a607855d971ac7c05b620d30e1e602eeeeb4800afe076545f8","title":"Collect Non-Domain Logs Remotely","path":"/lrsiem/7.23.0/collect-non-domain-logs-remotely","children":[]},{"id":"ci_7529bfd50fa14372a705a0805c1d7e645d63576853aa6bb4a65de835a3f49ab6","title":"Create a Least-Privileged Domain User Account for Remote Log Collection","path":"/lrsiem/7.23.0/create-a-least-privileged-domain-user-account-for-remote-log-collection","children":[]},{"id":"ci_dfe0b0494365526a7f99ebcb3adee4ae6a4e052e77e09512e87e88dedd7e6aec","title":"Set Up Remote Log Collection","path":"/lrsiem/7.23.0/set-up-remote-log-collection","children":[]}]},{"id":"ci_f86a8acce11a3c7ceb668aede6f8164794c9fde641679a3efc0999550bb52c22","title":"Syslog Collection","path":"/lrsiem/7.23.0/syslog-collection","children":[{"id":"ci_6d45d458a2f7ea789cbf691e6b2386b15fa7fbee7eff2c871856eecade4707c4","title":"Configure a Device or Host for Syslog Collection","path":"/lrsiem/7.23.0/configure-a-device-or-host-for-syslog-collection","children":[]}]}]}]},{"id":"ci_96a1c3509c992fd27f3f4d2a9f3156cbf4ae4468630cb23c3300beb636052a69","title":"Client Console Analyst Guide","path":"/lrsiem/7.23.0/client-console-analyst-guide","children":[{"id":"ci_f8d7a75ab208c31eb45d6565560bb53b09d924a28ed89875402da4497e41c40d","title":"Filters and Wizards","path":"/lrsiem/7.23.0/filters-and-wizards","children":[{"id":"ci_d789cebfc1dbf79798299bfd77d51cc21c18578005dfa699cc27eb8907f19fec","title":"Use Filter Modes","path":"/lrsiem/7.23.0/use-filter-modes","children":[]},{"id":"ci_cbd72655994e2970c781507594f3eec9c8bade0e1bf1443392e010bef7e56613","title":"Use Lists with Filters","path":"/lrsiem/7.23.0/use-lists-with-filters","children":[]},{"id":"ci_fd407090e3c27c9b09c62aea4cfcb3c9c00d14d96678d7f5b31cf5461735c3e6","title":"Use Multiple Filters","path":"/lrsiem/7.23.0/use-multiple-filters","children":[]},{"id":"ci_eb09ffd98fda17bc054071734222f797b00cf4d4c938584ec725f3374ef1e1ea","title":"Use Multi-Type Filters","path":"/lrsiem/7.23.0/use-multi-type-filters","children":[]},{"id":"ci_ccfdbceb4f4c0e85266458428ef731e7173937db8899e32ab1158fce7f1d483e","title":"Use Search Strings with Filters","path":"/lrsiem/7.23.0/use-search-strings-with-filters","children":[]},{"id":"ci_7e6b8276d9ab46d2f5914d426091529ea02ccc61961e784f89e10abd26e1230b","title":"Use SQL Pattern Match with Filters","path":"/lrsiem/7.23.0/use-sql-pattern-match-with-filters","children":[]},{"id":"ci_78134986c4b14a76ded2c5074b99bffb40fc3a2b5de2c57d67493b16d1ebc465","title":"Use the Filter Editor","path":"/lrsiem/7.23.0/use-the-filter-editor","children":[{"id":"ci_86db2931d2ec2b0241d311e874be6555de01142db63a6e7969d3ef1bb03cfef8","title":"Filters—Action","path":"/lrsiem/7.23.0/filtersaction","children":[]},{"id":"ci_cf0c6382b1eb37fcbe76703693f1666d569a21b39e3a799449e89cecd2d18124","title":"Filters—Aggregation","path":"/lrsiem/7.23.0/filtersaggregation","children":[]},{"id":"ci_a67a0a334b7450d1066db14661d1a0c0e72bc1baabbc760485528d838389e0dd","title":"Filters—AIE Summary Fields","path":"/lrsiem/7.23.0/filtersaie-summary-fields","children":[]},{"id":"ci_fa48cb6f17a3d09a345eedb172045f94de5fdc3048490477ac5543ca45c2012d","title":"Filters—Data Fields","path":"/lrsiem/7.23.0/filtersdata-fields","children":[]},{"id":"ci_51fd1e4a507a71f4b2e5bbdbac716053f8dc38e5612bdca2bf146f91daa7a1ad","title":"Filters—Day and Time Criteria","path":"/lrsiem/7.23.0/filtersday-and-time-criteria","children":[]},{"id":"ci_51142de319b9c63a32addaba0b341b7a528810a1cf6d089c207f59d3a727003f","title":"Filters—Distinct","path":"/lrsiem/7.23.0/filtersdistinct","children":[]},{"id":"ci_487b7e603b4a916a106c8486bbd9ce91a1682ede43e827c17b1153fb0e38e3e5","title":"Filters—Exclude Filter","path":"/lrsiem/7.23.0/filtersexclude-filter","children":[]},{"id":"ci_85d4e9a442ab577415c625ea0a0d7ec4e63d28527e579adf07a71566e2fabf4a","title":"Filters—Expressions","path":"/lrsiem/7.23.0/filtersexpressions","children":[]},{"id":"ci_368120c5beccb2f669c73925dfea76f741cb83bb57f22a153e35d995fefb2424","title":"Filters—Group By","path":"/lrsiem/7.23.0/filtersgroup-by","children":[]},{"id":"ci_fcd745362bcb51daaf57255385626f4802206d7d8f6527f14c04b96f1f8f6de5","title":"Filters—Include Filter","path":"/lrsiem/7.23.0/filtersinclude-filter","children":[]},{"id":"ci_a30f980d8f2135513c5e936c3b58d14543161ac6a80e6ad5900c95891c55ae09","title":"Filters—Information","path":"/lrsiem/7.23.0/filtersinformation","children":[]},{"id":"ci_c7a67b9f976597b840ae399f45c0eda37a7397fc066799f01accdd948944b673","title":"Filters—Log Source Criteria","path":"/lrsiem/7.23.0/filterslog-source-criteria","children":[]},{"id":"ci_4a78c7954881a733644d59417afecd0ab667556d76cd49d4696e2e583f79c44f","title":"Filters—Notify","path":"/lrsiem/7.23.0/filtersnotify","children":[]},{"id":"ci_7c627496219593b2bd25166b8ec73a96755dfae35d798c3a986729866ebcc975","title":"Filters—Primary Criteria","path":"/lrsiem/7.23.0/filtersprimary-criteria","children":[]},{"id":"ci_9562d43f2e16e7d7d9266a0cfce2ab78159083814c9fda24ccd0aec0d4be6ea4","title":"Filters—Profile","path":"/lrsiem/7.23.0/filtersprofile","children":[]},{"id":"ci_73752024256087155e9cdd5dc6132afb6e29e8aba2c4156ecdf07d58093b52d5","title":"Filters—Schedule","path":"/lrsiem/7.23.0/filtersschedule","children":[]},{"id":"ci_0178b04244cf2429cd10bbee2f1945d41ab97d29809086aac2341c15568484e9","title":"Filters—Settings","path":"/lrsiem/7.23.0/filterssettings","children":[]},{"id":"ci_c622624288e56a0aab91bd6331cfafd07f4de7c89ee624858aadbec3e61629f8","title":"Filters—Thresholds","path":"/lrsiem/7.23.0/filtersthresholds","children":[]},{"id":"ci_17cd05ccbea65124b2a59721ac647ada3afc87a7107b1c7cfae44f7e928eab5e","title":"Filters—Time and Schedule","path":"/lrsiem/7.23.0/filterstime-and-schedule","children":[]},{"id":"ci_b428c88db07c79898687f43df880d8f75b953835cd7a8e1d3b713434e0b0d987","title":"Filters—Unique Values","path":"/lrsiem/7.23.0/filtersunique-values","children":[]}]}]},{"id":"ci_692798d2c6616eb348d13ca809770af09c59ba195cf7c7bf30edca228a3d56c5","title":"General Console Features","path":"/lrsiem/7.23.0/general-console-features","children":[{"id":"ci_0292a7bed7b3e5fc47e29a677b04737105679afefb54bba2c94e188e6f9edf26","title":"Export Grid to File","path":"/lrsiem/7.23.0/export-grid-to-file","children":[]}]},{"id":"ci_83d3c902a7933c74049ed1f153a8c3e4c7cceb510f1745d8a96f8323d28c3025","title":"Layouts","path":"/lrsiem/7.23.0/layouts","children":[{"id":"ci_ebf77ede8082207abe3773d06a9801aaff11dd11f378d65bec91c8f12b2bccaa","title":"Clone Existing Layouts","path":"/lrsiem/7.23.0/clone-existing-layouts","children":[]},{"id":"ci_83680a3deff2779f740401a5da552f10a93234c9da7f4493e56cfcedf8554757","title":"Create New Layouts","path":"/lrsiem/7.23.0/create-new-layouts","children":[]},{"id":"ci_373b8f8e4076e350200e2303f99c132c46bd1744396a8d86b2d533458e6aa91c","title":"Delete Layouts","path":"/lrsiem/7.23.0/delete-layouts","children":[]},{"id":"ci_148af7d59a0af36cbbb112c0e90c7f5a91b0f0bdd45a480ead49469dc3c47a8e","title":"Import and Export Layouts","path":"/lrsiem/7.23.0/import-and-export-layouts","children":[]},{"id":"ci_50727fabfde6cb7a10e2dbdd160d9800a7aa65c6681783d9aaf8fe54dcac2986","title":"Make or Clear Default Layouts","path":"/lrsiem/7.23.0/make-or-clear-default-layouts","children":[]},{"id":"ci_935703ea62a337dccfb32f6e08aabf8a01571161da1841e6547f3b728a76c71a","title":"Modify Layout Properties","path":"/lrsiem/7.23.0/modify-layout-properties","children":[]},{"id":"ci_cfa6bbf195abe3d7481c9b941ff9bac3e250e53ff25dbb2ae5b47b2d91619d09","title":"Reset Layouts","path":"/lrsiem/7.23.0/reset-layouts","children":[]},{"id":"ci_29bcb79785a64762d9a8c5abd471f6b00962e7cd36fb20bd7cd4de3d41d21a22","title":"Save Layouts","path":"/lrsiem/7.23.0/save-layouts","children":[]},{"id":"ci_a104cc5268e21158e972bf9d91860756d80402dd4e60bacae3767f2668cc3d4a","title":"Set Color Themes in Layouts","path":"/lrsiem/7.23.0/set-color-themes-in-layouts","children":[]}]},{"id":"ci_28707dc1e86a165979f60db79332c57d812d5d8aa766d54d20315cb22c819642","title":"Lists in the Client Console","path":"/lrsiem/7.23.0/lists-in-the-client-console","children":[{"id":"ci_fe4a844b24831dae8e18b57632a484f9c3d8b72beea4241ae71afe37842a90fd","title":"Add Expiring Items to a List","path":"/lrsiem/7.23.0/add-expiring-items-to-a-list","children":[]},{"id":"ci_19ec68d99eb6cf83f653a43f54440ec4fa55e75241d10bfaf103d3c920259e50","title":"Add Values to a List","path":"/lrsiem/7.23.0/add-values-to-a-list","children":[]},{"id":"ci_96d2ea1eb67d7306e72b4ad1fe952e8c04fc8729d4b4efd88fa1ea9729efb142","title":"Clone Lists","path":"/lrsiem/7.23.0/clone-lists","children":[]},{"id":"ci_047625c10e59cdcbf24b930714679b8d75a065794cf9297d8e4c70e380e72c67","title":"Create Lists in the Client Console","path":"/lrsiem/7.23.0/create-lists-in-the-client-console","children":[]},{"id":"ci_3ac9d05654fa111669766cabbe16333ec3753529b5351ae9ee4f5620d8677094","title":"Modify the Properties of Lists","path":"/lrsiem/7.23.0/modify-the-properties-of-lists","children":[]},{"id":"ci_bcab51315fe769ef3782e0ced39c1a9e66fcf1d7f5fb1cb493a08c4358941c27","title":"Remove List Items","path":"/lrsiem/7.23.0/remove-list-items","children":[]},{"id":"ci_0845565542193ff21fecc85e0db93686bbfc0c4c7bf59027cf5815984ba84880","title":"Reset Expiration Date for List Items","path":"/lrsiem/7.23.0/reset-expiration-date-for-list-items","children":[]}]},{"id":"ci_bb342b05ae7ffd916067984ee9a1c33df7fb9b66cae8b62b3c2e4299f45813be","title":"Message Processing Engine Rule Builder","path":"/lrsiem/7.23.0/message-processing-engine-rule-builder","children":[{"id":"ci_781eee493679f2ae11fb98a6196e2035bcd3991dd26871ffe038b9961f8f6367","title":"Application Manager","path":"/lrsiem/7.23.0/application-manager","children":[{"id":"ci_2b94d66e7ab9d846e59708d00c0c606fecbec5134ea69a42e42d23047ff0a21d","title":"Create New Application Records","path":"/lrsiem/7.23.0/create-new-application-records","children":[]},{"id":"ci_e0c4e736ed9b5ffc9001bbdb7aa3c5e6eb456450034ee81bf655afcbaf9127c9","title":"Modify Application Record Properties","path":"/lrsiem/7.23.0/modify-application-record-properties","children":[]},{"id":"ci_2e0d2eeb99b095467b03f4721d579a9b863269466e9babbd9975e9e05dd147aa","title":"Refresh the Application Manager","path":"/lrsiem/7.23.0/refresh-the-application-manager","children":[]},{"id":"ci_04110753de4815fc0070df14334f0904e8bc64e8e0bbb239b5ad4d64a71a6689","title":"Retire or Activate Application Records","path":"/lrsiem/7.23.0/retire-or-activate-application-records","children":[]}]},{"id":"ci_79cf5a34649db5c5f0489cc22e8acade4d9fdc3c670a3bb08a4923329485bd42","title":"Common Event Manager","path":"/lrsiem/7.23.0/common-event-manager","children":[{"id":"ci_a143b8f3118ca16fe2374f4e286ad834bc32faaf01f1a5bf30422efb78dac6f0","title":"Create Common Events","path":"/lrsiem/7.23.0/create-common-events","children":[]},{"id":"ci_88fed68fcc60a4e4eb90b8b6f9890d59b24e69bd2b4a52f0035213c29389554a","title":"Delete Common Events","path":"/lrsiem/7.23.0/delete-common-events","children":[]},{"id":"ci_abf708089af818d2e21a7ea058ce91ee481727cf0060a2ac5239bf35e6de63f1","title":"Modify Common Events","path":"/lrsiem/7.23.0/modify-common-events","children":[]},{"id":"ci_1bb2c18a9674f0389e2c3ba4aa73abe76425caf86df9843f404b36be493e2a1c","title":"Search for Common Events","path":"/lrsiem/7.23.0/search-for-common-events","children":[]}]},{"id":"ci_5cc32ed95b10c258427e3aabf1ea79717e9531a972169bbf0da63bac8ac893df","title":"Create MPE Policies","path":"/lrsiem/7.23.0/create-mpe-policies","children":[]},{"id":"ci_535de157dee9c6aca968763e1e2811d39c9a9ae9b52060d7f77a1cc1914c00ef","title":"Create New Base MPE Rules","path":"/lrsiem/7.23.0/create-new-base-mpe-rules","children":[]},{"id":"ci_f844fc426b728e1e87c3aa3ac7ab9a5f0992f14b617de161fb0442909fed02b0","title":"Edit MPE Rules","path":"/lrsiem/7.23.0/edit-mpe-rules","children":[]},{"id":"ci_b2321658b7c4b4c1946a451292de97cd7345b7fd45275b148e93f461a500a967","title":"Edit Sorting Properties for System Base MPE Rules","path":"/lrsiem/7.23.0/edit-sorting-properties-for-system-base-mpe-rules","children":[]},{"id":"ci_6308f5ae5e7189add9c801d7f3e2b6dbfcd8c17e0258af5b3ba20ad1dd693151","title":"Import and Export MPE Rules","path":"/lrsiem/7.23.0/import-and-export-mpe-rules","children":[]},{"id":"ci_aa44b8acc183d757a418fb8fd6e724d666aa02e5fcdd11cffbb9181297f2ca66","title":"Regular Expression Characters and Practices","path":"/lrsiem/7.23.0/regular-expression-characters-and-practices","children":[]},{"id":"ci_b2bc40062f1c45f2b9cabaf491aa0aa6453b6fda32b990a22fad88523f8610d6","title":"Create Custom MPE Sub-Rules","path":"/lrsiem/7.23.0/create-custom-mpe-sub-rules","children":[]}]},{"id":"ci_37eb22195e5e89beb7744c2688f943476467700b7389bd3b66f67bd27b6d5635","title":"Monitor, Search, and Analysis","path":"/lrsiem/7.23.0/monitor-search-and-analysis","children":[{"id":"ci_f3c095bf6c5ca4e12028cf4e0ef2ab9c3d03a0ee9a4a828c155493238c25ad9d","title":"Alarm Viewer","path":"/lrsiem/7.23.0/alarm-viewer","children":[{"id":"ci_ed0b2c98c2d2278f79c92b01fb9518232278815e7cb61d99f85b5c744b003566","title":"Change the Status of a Single Alarm","path":"/lrsiem/7.23.0/change-the-status-of-a-single-alarm","children":[]},{"id":"ci_dedf6185e71aaec2f37b7449ab344eb93b8a9f9b5950c5b806937e37ab8ef962","title":"Change the Status of Multiple Alarms","path":"/lrsiem/7.23.0/change-the-status-of-multiple-alarms","children":[]},{"id":"ci_71ff61b50db7ca813e26b1125372ffbb0efa62e4dba86c170e1caa7fa819f2b4","title":"Create Alarm Lists","path":"/lrsiem/7.23.0/create-alarm-lists","children":[]}]},{"id":"ci_263852470e011fa96656d82c29d619ef4c79ac3cb307ece615ed12994be95470","title":"Investigator","path":"/lrsiem/7.23.0/investigator","children":[{"id":"ci_4470efd02f9e7fe22111438010c2945ebd6bb79d2cb50b7d4c314787903b3e20","title":"Change Share Permissions on a Saved Investigation","path":"/lrsiem/7.23.0/change-share-permissions-on-a-saved-investigation","children":[]},{"id":"ci_9e0cd4c475e459d66cd6b5b9906cef5f706aff54b4c838bf029d20738f06f8a4","title":"Create Investigations","path":"/lrsiem/7.23.0/create-investigations","children":[]},{"id":"ci_672bbeda4a313ab8a5f93214ec5391480351024e26b598c517db43527e176be9","title":"Drill Down on a Single Item in Investigation Results","path":"/lrsiem/7.23.0/drill-down-on-a-single-item-in-investigation-results","children":[]},{"id":"ci_904213bf405b6537a5d4f8781a288863736a6e78f8f6f4a1132c10c128f45239","title":"Drill Down on Multiple Items in Investigation Results","path":"/lrsiem/7.23.0/drill-down-on-multiple-items-in-investigation-results","children":[]},{"id":"ci_b885a68c98af87130b3c7f0fffeebfea1ecb3b469fbcf7da80b6bfed8cc719c1","title":"Import and Export Investigations","path":"/lrsiem/7.23.0/import-and-export-investigations","children":[]},{"id":"ci_cfb5854a625fd58b76dd7751f49a3145b6b409e4ddc3831904c45bb4a5b58481","title":"Run Saved Investigations","path":"/lrsiem/7.23.0/run-saved-investigations","children":[]},{"id":"ci_0a3ae26803054a8b24bcbb10439418c13f33dbb07884a882ffdd8685491734ee","title":"Save Investigations with Report Packages","path":"/lrsiem/7.23.0/save-investigations-with-report-packages","children":[]},{"id":"ci_daa231ec6d0b298c1a1d823cf0db445c0a9156d5dc8d5d066557be5199b4f16d","title":"Save Investigations with Report Templates","path":"/lrsiem/7.23.0/save-investigations-with-report-templates","children":[]},{"id":"ci_2df286a1926fb64131abc7127f1425626ea42b3a87ba908e53519261e13e5c10","title":"Search for Most Frequent Common Events","path":"/lrsiem/7.23.0/search-for-most-frequent-common-events","children":[]},{"id":"ci_b4a646b6c28c22f07a7a66973714a20e01f76face2fa281dcb0f0b4987d1d65e","title":"View Metadata in the Log Viewer Tab","path":"/lrsiem/7.23.0/view-metadata-in-the-log-viewer-tab","children":[]},{"id":"ci_36f9fff4828e5ef737322ccb290e687bc6ef8af1d7e2309b82b80b0953ecd764","title":"Work With Investigation Result Graphs","path":"/lrsiem/7.23.0/work-with-investigation-result-graphs","children":[]},{"id":"ci_f3c2bdd0767a4f88cf28402734f2839b472520b7d29440b6c50edcabfac4ca32","title":"Work with Log Miner","path":"/lrsiem/7.23.0/work-with-log-miner","children":[]},{"id":"ci_26e723837891810de03a678ea1985d24024384e747c50242e73726a97eebe681","title":"Work With Network Visualization Diagrams","path":"/lrsiem/7.23.0/work-with-network-visualization-diagrams","children":[]}]},{"id":"ci_078108ac2c064307b69ce3ab8165754d437b7572f4cde1160644b39bc7e669ec","title":"Personal Dashboard","path":"/lrsiem/7.23.0/personal-dashboard","children":[{"id":"ci_080a0a1e2f5bbc8aef1e5bdef3129d93b03c0b626597faa7e78349ea44faa1f3","title":"Add Personal Dashboard Filters","path":"/lrsiem/7.23.0/add-personal-dashboard-filters","children":[]},{"id":"ci_55f89a5b604a6e98252b3deec5589498194f31829110250bf91f1110f16ad0b2","title":"Apply Personal Dashboard Filters","path":"/lrsiem/7.23.0/apply-personal-dashboard-filters","children":[]},{"id":"ci_10af1198eed7bd51e79447efdac2a50d7fb1f52c19fc38029212694f16d9184d","title":"Clone Personal Dashboard Filters","path":"/lrsiem/7.23.0/clone-personal-dashboard-filters","children":[]},{"id":"ci_6110d47da499eec465ee84f5a065ea3db90de7e4eff180c8d4cab2b8784c6069","title":"Configure the Personal Dashboard Display","path":"/lrsiem/7.23.0/configure-the-personal-dashboard-display","children":[]},{"id":"ci_31e97072abe6c4157ac51367e0cd4cfad82c3ddde9b0d01b5b9d1048689fcda8","title":"Delete Personal Dashboard Filters","path":"/lrsiem/7.23.0/delete-personal-dashboard-filters","children":[]},{"id":"ci_ebf8899e52057d6daea7fed3d50cf2fd02e0363066e143924bb8d9894f638362","title":"Drill Down on Dashboard Data","path":"/lrsiem/7.23.0/drill-down-on-dashboard-data","children":[]},{"id":"ci_d7d51dcaae42bb94dac0aead8cb95a1ca310e27e4c62a08026e5b48bad06f0f3","title":"Modify the Properties of Personal Dashboard Filters","path":"/lrsiem/7.23.0/modify-the-properties-of-personal-dashboard-filters","children":[]}]},{"id":"ci_94b5a61470f516f6a0d8d7d40e116eca2c1ba717e5d80071f245b67351d68d4e","title":"Quick Search Toolbar","path":"/lrsiem/7.23.0/quick-search-toolbar","children":[{"id":"ci_b4744990909f5c1f1f5e6fbebdde1f7b7d3c6acff3a13b77b4cd52b1136d235e","title":"Use the Quick Search Toolbar","path":"/lrsiem/7.23.0/use-the-quick-search-toolbar","children":[]}]},{"id":"ci_883fbc5384866eb0eb298411795ef3a6831281700fd6dca6a8b6b64d3b9a7a4f","title":"Run Contextualize","path":"/lrsiem/7.23.0/run-contextualize","children":[]},{"id":"ci_c8ce9533039b91309f1fc2b986f9731748b68068931106d79dbfe7a3e5cff527","title":"Run Correlate","path":"/lrsiem/7.23.0/run-correlate","children":[]},{"id":"ci_7b5cb820ab00a0a61378bedd46864dde659b9f15f5a4c844f66e316c9cce5574","title":"Tail","path":"/lrsiem/7.23.0/tail","children":[{"id":"ci_1461cac18affe93a4757e84e05ea9b062f325d47a30c36e08068c0512ab74dae","title":"Create New Tails","path":"/lrsiem/7.23.0/create-new-tails","children":[]},{"id":"ci_0e7ef21bffd13f730afe7a6dcf0a8da57ea97a47cb333b05f32ceeed9d98ddcc","title":"Run Saved Tails","path":"/lrsiem/7.23.0/run-saved-tails","children":[]},{"id":"ci_bda513e42c62944afa2b9e2441b9dfeac6d9b3980581c345561df38e5d352715","title":"Tail Log Sources","path":"/lrsiem/7.23.0/tail-log-sources","children":[]}]},{"id":"ci_6ea7ad5c48979cf2e2d35fe86ffcfdf479e1a58ac7618a0d99bdba1e894950c8","title":"TopX Analysis","path":"/lrsiem/7.23.0/topx-analysis","children":[{"id":"ci_92f6ea3b66fc872e56dbdcc3af84c092eb925a52ccf0520a38058848419c5a9b","title":"Analyze TopX Results","path":"/lrsiem/7.23.0/analyze-topx-results","children":[]},{"id":"ci_d338a116c36408abcf01ecb564bc44a2eaf86eee07589fffa1da26ecc7dce4b7","title":"Configure TopX Widgets","path":"/lrsiem/7.23.0/configure-topx-widgets","children":[]}]}]},{"id":"ci_741d3902637ab49e498aaa1c516dcad2fcd98eac9c3e7063854274925ba94d7e","title":"My LogRhythm","path":"/lrsiem/7.23.0/my-logrhythm","children":[{"id":"ci_1ad49f2e27ea75b56b7907367ccb990dbc97bb430804afc4d6cece70343a7e6b","title":"Add or Modify a Person Record","path":"/lrsiem/7.23.0/add-or-modify-a-person-record","children":[]},{"id":"ci_879f0725e6decd6ae09d078da0eb96511c74cbef58c19fe09a09c796ba29186e","title":"Change Your Password","path":"/lrsiem/7.23.0/change-your-password","children":[]},{"id":"ci_e9fe220e0181ee917f7cab7a5fdfe4b5b1f6a3ebcc96963e702b9fd4b1c2d3c1","title":"Create Email Notification Policies","path":"/lrsiem/7.23.0/create-email-notification-policies","children":[]},{"id":"ci_74558e4130993a577c35c1b42a9b06087c763bb6a8443a39b38b1deeda75bcbf","title":"Manage Your Preferences","path":"/lrsiem/7.23.0/manage-your-preferences","children":[]}]},{"id":"ci_5af79e12d482bd4fce229c82979ae9a0595e773318929a0e44089b86912344af","title":"Report Center","path":"/lrsiem/7.23.0/report-center","children":[{"id":"ci_c908b87812f01f7af0806c3c9b68ef6051932631240dd7d2e351edc8909eb790","title":"Add Custom Logos to Reports","path":"/lrsiem/7.23.0/add-custom-logos-to-reports","children":[]},{"id":"ci_3ca6b24d3998d8f9e7c03f61cc72f7dc10ca99a86861933e3854cf644f842347","title":"Clone Reports or Report Packages","path":"/lrsiem/7.23.0/clone-reports-or-report-packages","children":[]},{"id":"ci_69edc79fb18e7aaee9963d571a14ea60a8d2ad2b567907867d6efa220a7553e3","title":"Create Custom Log Detail Report Templates","path":"/lrsiem/7.23.0/create-custom-log-detail-report-templates","children":[]},{"id":"ci_c6b748d79ab6186ad275e6140e1b896296128b155e751e304d7965a0920798f2","title":"Create Custom Log Summary Report Templates","path":"/lrsiem/7.23.0/create-custom-log-summary-report-templates","children":[]},{"id":"ci_f59f46e4834e4fe63d4a0cd9ee7dd727ffdec50db565c5c63e2c840ca1e1db2c","title":"Create Report Packages","path":"/lrsiem/7.23.0/create-report-packages","children":[]},{"id":"ci_bde9421d2432a988fa97f2a553ace217e660dcf5d4dd32c199d8b5504bf68d6c","title":"Create Reports","path":"/lrsiem/7.23.0/create-reports","children":[]},{"id":"ci_1099b888144714980a918fc15a673ba4b427617eebb2217288d03335b4b15d32","title":"Create Scheduled Reports","path":"/lrsiem/7.23.0/create-scheduled-reports","children":[]},{"id":"ci_84e68d42fd547a6f3c7fa5e71b95f63cc5cc20add90f6b3531951887e7340c0d","title":"Import or Export Reports or Report Packages","path":"/lrsiem/7.23.0/import-or-export-reports-or-report-packages","children":[]},{"id":"ci_f7fd3ab31b7aa8e2a3577a4a19bd16ee8909120b9fe18b0d85c096974e43b1ba","title":"Manage Scheduled Reports","path":"/lrsiem/7.23.0/manage-scheduled-reports","children":[]},{"id":"ci_3a7cf50b7b8a2caf3036385939845febc673d48335b3f150d458bab25e1b7730","title":"Modify Custom Report Templates","path":"/lrsiem/7.23.0/modify-custom-report-templates","children":[]},{"id":"ci_5458de3a35a5f549da4788e3f25587dce08e7158ac2d7888d9ad9d5d09d0d70d","title":"Restore Default Logo to a Report","path":"/lrsiem/7.23.0/restore-default-logo-to-a-report","children":[]},{"id":"ci_88f3b1a22d5efea8822e896145c83fa76a45b91d3c4ddada9bc811c67017cade","title":"Run Reports","path":"/lrsiem/7.23.0/run-reports","children":[]},{"id":"ci_75d7a882941cbea7a574c9dfb6a51478809624f7be7aeef3b0abbb542a1b7c81","title":"Run Reports as Investigations","path":"/lrsiem/7.23.0/run-reports-as-investigations","children":[]},{"id":"ci_558a848582231b99a5c73a6fcd13aed7dac97fe73d12dd3ce840fc23a9804cdd","title":"Troubleshoot Empty Reports","path":"/lrsiem/7.23.0/troubleshoot-empty-reports","children":[]},{"id":"ci_cdf7e125b9bff8d7a3d26c14a6fd3f4712d12f621d8d2a504ccd578917a6a1ce","title":"View Report Center Job Status","path":"/lrsiem/7.23.0/view-report-center-job-status","children":[]},{"id":"ci_b6a8ad0ad4bc8ed1d1ad6e5d503783ddacb35e032ad202bcf8186360630dc9e0","title":"View Reports in the Client Console","path":"/lrsiem/7.23.0/view-reports-in-the-client-console","children":[]}]}]},{"id":"ci_74a828b9c772a4557ff7827a6f3d9ffba0f0da85cb4e20f20c88895f343f39d1","title":"Web Console User Guide","path":"/lrsiem/7.23.0/web-console-user-guide","children":[{"id":"ci_2672a3a6b6224cfbc4aff60b0a7b8116e8516d06f95e59e30c6183e25b569b28","title":"Alarms","path":"/lrsiem/7.23.0/alarms","children":[{"id":"ci_2a7106f3533d62712597fc3043f95c5fc9b45d3f2e1ea0530e89e53ac4a11795","title":"Alarms Page Overview","path":"/lrsiem/7.23.0/alarms-page-overview","children":[{"id":"ci_7e849bfdfbbaac982ad784da2e3b209d357f9516370f3ece13ab632578c3bacd","title":"Alarm Cards","path":"/lrsiem/7.23.0/alarm-cards","children":[{"id":"ci_22fd69b7d3b85755f95f0850f54314c1b03a9cf4ff07243bd2f5a1139a76c1aa","title":"Sort Alarm Cards","path":"/lrsiem/7.23.0/sort-alarm-cards","children":[]}]},{"id":"ci_ab8277a10ceb79f761fd4262e703a8f53dcc5547e812ba6d1e1c98c6b513d141","title":"Alarm Grid","path":"/lrsiem/7.23.0/alarm-grid","children":[{"id":"ci_d46dceb7a2f2993da66bf24e1d9edfece28dffc94a710cb04694ce3a30acbb4f","title":"Pin and Resize Alarm Grid Columns","path":"/lrsiem/7.23.0/pin-and-resize-alarm-grid-columns","children":[]}]},{"id":"ci_01478735ba85ca77e61e81c452d070d0836dc2eadc9b107f39d7e8256ce621ed","title":"Alarm Status Trends","path":"/lrsiem/7.23.0/alarm-status-trends","children":[]}]},{"id":"ci_776fbc8956d0b46001f7c10799dae595785488ca9f12f09f9d2b378ca0e9b3c3","title":"Alarm Filters","path":"/lrsiem/7.23.0/alarm-filters","children":[{"id":"ci_67910d6ce725193e2bdb8eb24090592768eb7c1d003d62ee794d3aafeb659625","title":"Remove Alarm Filters","path":"/lrsiem/7.23.0/remove-alarm-filters","children":[]},{"id":"ci_fd5073b4c1ff1df3af001aee933490e28fcec123f239179af8358a861b78fde1","title":"Use Dynamic Alarm Filters","path":"/lrsiem/7.23.0/use-dynamic-alarm-filters","children":[]},{"id":"ci_b5164c46c21fdc04e5895e36f07e65ad2ba1297555972ac68a98fa8f93b19438","title":"Use the Time Frame Filter","path":"/lrsiem/7.23.0/use-the-time-frame-filter","children":[]}]},{"id":"ci_6b0585d701d8f60225daa5254ae6ef4a625e7475fd04dd3a1fb969639091f1e6","title":"Add Comments to Alarms","path":"/lrsiem/7.23.0/add-comments-to-alarms","children":[]},{"id":"ci_ffa42f10c1f5e239b500f0496984d08d84c44875a5b9a6b5ac8cfb82a11a9a73","title":"Approve or Deny SmartResponse Actions in the Web Console","path":"/lrsiem/7.23.0/approve-or-deny-smartresponse-actions-in-the-web-console","children":[]},{"id":"ci_e89eccf18c3bc502a624a080287464fea4ee1318aa19c75ba87eb93f5aa1016b","title":"Drill into Log Data Associated with an Alarm","path":"/lrsiem/7.23.0/drill-into-log-data-associated-with-an-alarm","children":[]},{"id":"ci_64e8ce906bf51233d2d3d593b31c1523530f519108d60b84f2cff047b37cd1ff","title":"Update the Alarm Status","path":"/lrsiem/7.23.0/update-the-alarm-status","children":[]},{"id":"ci_41d9fff4c26f66911fa5be31dea26f7c806685f3fa5c573150d52be66c3ff07d","title":"View Alarms in Your Browser","path":"/lrsiem/7.23.0/view-alarms-in-your-browser","children":[]},{"id":"ci_248301354ec74d89da61a960d1741b10bfd5abb308f55e7f8ace12985667bf77","title":"Alarm Inspector Panel","path":"/lrsiem/7.23.0/alarm-inspector-panel","children":[]}]},{"id":"ci_2985928a9ee9d40b04d852e0ca5c726dad1ab4821f23c83615f1e53fd5c7ec16","title":"Analyzer Grid","path":"/lrsiem/7.23.0/analyzer-grid","children":[{"id":"ci_80bb2e68dbfb2e28aae4f21c3ba1f847e7d3532646540d660e450bcd9d85474c","title":"Use the Analyzer Grid","path":"/lrsiem/7.23.0/use-the-analyzer-grid","children":[]},{"id":"ci_a487ef171717741280e881883a5e8b6cd02bcc70d37a10f280e98b73f35ac1ae","title":"Configure the Analyzer Grid","path":"/lrsiem/7.23.0/configure-the-analyzer-grid","children":[]},{"id":"ci_27da8558c3ee89500a65b988c2299f59c841328c1df6ed8dbd08cd90b026b319","title":"Details & Actions Panel","path":"/lrsiem/7.23.0/details-actions-panel","children":[]},{"id":"ci_596c9a346766d61bdc967ba9c6f729baadb7839590cb9a0f13bb17b3a7addcdc","title":"Export Log Data into a CSV File","path":"/lrsiem/7.23.0/export-log-data-into-a-csv-file","children":[]},{"id":"ci_bed78055afae8bc602d179c4b83c6fc861228ab6465a25c58ca27975f1a18ccb","title":"Inspector Panel","path":"/lrsiem/7.23.0/inspector-panel","children":[{"id":"ci_4bea18b5f62e6ac472acde1a8d99c942d57a8f4efea6a22f903c86b165078987","title":"Integrate with LogRhythm UEBA (formerly CloudAI)","path":"/lrsiem/7.23.0/integrate-with-logrhythm-ueba-formerly-cloudai","children":[]},{"id":"ci_e2b522e70b062a6d2c1f7010d07e5145e34c037780534da66227aaded4716716","title":"Use Contextualize","path":"/lrsiem/7.23.0/use-contextualize","children":[]},{"id":"ci_8463747163444b821a6abfb22bf1e8a1acdc207c8efd2c81a55443a6cf018b16","title":"Configure Third-Party Contextualize Actions","path":"/lrsiem/7.23.0/configure-third-party-contextualize-actions","children":[]},{"id":"ci_753ae11c23d23325adc3a4212f50bca49835bdab09ff0f67dbc5deb5e7279d55","title":"Use SmartResponse","path":"/lrsiem/7.23.0/use-smartresponse","children":[]},{"id":"ci_6d82559a785f7149fd487a53539bdc82491b07ba034cc8174af460ebe55e29c3","title":"Use the AI Engine Rule Viewer","path":"/lrsiem/7.23.0/use-the-ai-engine-rule-viewer","children":[]},{"id":"ci_ec3d533bd49ab7961c52339c3156eca77ccfa37e1504153ac5e1693805082dca","title":"Use Threat Intelligence Service Integration","path":"/lrsiem/7.23.0/use-threat-intelligence-service-integration","children":[]}]}]},{"id":"ci_5d06c4a89c20e63c007fee1058f9554f36969faba7eb62e3b1e1330d7a1a2131","title":"Case Management","path":"/lrsiem/7.23.0/case-management","children":[{"id":"ci_bc1fd97ee0891d2d0d15d08093bd09dc6338557ddd10b11c2c9c400698935092","title":"Case Cards","path":"/lrsiem/7.23.0/case-cards","children":[]},{"id":"ci_0afd35693ac987bc0ead1fe6a0100845ce1a049b13d9d22246ffa5e0c5e9a76f","title":"Case History Widgets","path":"/lrsiem/7.23.0/case-history-widgets","children":[]},{"id":"ci_9c0c60c3fbb8ed8bfc1caa1f78de4cf6f7307a6db1342da0a5e0394943cf713d","title":"Case List Widgets","path":"/lrsiem/7.23.0/case-list-widgets","children":[{"id":"ci_018c8f9f15012d6985b3c112b74535dcf9ece1d7b1af944006750e22797e8c2c","title":"Configure Case List Widget Settings","path":"/lrsiem/7.23.0/configure-case-list-widget-settings","children":[]}]},{"id":"ci_7c80c70782f2db5f698b67afcbc52bfbb1c38241eabfc82b5a02602fd6ab7c2a","title":"Case Owners vs. Collaborators","path":"/lrsiem/7.23.0/case-owners-vs-collaborators","children":[]},{"id":"ci_3387551398ae28f4d547016ce1d568a95b524a45884c5278e60826f53adf54f7","title":"Case Status and Workflow","path":"/lrsiem/7.23.0/case-status-and-workflow","children":[]},{"id":"ci_9979d2e1582ea1aac739b0a89629f7dc6ca5d90689363080013236deb1614fbf","title":"Case Trend Widgets","path":"/lrsiem/7.23.0/case-trend-widgets","children":[{"id":"ci_6268c89aa0e8dfcc48f83ef3fdcb9a48b97e43420b897efc24dcc3057ba57ce6","title":"Configure Case Trend Widget Settings","path":"/lrsiem/7.23.0/configure-case-trend-widget-settings","children":[]},{"id":"ci_d49c47d9793ed1934dfb6002febfc043dc2a561404e45db033aa1c57bf11ee6e","title":"Read Case Trend by Priority Charts","path":"/lrsiem/7.23.0/read-case-trend-by-priority-charts","children":[]},{"id":"ci_0477b091a672e682f8cc8d576cf8f4e9aec97d47c9d9de8d7e6df66d3f8f5cd8","title":"Read Case Trend by Status Charts","path":"/lrsiem/7.23.0/read-case-trend-by-status-charts","children":[]}]},{"id":"ci_058b3502a2acfca98baa4ce8a358f9dd383ab137ed09b717b79b5d7da51354b0","title":"Open the Case Details View","path":"/lrsiem/7.23.0/open-the-case-details-view","children":[]},{"id":"ci_5844a400566a49186e8de9dedeb9c38cd2a2cdf692642f8c0bd344ed48a17a88","title":"Separate Entities in Cases","path":"/lrsiem/7.23.0/separate-entities-in-cases","children":[]},{"id":"ci_eb24c5014cafd4f896e93c284efbc8f8385dce81e518f4263298f3b207cd1218","title":"Work with Cases","path":"/lrsiem/7.23.0/work-with-cases","children":[{"id":"ci_6ba2ed30c6c575bfc6bd70bfc123811ab70e62852419402aadf898016884c1b5","title":"Add Alarms to a Case","path":"/lrsiem/7.23.0/add-alarms-to-a-case","children":[{"id":"ci_141d55daccb221751a31040a727cea16a6ba0cb9809e6bc09bebc96c5818160e","title":"Update the Status of Alarms Associated with a Case","path":"/lrsiem/7.23.0/update-the-status-of-alarms-associated-with-a-case","children":[]}]},{"id":"ci_72c24bb004f01f41869138599520d3d0dacda168df57d5ad8dd5a658aabc1d98","title":"Add Files to a Case","path":"/lrsiem/7.23.0/add-files-to-a-case","children":[]},{"id":"ci_220904088338f5a68defc33f34a5a3004885819e036c18417afad4df749cc8dc","title":"Add Logs to a Case","path":"/lrsiem/7.23.0/add-logs-to-a-case","children":[]},{"id":"ci_bc5274f4e58cbfed83c3f7adc6248c6c6cc762513c7b062ba9c50d4e53acc749","title":"Add Notes to a Case","path":"/lrsiem/7.23.0/add-notes-to-a-case","children":[]},{"id":"ci_0d0315e4dcf4f015fd48e846d199d1666c5dc2c8496ef250f91bc5a124f15b4a","title":"Case Associations","path":"/lrsiem/7.23.0/case-associations","children":[{"id":"ci_d0b95f85c312eafcd4f4ed5b5a0434868f5b66e6e7431f5ac9c7fcd915b0fe66","title":"Add Case Associations","path":"/lrsiem/7.23.0/add-case-associations","children":[]},{"id":"ci_a0c36809a55733c271b810323f7456f77c4db6514d9ec5a8c1697f9a50c4977f","title":"Remove Case Associations","path":"/lrsiem/7.23.0/remove-case-associations","children":[]}]},{"id":"ci_9e7d465017bd22d950bc5969c0ed468b706e2bcc61adf43088c37f49dee57f7e","title":"Case Collaborators","path":"/lrsiem/7.23.0/case-collaborators","children":[{"id":"ci_7a084be96816373705166afc761154bff35733116c99760a2e0eaeb3aecd4775","title":"Assign Collaborators to a Case","path":"/lrsiem/7.23.0/assign-collaborators-to-a-case","children":[]},{"id":"ci_9d3e6cd7e40fccc83a2fbc958af52379eae822d6eed86bbfe71ed2d274601498","title":"Remove Collaborators from a Case","path":"/lrsiem/7.23.0/remove-collaborators-from-a-case","children":[]},{"id":"ci_7c70743f0a7f28bd81a09f63f61c8f4f3ba56519612be6732149fefd471ae062","title":"Transfer Case Ownership","path":"/lrsiem/7.23.0/transfer-case-ownership","children":[]}]},{"id":"ci_33930d3a50d0a5229de67e61701e426fff1510af0173ffe4391c794d4f284bf5","title":"Case Tags","path":"/lrsiem/7.23.0/case-tags","children":[{"id":"ci_05fd5a38b3afafbd658f0cbbd84931bd4458bb6811bbe17ca211a1112d020e48","title":"Add Case Tags to a Case","path":"/lrsiem/7.23.0/add-case-tags-to-a-case","children":[]},{"id":"ci_fb813682db0a571d829767db11d8f1001b254254a4e4b125852bf85bab691848","title":"Remove Case Tags from a Case","path":"/lrsiem/7.23.0/remove-case-tags-from-a-case","children":[]},{"id":"ci_cbea8c259221e04864456bb08dbb9d7fc9439711984824397c7a35af6ce99c63","title":"Use Case Tags to Filter Cases in Case Widgets","path":"/lrsiem/7.23.0/use-case-tags-to-filter-cases-in-case-widgets","children":[]},{"id":"ci_4210e714cd42202c23155238bf1cfbe459504d9811862452908f39adab58e0be","title":"Use the Case Tag Library","path":"/lrsiem/7.23.0/use-the-case-tag-library","children":[]}]},{"id":"ci_9238ca7f9d6cda39239b4c8208a16d4442e620a9b0693fee6d2356c6a899f94e","title":"Close Cases","path":"/lrsiem/7.23.0/close-cases","children":[]},{"id":"ci_1add307d5697a04851299bc22e9b0621be88d79498a7690c1e71d3d42afc60f0","title":"Create New Cases","path":"/lrsiem/7.23.0/create-new-cases","children":[]},{"id":"ci_0c0a4ef3b1db666a12ec8251ac9b26b8b6a2479eec35c31d06851a4cb7ca469c","title":"Delete Logs, Alarms, and Files from Case Evidence","path":"/lrsiem/7.23.0/delete-logs-alarms-and-files-from-case-evidence","children":[]},{"id":"ci_8e3d4e3ee8bbabf892199e24d703548925d5afba245ef115240c22b7a7631952","title":"Edit and Delete Notes in Case Evidence","path":"/lrsiem/7.23.0/edit-and-delete-notes-in-case-evidence","children":[]},{"id":"ci_b93e99ae285e02420bf5efc3439fbfbd9f7fba461367bcdc144837ed448b6091","title":"Edit Case Names, Priorities, Due Dates, and Summaries","path":"/lrsiem/7.23.0/edit-case-names-priorities-due-dates-and-summaries","children":[]},{"id":"ci_d5e507d1bb0a1c0d9bf5545bc353bc420b13205b85c09fc7cc44b15f35fa4ea0","title":"Filter Cases","path":"/lrsiem/7.23.0/filter-cases","children":[]},{"id":"ci_ca57036ac1084fcc48e0d2ca6ff30c50ee7cbe23616cf27f7d904cf6c0196842","title":"Pin Important Evidence","path":"/lrsiem/7.23.0/pin-important-evidence","children":[]},{"id":"ci_03e861cf06674fecd4b47e96e7ba8a191e589f28e9cb56dcbdadb5e8ec194be9","title":"Reopen Cases","path":"/lrsiem/7.23.0/reopen-cases","children":[]},{"id":"ci_66fe5d23f3a39d1833bf17b4e35930b7fe41021a8e99df9520f6c1bcff507100","title":"Unpin Evidence","path":"/lrsiem/7.23.0/unpin-evidence","children":[]}]},{"id":"ci_852a7a278543c0923ece5270934d69935c48f1c8d478abe58f486ca99ca684ff","title":"Work with the Current Case Panel","path":"/lrsiem/7.23.0/work-with-the-current-case-panel","children":[]}]},{"id":"ci_8169aba1e1d950ad42f7794bc5a80b47b78884409277323b159ab56169129098","title":"Cloud to Cloud Log Collection","path":"/lrsiem/7.23.0/cloud-to-cloud-log-collection","children":[{"id":"ci_b5e4738243dbcd880ee5b8fe2b56fd097668aac58614156263a9cf5b173ca586","title":"Configure an Open Collector Log Source","path":"/lrsiem/7.23.0/configure-an-open-collector-log-source","children":[]},{"id":"ci_ae35687eaf05aca0928a1afe4910ad055f2377b9312e6333202aec6ca83bb5ff","title":"Add a Log Source Configuration","path":"/lrsiem/7.23.0/add-a-log-source-configuration","children":[]},{"id":"ci_95bbc38734c4eb96edec98233ccca18fcc4c28be37e2ddf0da026a68fa98a68a","title":"Use the Log Source Configuration Grid","path":"/lrsiem/7.23.0/use-the-log-source-configuration-grid","children":[]},{"id":"ci_a34cefa368e991b71b058a3e41b9605399e06a6ce0d0b0f5c03f7596fd90f716","title":"Edit a Log Source Configuration","path":"/lrsiem/7.23.0/edit-a-log-source-configuration","children":[]},{"id":"ci_478802f99d6c5dd3a15760352233c80bbb351f7c86b5a9e567fd618638d76f21","title":"Delete a Log Source Configuration","path":"/lrsiem/7.23.0/delete-a-log-source-configuration","children":[]}]},{"id":"ci_c9648cc3ee52fb6e3d8a417af8ec971ae21a142a01aa8b054ab96040b933a120","title":"Dashboards","path":"/lrsiem/7.23.0/dashboards","children":[{"id":"ci_95721b5f7758e3a880fe686a6c2ff0db65ebd9036cd57ee7b81dbc64b880bc04","title":"Create New Dashboards","path":"/lrsiem/7.23.0/create-new-dashboards","children":[]},{"id":"ci_71aff5ddea92ccbe4d26d0aa962f17a25debea9ca222be19779588f661eddadf","title":"Clone Dashboards","path":"/lrsiem/7.23.0/clone-dashboards","children":[]},{"id":"ci_9be386f646222abba5895b64c7b58b1626d18839b09ca7d340a42e41c17547cb","title":"Import and Export Dashboards","path":"/lrsiem/7.23.0/import-and-export-dashboards","children":[]},{"id":"ci_a8a6600bc69e9b2b81bbd11196f17eaf701b645d563b5afb64fa9f67519e5374","title":"Change Dashboards","path":"/lrsiem/7.23.0/change-dashboards","children":[]},{"id":"ci_7897aae621073d1131310b75a8fdfd20309303d21eddcc2c63d7d72860e9811b","title":"Revert Changes","path":"/lrsiem/7.23.0/revert-changes","children":[]},{"id":"ci_c8e87ed9703a47b6b8133b42222c6caa8a75fd43efcb9a2f7f1ce9143c0005f4","title":"Print Dashboards","path":"/lrsiem/7.23.0/print-dashboards","children":[]},{"id":"ci_c05943c8e12ad9fb2c0bbb595a3d3fc76212ec7910273f113398c27394fba21a","title":"Save Dashboard Changes","path":"/lrsiem/7.23.0/save-dashboard-changes","children":[]},{"id":"ci_24662d35dcb3f57eb2f5bf4da727856e92fe6bbba4dd1ff9178874a366f662c3","title":"Filter Data with Lucene Searches","path":"/lrsiem/7.23.0/filter-data-with-lucene-searches","children":[{"id":"ci_982654c3b5de432593c775606d4d78547f33d024bb3477fc3cc063506aa9dd88","title":"Lucene Search Syntax","path":"/lrsiem/7.23.0/lucene-search-syntax","children":[{"id":"ci_3fae53308e633ed443e6c04c304b1dcf34c58c8bdfeb476d491cb3fc1cef714b","title":"Basic Queries","path":"/lrsiem/7.23.0/basic-queries","children":[]},{"id":"ci_b8fc7e778543cdd70b1a3761be8a7c5de04e1ecefa4d6f52409ba86e9722725b","title":"Complex Queries","path":"/lrsiem/7.23.0/complex-queries","children":[]},{"id":"ci_3ee4896287f0baa341a217fb021b7495b4f2f2a848171e3ab792fdfc2f88b3fb","title":"Troubleshoot the Lucene Search","path":"/lrsiem/7.23.0/troubleshoot-the-lucene-search","children":[]},{"id":"ci_38366edc25f65cbbdca3c6f7592c58257d77154a601047337c21b1bc0142748f","title":"Wildcard Queries and Fuzzy Matches","path":"/lrsiem/7.23.0/wildcard-queries-and-fuzzy-matches","children":[]},{"id":"ci_71641b9f954768d82262c3bef135c174a5e23abb028582fe4d0908bcd0f4c1e8","title":"Metadata Fields","path":"/lrsiem/7.23.0/metadata-fields","children":[{"id":"ci_d2f6922bdb6ec4df630928cf5488777c9c4aa2e5b9167c20a253d3bd5cd6b4b5","title":"Applications","path":"/lrsiem/7.23.0/applications","children":[]},{"id":"ci_88789132ace7b784d2bfabcf26e246e13d0a80f42fc88984277480397ae20c43","title":"Classification","path":"/lrsiem/7.23.0/classification","children":[]},{"id":"ci_bc1953259b099c36f6884fa6b4db07ccee3ecc808c73085b8ac4ae94514837ed","title":"Identity","path":"/lrsiem/7.23.0/identity","children":[]},{"id":"ci_bbb05d1f3b903796e15a6b157ca06ddc3a8e3c117e2449afc02eb536e6b15881","title":"KBytes and Packets","path":"/lrsiem/7.23.0/kbytes-and-packets","children":[]},{"id":"ci_90d5f8c871e3da73ef7aa5e8f5299cff95e849df72cbf78a3e393f4a3b939d6a","title":"Location","path":"/lrsiem/7.23.0/location","children":[]},{"id":"ci_e902326a436e47187238cd7e8adb69392aa22813c1b7505416a5f04152a0d5c3","title":"Log","path":"/lrsiem/7.23.0/log","children":[]},{"id":"ci_560c85bc8cbfb1089fff3b7778b3b9bb07601b5b3c71eb15042bbef83193bade","title":"Network","path":"/lrsiem/7.23.0/network","children":[]},{"id":"ci_847019e3116ed3bd2e2ad12e99e3d7e5f68479636db94269c9667f65d11a99e7","title":"Host","path":"/lrsiem/7.23.0/host","children":[]}]}]}]}]},{"id":"ci_d8e318b07505f4d755c46e298fa933cc9cac43d161c4e6a2078994230a0e4a28","title":"Data Indexer (DX) Dashboards","path":"/lrsiem/7.23.0/data-indexer-dx-dashboards","children":[]},{"id":"ci_ab40ecdcaaba80a12d513fde812f872ebfbf36728e94389178d9229527e54cdf","title":"Lists in Web Console","path":"/lrsiem/7.23.0/lists-in-web-console","children":[{"id":"ci_b7b256fa7188102d7dfdf7a06230817ec5e54775f1ee96da0c5331e894544a31","title":"Add List Items in the Web Console","path":"/lrsiem/7.23.0/add-list-items-in-the-web-console","children":[]},{"id":"ci_8c41db0f4cbcf39aa4612316993df2de9dd2e60698adf8d26641fbc81198eb85","title":"Add Related Lists","path":"/lrsiem/7.23.0/add-related-lists","children":[]},{"id":"ci_e2bfe779eb01d253660cb17aa346aaea9fba4fe2748b13646d8d9f224772d0f1","title":"Create a List in the Web Console","path":"/lrsiem/7.23.0/create-a-list-in-the-web-console","children":[]},{"id":"ci_4ee90bfb6f3f0d256e4809c422eb5d45cf3ab6d9bffcda35f208c3ea4f61b8a8","title":"Filter and Sort Lists","path":"/lrsiem/7.23.0/filter-and-sort-lists","children":[]},{"id":"ci_d43c997fd31a43e62f48a40d6f61e2d75d6900a12e358dac31835bcc04055f1d","title":"Remove List Items in the Web Console","path":"/lrsiem/7.23.0/remove-list-items-in-the-web-console","children":[]},{"id":"ci_2d9e1b1627da5c4c09b54429b2b86ca95d0ffcee2ee393eb53e373603d1f33ba","title":"Select and View a List","path":"/lrsiem/7.23.0/select-and-view-a-list","children":[]},{"id":"ci_dd97f86b36b2e6cad55b3d6f81fd563c93226cdb2bef1e2000e0b1a34a8eb435","title":"View Retired Lists","path":"/lrsiem/7.23.0/view-retired-lists","children":[]}]},{"id":"ci_f16509e276a9f96f4112d2bceabab27685756163cd79e1f9afc5c5c4ce64502a","title":"Log Collection in Web Console","path":"/lrsiem/7.23.0/log-collection-in-web-console","children":[{"id":"ci_6fa05e9a3b2a5ceda30217817c087d54f9f65997830e4607f45a196166cc4d5c","title":"Agents Grid","path":"/lrsiem/7.23.0/agents-grid","children":[]},{"id":"ci_8ec9f987ee8655cf0470a646c0374b9358e22be451d9ef749509b85c873bc181","title":"Beats Grid","path":"/lrsiem/7.23.0/beats-grid","children":[]},{"id":"ci_cdaad76e297ab01e6749edb036aeb4f72bd881d4cf054ad4d83888fff5320695","title":"Log Sources Grid","path":"/lrsiem/7.23.0/log-sources-grid","children":[]},{"id":"ci_1aada6a6440f152eb47806b39b246bcdcebe8f4de261ede095f41a48a1f2fa02","title":"Open Collectors Grid","path":"/lrsiem/7.23.0/open-collectors-grid","children":[]},{"id":"ci_42839a860c718c99ddfa7a295af3e09fa48c7471ea29f98cbeae655a79c020a3","title":"Add a New Beat in Web Console","path":"/lrsiem/7.23.0/add-a-new-beat-in-web-console","children":[]},{"id":"ci_93a1bfe6a5f50babb7229eeaebb894cdf6b172389845f741fa7698d4d779066f","title":"Add a New Log Source in Web Console","path":"/lrsiem/7.23.0/add-a-new-log-source-in-web-console","children":[]},{"id":"ci_0f3f59d64e607b506c4fd11420846a176a24dd2720d34362f542333753404ebc","title":"Manage Pending Log Sources","path":"/lrsiem/7.23.0/manage-pending-log-sources","children":[]},{"id":"ci_43dffeda8d812a5512afc8e7f31de5a332ea41182ae591acbf50b308b173d520","title":"Retire Beats","path":"/lrsiem/7.23.0/retire-beats","children":[]},{"id":"ci_f13e2ccf551f5cf3b21cca84f1369985d34bc874608084f72e3137e801b647cb","title":"Retire Open Collectors","path":"/lrsiem/7.23.0/retire-open-collectors","children":[]}]},{"id":"ci_d907391c2be0cc5ae86eee4d3955e57fc3d00712c164baad64aae5701d3f3ba0","title":"Playbooks","path":"/lrsiem/7.23.0/playbooks","children":[{"id":"ci_94566e557ed49837f34acef5aca3bdee987c248e835b24f59944bb2519055c6c","title":"Create Playbooks","path":"/lrsiem/7.23.0/create-playbooks","children":[]},{"id":"ci_e3d91890a901a9797a5059d45fd26c3edbcf56d032c1b88d15cec1111faf1055","title":"Import Playbooks","path":"/lrsiem/7.23.0/import-playbooks","children":[]},{"id":"ci_1a8c62ac3892fccc233107d64fd2ffca17654dc9032183b55b203366690c82e4","title":"Work with Playbooks","path":"/lrsiem/7.23.0/work-with-playbooks","children":[]},{"id":"ci_bb3486ec778d591f9c0d919b1281018da37d8e5dbd81d1c45440ad72791f5e98","title":"Add Playbooks to a Case","path":"/lrsiem/7.23.0/add-playbooks-to-a-case","children":[]},{"id":"ci_e3d4a7220a402045e3aae6921d39eb83c99934e567ed6d5ded75840bd9728daa","title":"Work with Playbooks in a Case","path":"/lrsiem/7.23.0/work-with-playbooks-in-a-case","children":[]},{"id":"ci_ce353231d08ca5b4910aeee181430026900245b1f1bc46e2d216deee443127c0","title":"Procedures List Widget","path":"/lrsiem/7.23.0/procedures-list-widget","children":[]}]},{"id":"ci_997a0ee763e8ab7627dc90869b95cfd22c5fcf9da1ccff11626ede37f7eba6ce","title":"Reports","path":"/lrsiem/7.23.0/reports","children":[{"id":"ci_2d15924eb06848da5e6088ab9ab755fa772236a2849d97235071f7d3aeec4170","title":"Completed Reports Widget","path":"/lrsiem/7.23.0/completed-reports-widget","children":[{"id":"ci_34716aafff3beb9be39b90a0a5a3ef456c98f9c4292b85742c3cfb5c3c2cbd0d","title":"Configure Completed Reports Widgets","path":"/lrsiem/7.23.0/configure-completed-reports-widgets","children":[]}]},{"id":"ci_436c5067da0eafc04af9a4501ad44cb039e04cd7599f88051a43636603f8e830","title":"Download Reports from the Web Console","path":"/lrsiem/7.23.0/download-reports-from-the-web-console","children":[]},{"id":"ci_fdbb5221df1e7c7ee2c5cdd7f5f1b66dcf96c792f2c0ad7aedf622f9a08f8ba2","title":"Filter Report Packages on the Reports Grid","path":"/lrsiem/7.23.0/filter-report-packages-on-the-reports-grid","children":[]},{"id":"ci_4c786938b1616265d0220328f23076e27c4e2174f7f15f3372bd208b9b26924c","title":"Pin and Resize Reports Grid Columns","path":"/lrsiem/7.23.0/pin-and-resize-reports-grid-columns","children":[]},{"id":"ci_f010db74fd83cafa9a5816a52b5682d4f15754ddc950196ede225b5268187d30","title":"Run Searches from Report Filter Criteria","path":"/lrsiem/7.23.0/run-searches-from-report-filter-criteria","children":[]},{"id":"ci_393bbc802daef2485eda467e287a5722eca529331c79d18b55a9dda1fef8a1c1","title":"Sort Content on the Reports Grid","path":"/lrsiem/7.23.0/sort-content-on-the-reports-grid","children":[]},{"id":"ci_f51489982b845420214b7a25705b5a0793d8e8c4061d49c27d9b58d7ef110ed0","title":"View Package and Reports Details in the Inspector","path":"/lrsiem/7.23.0/view-package-and-reports-details-in-the-inspector","children":[]}]},{"id":"ci_bcde251ae3095c30cb5e6dac6edd576e330d8a9b9abbf4c9e791e101760cd074","title":"SecondLook - Web Console","path":"/lrsiem/7.23.0/secondlook-web-console","children":[]},{"id":"ci_2264410e8cffafd5c938d7a7f8a5253c69b1b2dfddb0035c5a1022129b22c2d6","title":"Single Sign-On","path":"/lrsiem/7.23.0/single-sign-on","children":[{"id":"ci_9f28f3bf1c8b6eb45da31b7881aae82589d4a13eaebc48bd5548455a17a8e81e","title":"SSO Known Issues and Recommendations","path":"/lrsiem/7.23.0/sso-known-issues-and-recommendations","children":[]},{"id":"ci_18a0111e95d5c6e964bc3703066b10b4dc5f4adb80bc27efad385d7e5acb4dc5","title":"SSO User Auto-Provisioning","path":"/lrsiem/7.23.0/sso-user-auto-provisioning","children":[]},{"id":"ci_c4f4235ff69f173b8342b882323787140e875e6710926d06ae6dfe254b77d9c8","title":"SSO Configuration","path":"/lrsiem/7.23.0/sso-configuration","children":[{"id":"ci_98e0c748795ec335f48eba19d94f6e2f62ca14a6ae3ae85734dcbf4d6af8e838","title":"Supported Identity Providers","path":"/lrsiem/7.23.0/supported-identity-providers","children":[{"id":"ci_50393e1510fedce3dd61d9548696d64aad29da31e7a7dff7aa18dddd83ada415","title":"Configure SSO with Okta","path":"/lrsiem/7.23.0/configure-sso-with-okta","children":[]},{"id":"ci_87c63d5f4cecdd966fc7be28f6d2a9ad75107477a6b8f5472c73ac26c89f281f","title":"Configure SSO with Azure AD","path":"/lrsiem/7.23.0/configure-sso-with-azure-ad","children":[]},{"id":"ci_1cbb9e95a832aa627c53e3f77ddd6346a9508c2f48fc033eae6fc189aa436cfd","title":"Configure SSO with PingOne for Customers","path":"/lrsiem/7.23.0/configure-sso-with-pingone-for-customers","children":[]},{"id":"ci_b759724d5a4c48830012887c83329bfab0f6e95bb9b06caab6f0da05d60709ee","title":"Configure SSO with PingOne for Enterprise","path":"/lrsiem/7.23.0/configure-sso-with-pingone-for-enterprise","children":[]}]}]}]},{"id":"ci_acf71f06f54d0633512148c531d11f12c3c474fe89140fc32f109efeaf56f362","title":"TrueIdentity","path":"/lrsiem/7.23.0/trueidentity","children":[{"id":"ci_ac056d837ac9f84234ad983c10560f6e27144168e146c6fbdfc6731e46409670","title":"Work with TrueIdentities","path":"/lrsiem/7.23.0/work-with-trueidentities","children":[]}]},{"id":"ci_d01bbd098c95627d7b5178fce9937c5bb99152d3c6234247ce8f1d760a761fb4","title":"User Interface","path":"/lrsiem/7.23.0/user-interface","children":[{"id":"ci_c6f695e99017bf862d1b8f8b33137069495b382e2e757e728d0849b4c118ce61","title":"Resource Center","path":"/lrsiem/7.23.0/resource-center","children":[]},{"id":"ci_9c4359fdddba81bf38982dc65d90a20903aaf37e80d536cdd287874b862a914e","title":"Pages","path":"/lrsiem/7.23.0/pages","children":[{"id":"ci_42c682501715316a43510165a3c276b1e0a3327d0389790ce0faa3e5ab4f3acc","title":"Alarms Page","path":"/lrsiem/7.23.0/alarms-page","children":[]},{"id":"ci_01c88e318d7fa3340a5376686d5adb9e1189b62d3ec711a7b5e862e1ebe21a80","title":"Analyze Page","path":"/lrsiem/7.23.0/analyze-page","children":[]},{"id":"ci_b9310c706854377ec82516d9def599363d67a8ca091adfca1f896fa65a6999d9","title":"Cases Page","path":"/lrsiem/7.23.0/cases-page","children":[]},{"id":"ci_2465641525e2a661f2b2df3160f4cc277bf2061b56aff94d87dadccf69b3be68","title":"Dashboards Page","path":"/lrsiem/7.23.0/dashboards-page","children":[]},{"id":"ci_d6d0cecf9fabb1dd72df77d5611c9e80d6b4cabeeba98c576953dbaf64b4862f","title":"Host/User Detail Page","path":"/lrsiem/7.23.0/host-user-detail-page","children":[]},{"id":"ci_fa8ea43db2135d5733b835bf105606df448d6f3b460432a40165e6cd4c146c55","title":"Lists Page","path":"/lrsiem/7.23.0/lists-page","children":[]},{"id":"ci_c291a896f58d71d8e2b2891b56f869ca89ad7977f289277d9a0ce317877fed47","title":"Reports Page","path":"/lrsiem/7.23.0/reports-page","children":[]},{"id":"ci_89b5eea56f1739b006b9d27d6684ce4219481dc7ddf5c1fbc26c6e65fb4234bc","title":"Searches Page","path":"/lrsiem/7.23.0/searches-page","children":[]},{"id":"ci_b8dd5da6d9a04a7dd9b33093b717acd4acf3ec8a92694751a523cc9026f9f4ff","title":"TrueIdentity Page","path":"/lrsiem/7.23.0/trueidentity-page","children":[]}]},{"id":"ci_4697b305a5f1abfb9ab78191f5b3931ce127be9d6a8d360aa5fc57a0e7554368","title":"Panels","path":"/lrsiem/7.23.0/panels","children":[{"id":"ci_9923a8bf7a50bb52f838dafe9b8d84d79b57218273c9b8f95c4a15ad9ccce358","title":"About the Analyzer Grid","path":"/lrsiem/7.23.0/about-the-analyzer-grid","children":[]},{"id":"ci_af9d31f30dacd25b379b64fb363d5d7bbbedb6ce6bdd1152607d9ee35af64945","title":"Current Case Panel","path":"/lrsiem/7.23.0/current-case-panel","children":[]},{"id":"ci_5194cfc8b3ff365c8cb185e62b76b1699028ab40ac3151c7e0da147b45972f27","title":"Inspector","path":"/lrsiem/7.23.0/inspector","children":[]}]},{"id":"ci_867c4b3b401a5d4fbc5330ba9c3773bb7d4d46f293178b9d823ecdc8bba4d685","title":"Tools","path":"/lrsiem/7.23.0/tools","children":[{"id":"ci_ac317faffc76c412e540cf43c47789761793b2cdb5cbb82d860ecb2274e3edc0","title":"About Widgets","path":"/lrsiem/7.23.0/about-widgets","children":[]},{"id":"ci_ba767e189dfc8a671bd0f5655d5af2003c6225c5c2f7152516dfff804ad45635","title":"Breadcrumbs","path":"/lrsiem/7.23.0/breadcrumbs","children":[]},{"id":"ci_8969a996b7e49d1ea522ac89fb5974335465f46e5fc5d8573733124a5975797a","title":"Hotkeys","path":"/lrsiem/7.23.0/hotkeys","children":[]},{"id":"ci_24ef2c8cb6e57ca98be7d4d2ad5468fa0c2b771bfa1e1daa4e17ae28e0849e4c","title":"Icons","path":"/lrsiem/7.23.0/icons","children":[]},{"id":"ci_36f95dd00936893af6f5508f3ca057052fe773df4623325e559dd99b4a523c29","title":"Search Tools","path":"/lrsiem/7.23.0/search-tools","children":[]},{"id":"ci_6f4053485eeb66e0f5518c9e0f0d3c788faf9ae4639343ce36289c579a08b5e2","title":"Taskbar","path":"/lrsiem/7.23.0/taskbar","children":[]},{"id":"ci_ac8f327ad6cda1b1a00b00fd87db3917ef16e9e0b994b31fb4d7b9c6eb3ddc86","title":"Typeahead Filters","path":"/lrsiem/7.23.0/typeahead-filters","children":[]}]}]},{"id":"ci_fa36f2e408ce43f00a16154fe750d014e80aae3ad03a79663dc07319cd1fdc41","title":"User Settings","path":"/lrsiem/7.23.0/user-settings","children":[{"id":"ci_459675f95baa368ce9f89cb1efec60c0306cf3a96c9f854664d33d4641bf983a","title":"Access Web Console Help","path":"/lrsiem/7.23.0/access-web-console-help","children":[]},{"id":"ci_932363d3a0800adfebe849c59f163034cbf3ff8e86c9dd996e2c0591421e551e","title":"Change the Default Web Console Search Timeout Period","path":"/lrsiem/7.23.0/change-the-default-web-console-search-timeout-period","children":[]},{"id":"ci_a1ab7ea3090b687cd3121d57bc8a4cdf1b61b0db859b8fbfbcaa11057bbc19ba","title":"Change the Web Console NGINX Configuration to Modify Available Ciphers","path":"/lrsiem/7.23.0/change-the-web-console-nginx-configuration-to-modify-available-ciphers","children":[]},{"id":"ci_7d80d5fa9026cda36730275534fd37a976354904b3b12069a8f8b032de3eb553","title":"Change Web Console Password","path":"/lrsiem/7.23.0/change-web-console-password","children":[]},{"id":"ci_4655bb9ac6764afbf706b0d3caedc41fec50e99c038b95394b48d3b895d826f7","title":"Configure Navigation Warning","path":"/lrsiem/7.23.0/configure-navigation-warning","children":[]},{"id":"ci_ea4fedfe7fe05353e11bcdb346b767148d48e18cf6fb048573c8887f4bf7c6f1","title":"Configure Search Results","path":"/lrsiem/7.23.0/configure-search-results","children":[]},{"id":"ci_c76413be18eabd73de81fde7fbc8334ef6010fbc18660fc64384059dfae4961e","title":"Select Query Location","path":"/lrsiem/7.23.0/select-query-location","children":[]},{"id":"ci_427a3b14ce045b24fb73f3ab5545d723ab1675f3290a17948c927f9e99e2f222","title":"Set the Date Time Format","path":"/lrsiem/7.23.0/set-the-date-time-format","children":[]},{"id":"ci_09f98ab73523069cdf4075c5e50f5373c2050d79ba20b38993abe6f973ceb777","title":"Set Your Drilldown Preference","path":"/lrsiem/7.23.0/set-your-drilldown-preference","children":[]},{"id":"ci_823682a36a567f68541610d6dd1da9819b50856bafeb1c9fbb6cbf96f339c55b","title":"Switch Between Day and Night Modes","path":"/lrsiem/7.23.0/switch-between-day-and-night-modes","children":[]}]},{"id":"ci_89e3faab95956f4373ef4bd082351850948cc1a79e90c6a8874fc0143f46686b","title":"Search","path":"/lrsiem/7.23.0/search","children":[{"id":"ci_93fd4c74b7edfdd35d70ac673cfe8f8c18780831ca57e1053dcfd81d26e2df88","title":"Manage the Searches Page","path":"/lrsiem/7.23.0/manage-the-searches-page","children":[]},{"id":"ci_201f307067ad4376e1fffb3e0eae5bf86a8b626c50949dea1b14aa3b658e9d73","title":"Run Searches from the Searches Page","path":"/lrsiem/7.23.0/run-searches-from-the-searches-page","children":[]},{"id":"ci_88ace9c03fda5b06808884d06f0186989140ddfbd11ebf97065e8616654821bb","title":"Use Search","path":"/lrsiem/7.23.0/use-search","children":[]},{"id":"ci_38b9f12432b8bb99b90721a766b26d6b43566a67eed1a246aef11a5317d6d832","title":"Save Searches","path":"/lrsiem/7.23.0/save-searches","children":[]},{"id":"ci_52a192d9777500d855cb21148f89936a699ef271e92e7ace2725b1e11a504d20","title":"Perform Details Searches (User/Host)","path":"/lrsiem/7.23.0/perform-details-searches-user-host","children":[]},{"id":"ci_97e108af4a029e6dcd98a8c2e29ca8b3e162c4edf83b3fe5385ad69eed3b6aa9","title":"Perform Pivot Searches","path":"/lrsiem/7.23.0/perform-pivot-searches","children":[]},{"id":"ci_2ac98874c4cec2021c1e8409c3ea2c24103ee845074c80d5d29cdbbc38521d66","title":"Search Tiers (Hot/Ultra-Warm/Warm/Cold)","path":"/lrsiem/7.23.0/search-tiers-hot-ultra-warm-warm-cold","children":[]}]},{"id":"ci_9373b24051940ef49bfd2f9a2f788860403371d6a93a5f7d27f653adbc286926","title":"Widgets","path":"/lrsiem/7.23.0/widgets","children":[{"id":"ci_683c42c0751a7e8b073f5c0a34272a73f815825cfb7a2a5a43f9bca5e6095682","title":"Threat Activity Map","path":"/lrsiem/7.23.0/threat-activity-map","children":[{"id":"ci_3df2cb944fd5d429b4dbc6b71f43539d2c9a8625853ea548348d520cdc4e2ba4","title":"Configure Threat Activity Map Widget Settings","path":"/lrsiem/7.23.0/configure-threat-activity-map-widget-settings","children":[]},{"id":"ci_78dfeb25ad41c193b59b15084ddab841bf3927540cc02ef995f86ec74d94bb6c","title":"Drill into Threat Activity Map Node Data","path":"/lrsiem/7.23.0/drill-into-threat-activity-map-node-data","children":[]},{"id":"ci_cc2ab9a1781934abb12a132331a613d681445f5b30f396ede95c805d4799cee0","title":"Troubleshoot Threat Activity Map","path":"/lrsiem/7.23.0/troubleshoot-threat-activity-map","children":[]},{"id":"ci_f8f1da12319125f38d70e6ee739e181e21dd7875868bb2e70717a80a0456b398","title":"Zoom In and Out on the Map","path":"/lrsiem/7.23.0/zoom-in-and-out-on-the-map","children":[]}]},{"id":"ci_0b107eae578d9db5a8c85c87340691cb0af2b6cc7ab4faea1f55ba657e2768e2","title":"Customize Dashboard Widgets","path":"/lrsiem/7.23.0/customize-dashboard-widgets","children":[{"id":"ci_8f679290c5a18d24eddbfb3cd974c48eb4e1e08446e9e157d45e6f17f8b65e8e","title":"Add Widgets","path":"/lrsiem/7.23.0/add-widgets","children":[]},{"id":"ci_49932fa7a4ffe107525b2b90f7a04ff54a487a0ba2e08081cef4522510463162","title":"Configure Widget Settings","path":"/lrsiem/7.23.0/configure-widget-settings","children":[]},{"id":"ci_f2368602670196953b831e685016f39fd16d7bdc567190a938086b8df2f36112","title":"Copy Widgets","path":"/lrsiem/7.23.0/copy-widgets","children":[]},{"id":"ci_3907a7f097a46c37277c06bf8d6086e142f170aee4c131f4369bac8aef9d23b0","title":"Delete Widgets from a Dashboard Layout","path":"/lrsiem/7.23.0/delete-widgets-from-a-dashboard-layout","children":[]},{"id":"ci_9ccf147a6f28561ebbb2e431dfc61855e800cc493f3be06df0cff1f2ecb6705f","title":"Move Widgets","path":"/lrsiem/7.23.0/move-widgets","children":[]},{"id":"ci_798ac0c22ee959bfae1e24e8c59ef05876d63a8c327cbadd93d1de5ae6254271","title":"Rename Widgets","path":"/lrsiem/7.23.0/rename-widgets","children":[]},{"id":"ci_d361f3dfc00dd6445607c497c97520db6fdf3871e8fbccce4288fe3a22842058","title":"Resize Widgets","path":"/lrsiem/7.23.0/resize-widgets","children":[]}]},{"id":"ci_6d61d7993d1831f4b3becf95f5ba43774c87dadd4fc5794951e48c54cde7a091","title":"Component Status Widget","path":"/lrsiem/7.23.0/component-status-widget","children":[]},{"id":"ci_62c1bed386bbca788e8a3a889ec3b3edfb7c94255f4f0174f09665751083a362","title":"Current Processing Rate Widgets","path":"/lrsiem/7.23.0/current-processing-rate-widgets","children":[]},{"id":"ci_d0ed94693baf4205bb8c97de0fdec23df07106d36e11b48b6c50f3f800f8f100","title":"Data Processing Trend Widgets","path":"/lrsiem/7.23.0/data-processing-trend-widgets","children":[]},{"id":"ci_900b4ebd7f47a0466e4bc213349a2b9d7ae24512fd91975403238ed6455a7368","title":"Metric Widget","path":"/lrsiem/7.23.0/metric-widget","children":[{"id":"ci_d18d59af824afe916c23789cf36eb117105355b6bbacf71a3cbe1baf7e986489","title":"Configure Metric Widget Settings","path":"/lrsiem/7.23.0/configure-metric-widget-settings","children":[]}]},{"id":"ci_d61debe60f830e78b4c9f8560e28c9f76fa6b09ebd65b71d64bef1b875d47047","title":"Node-Link Graph Widgets","path":"/lrsiem/7.23.0/node-link-graph-widgets","children":[]},{"id":"ci_d3ecfcb0cde2b4c4e6f5d76e3ca0a6fabd69bcd7bced73e7b0c984cd476299d5","title":"System Database Usage Widget","path":"/lrsiem/7.23.0/system-database-usage-widget","children":[]},{"id":"ci_074f1e3c44db24912a60857bd1aad7bd8d731439cf4ad4a19104c64501475882","title":"Timeline Widget","path":"/lrsiem/7.23.0/timeline-widget","children":[]},{"id":"ci_200bae8238e57cca20613f8784a06aa63bf1bf192403c458560c717bd2942f31","title":"TopX Widgets","path":"/lrsiem/7.23.0/topx-widgets","children":[{"id":"ci_875bc770c56251d3c27a1436ae4ef5eb5a704e6f14c1b4bc976c3d86eba46848","title":"Configure TopX Widget Data Settings","path":"/lrsiem/7.23.0/configure-topx-widget-data-settings","children":[]},{"id":"ci_dc1de857fd679dceaae4dfea60956472c5c509d4db802fbd1b1dc71d543d1913","title":"Configure TopX Widget Graph & Options Settings","path":"/lrsiem/7.23.0/configure-topx-widget-graph-options-settings","children":[]},{"id":"ci_15b0608f67469b92f8e1a8616a95bbfc1afb0a4d439861c3d47fb234b842495e","title":"Drill into Chart Metadata from the Dashboards","path":"/lrsiem/7.23.0/drill-into-chart-metadata-from-the-dashboards","children":[]},{"id":"ci_e8e1799bae5e0c20ded21fc85a3086a248f22fa11d755922b8dcf123a679c14c","title":"Filter Data by Time Range on the Dashboards and Analyze Pages","path":"/lrsiem/7.23.0/filter-data-by-time-range-on-the-dashboards-and-analyze-pages","children":[]},{"id":"ci_b6d14759aadb506fae259b39bef5b99c559ecdcf5ecfe8d945c82aebb72fb3e9","title":"Resize TopX Data Labels on Bar Charts","path":"/lrsiem/7.23.0/resize-topx-data-labels-on-bar-charts","children":[]}]}]}]},{"id":"ci_930248c4ccda4b252f114534b90c4966c43c78ff540007a1d6c686f43cef3819","title":"LogRhythm Schema Dictionary and Guide","path":"/lrsiem/7.23.0/logrhythm-schema-dictionary-and-guide","children":[{"id":"ci_953d9599bfaf0746455a04f76e37e15984313f37bb7addf974af7122ff710120","title":"Application Tab","path":"/lrsiem/7.23.0/application-tab","children":[{"id":"ci_86b6ca5d834e93d6b85eee809d9bd634cacd9b8e264768ea807bcbd71e113465","title":"Action [7.2]","path":"/lrsiem/7.23.0/action-7-2","children":[]},{"id":"ci_c4737b1e4f8b919d5aede7a6af2ba56022dc0d3c030a9e05eb47086aeaa0d01e","title":"Amount","path":"/lrsiem/7.23.0/amount","children":[]},{"id":"ci_c5ce8bc4fa0ed6717862f3402fe9d01e79a6fdc483b5f919b5c622f9dc834559","title":"Command","path":"/lrsiem/7.23.0/command","children":[]},{"id":"ci_b3d8f1c8247343d6ccd7c0494394dd4cde227d39d30d2f6cd22895c459c784f9","title":"Hash [7.2]","path":"/lrsiem/7.23.0/hash-7-2","children":[]},{"id":"ci_eb287a68efaf3fdcdb52927b9ec4b468ea590e520ac643977fa1a15f360e5a5a","title":"IANA Protocol Name","path":"/lrsiem/7.23.0/iana-protocol-name","children":[]},{"id":"ci_d904133c6d0434d8d9217df7c949838f646b81a1d32b4be88cba4a58f220300b","title":"IANA Protocol Number","path":"/lrsiem/7.23.0/iana-protocol-number","children":[]},{"id":"ci_460441e565bd337d237c41859d83925888a41da9d85ae4202580e9df1e5351a5","title":"Object","path":"/lrsiem/7.23.0/object","children":[]},{"id":"ci_2d361a640d14e1622b7a89d1e97d25b47d53476f22e17d231c26d5e8c6b1c3f8","title":"Object Name","path":"/lrsiem/7.23.0/object-name","children":[]},{"id":"ci_80008fc463997c6fbde1f1651613bb53ff8da0f7cf44e2fb7aa2a3e0fc7db49c","title":"Object Type [7.2]","path":"/lrsiem/7.23.0/object-type-7-2","children":[]},{"id":"ci_f54764a7a19b2923b51c66bff710d3c5aa75d74f5ee739d6d703d02796c3192d","title":"Parent Process ID [7.2]","path":"/lrsiem/7.23.0/parent-process-id-7-2","children":[]},{"id":"ci_5c4bf986ce54651b339081950d4a123f345860dd9f6421aa7824afcc88dd5108","title":"Parent Process Name [7.2]","path":"/lrsiem/7.23.0/parent-process-name-7-2","children":[]},{"id":"ci_93bd5df059d562711b15e8ec71e84abfd6acdceb633ae29964ec4b8176f89e0d","title":"Parent Process Path [7.2]","path":"/lrsiem/7.23.0/parent-process-path-7-2","children":[]},{"id":"ci_5d80819d19343f6740f8666860ea4b95849db1aaf844d82ee687e666657bb1ae","title":"Policy [7.2]","path":"/lrsiem/7.23.0/policy-7-2","children":[]},{"id":"ci_30d88f7fdb2218b496a91cbc7b751a24537614cc1774c7c95d0139138efdc7cc","title":"Process ID","path":"/lrsiem/7.23.0/process-id","children":[]},{"id":"ci_16a638958466c56a752914a437d3e84ab673809e480af6629d7f779251b4c0a2","title":"Process Name","path":"/lrsiem/7.23.0/process-name","children":[]},{"id":"ci_c70c88f24141b247d428ab79cd3137ccf87cf4c5db44be36b5b582b2f233873c","title":"Quantity","path":"/lrsiem/7.23.0/quantity","children":[]},{"id":"ci_86fc6126230bbf8b2181b0839bdcb13a8fc10827fd32d037457fbd0da0eb1248","title":"Rate","path":"/lrsiem/7.23.0/rate","children":[]},{"id":"ci_8f94901ae41bfaffcd40c3bbf52ae9b5b0cecfb58610c1edb459bbbde0e68b68","title":"Reason [7.2]","path":"/lrsiem/7.23.0/reason-7-2","children":[]},{"id":"ci_35269efc29f4d553d2aefb55176347ab4f00b42ebbd4124bdc8dfd91305b4db0","title":"Response Code [7.2]","path":"/lrsiem/7.23.0/response-code-7-2","children":[]},{"id":"ci_03e4fa1fa7cd2048c9898975f3df96d329dd7292097550a6d1c3b8e6ecbca46a","title":"Result [7.2]","path":"/lrsiem/7.23.0/result-7-2","children":[]},{"id":"ci_05a77a6b2db6cfb6a5bab6db38d862dcd1a439e684c7c00c1441ad0b33495654","title":"Session","path":"/lrsiem/7.23.0/session","children":[]},{"id":"ci_1f381e74d3d95db773758c8015f8a2b8265406644e0721d6b7e3098f7d1066d6","title":"Session Type [7.2]","path":"/lrsiem/7.23.0/session-type-7-2","children":[]},{"id":"ci_06d26348eb560a8e1636250533013e7bfdad597feb161e98b61be61b9facb24d","title":"Size","path":"/lrsiem/7.23.0/size","children":[]},{"id":"ci_18907256e1a6f53b98a321fcbceda839b73466e358c429c628ae4f743651fcb2","title":"Status [7.2]","path":"/lrsiem/7.23.0/status-7-2","children":[]},{"id":"ci_fa61bd9a1d376d481597f5c6187c5a4c88abcd22ca7a6e537b511508740b42ea","title":"Subject","path":"/lrsiem/7.23.0/subject","children":[]},{"id":"ci_bce269d0b83a4c4d9b692cd5638bbc6897db0ee764a116415d749a2e4fef4980","title":"URL","path":"/lrsiem/7.23.0/url","children":[]},{"id":"ci_7f5a0a664faa6ef3045c08833f47768fc43a80c7fda9476c9644ab11ceac331a","title":"User Agent [7.2]","path":"/lrsiem/7.23.0/user-agent-7-2","children":[]},{"id":"ci_5a82b18988072379d54207d8e07aa38cc3a3447d508378015332f4db31a0cacb","title":"Version","path":"/lrsiem/7.23.0/version","children":[]}]},{"id":"ci_ccc258c67cf1b7db41448d6229da08a0ba52046b5b4b9a9e9037e775bede1fae","title":"Kbytes/Packets Tab","path":"/lrsiem/7.23.0/kbytes-packets-tab","children":[{"id":"ci_e8624bd5262295eaa72c714178883ad60a71c1859a382675dad7e104d77026af","title":"[prefix] [Bits/Bytes] [blank/In/Out]","path":"/lrsiem/7.23.0/prefix-bits-bytes-blank-in-out","children":[]},{"id":"ci_63435a75df88e11b4dd8320ba63971ff386d5df6d3323c7fca73bcb7076449e0","title":"Packets [Total/In/Out]","path":"/lrsiem/7.23.0/packets-total-in-out","children":[]}]},{"id":"ci_b02461498822c1dd90071bab220dc7829d163247a1ca261e7ff1d7699523b189","title":"Classification Tab","path":"/lrsiem/7.23.0/classification-tab","children":[{"id":"ci_964ce6c88baa10758ae59c1d897bbf81488c3fe3aae7c37e8c39339f61eef049","title":"CVE [7.2]","path":"/lrsiem/7.23.0/cve-7-2","children":[]},{"id":"ci_ff2fa986a8f33959023595806c671818ec9216c0f3a8c5c51e9461c059d48b1b","title":"Severity","path":"/lrsiem/7.23.0/severity","children":[]},{"id":"ci_311ce6bba893b1d5351175dc055ffb72bc2e683065b50ee9861ed35c7d69cd79","title":"Threat ID [7.2]","path":"/lrsiem/7.23.0/threat-id-7-2","children":[]},{"id":"ci_391a351a7c108650b56822b4e60430a3f46ae444403fcb225153c521929c7f0b","title":"Threat Name [7.2]","path":"/lrsiem/7.23.0/threat-name-7-2","children":[]},{"id":"ci_1ac61eb4ff25fa5935e434f82b396a723a2c951c01cefc30bc78759a8b4df81c","title":"Vendor Info [7.2]","path":"/lrsiem/7.23.0/vendor-info-7-2","children":[]},{"id":"ci_6a39e481131588ee7497ed63e87fe32019bfb31fb724bf92573f8adfe1f85564","title":"Vendor Message ID","path":"/lrsiem/7.23.0/vendor-message-id","children":[]}]},{"id":"ci_b654f798843969969394b690a501e36d7a4e490be26eb8d35f75cedb4b33e47a","title":"Host Tab","path":"/lrsiem/7.23.0/host-tab","children":[{"id":"ci_b00582f13c3a9f624a25e9c32151e6b63c73ae4814afa723482866a741059774","title":"DIP/DestinationIP/Impacted IP","path":"/lrsiem/7.23.0/dip-destinationip-impacted-ip","children":[]},{"id":"ci_e06be53efe9cfff8d6a2756f394589b0854aae70e81a11fba47673f31b868f04","title":"DIPv4","path":"/lrsiem/7.23.0/dipv4","children":[]},{"id":"ci_462fd37c6f3895b70509e0f4a334d9ca1a976da4273e9cd2525fa89eec625e3b","title":"DIPv6","path":"/lrsiem/7.23.0/dipv6","children":[]},{"id":"ci_8aab980446f1d576c1fec74c1b9532dce01365a38cd4d1fe5e029687840b06e4","title":"DIPv6E","path":"/lrsiem/7.23.0/dipv6e","children":[]},{"id":"ci_0820f506b11733826351fd53a4e5bcd93f8e123e0e3a8694e846e5220c1e3f60","title":"Impacted Hostname","path":"/lrsiem/7.23.0/impacted-hostname","children":[]},{"id":"ci_82c44c69c71044ac52bdff027c737c02b1cd243c564bb7761b23e13f8ced35ba","title":"Impacted Hostname or IP","path":"/lrsiem/7.23.0/impacted-hostname-or-ip","children":[]},{"id":"ci_32a7b2d9281af3b0fd8dc1006590e434abe0b108cbb0fe6aebe4601c3a2b2e01","title":"Impacted Interface","path":"/lrsiem/7.23.0/impacted-interface","children":[]},{"id":"ci_3eeacfbd2af721d8dedade8351a06851193bbfd4657e403188bbf5276e80c6d7","title":"Impacted MAC Address","path":"/lrsiem/7.23.0/impacted-mac-address","children":[]},{"id":"ci_aabaa8327b936e83b57e0802b01710d09005a9f340206b886201836c8a443ba7","title":"Impacted NAT IP","path":"/lrsiem/7.23.0/impacted-nat-ip","children":[]},{"id":"ci_1865e4f6e62d71185a57fb76eae80b4a6d70f269ade94fe3a1d661a92be8fbcc","title":"IP Address (Origin)","path":"/lrsiem/7.23.0/ip-address-origin","children":[]},{"id":"ci_b0029e4f0cf19aa1d62f3d6ffae98fe6f31f688a4ee169d1a14d18936256a2af","title":"Origin Hostname","path":"/lrsiem/7.23.0/origin-hostname","children":[]},{"id":"ci_9e17212606c75ba815350d4070b7de8cfd3c7e4c23fa707a107718fca848d178","title":"Origin Hostname or IP","path":"/lrsiem/7.23.0/origin-hostname-or-ip","children":[]},{"id":"ci_222ac080e77a1f1ef27fa475b98cd1205c1ac410870466299770b5c20cc8e33f","title":"Origin Interface","path":"/lrsiem/7.23.0/origin-interface","children":[]},{"id":"ci_cd680268d42b84752087fa78ddf0d8740f2154d926c22372fb803e78e3f82cf3","title":"Origin MAC Address","path":"/lrsiem/7.23.0/origin-mac-address","children":[]},{"id":"ci_0f52d74acea38ae07b66118ccada6470bcb0bcfaa757b1e8b4629789d1638ee6","title":"Origin NAT IP","path":"/lrsiem/7.23.0/origin-nat-ip","children":[]},{"id":"ci_6172f11c90fb134ac6d6dac363d3e71ca62ca5d66682f355a3a735ef544fac66","title":"Serial Number [7.2]","path":"/lrsiem/7.23.0/serial-number-7-2","children":[]},{"id":"ci_9dd60ae11b77c440626f0249dda460072dba8e4cb03162dd18f6c54aef95294e","title":"SIPv4","path":"/lrsiem/7.23.0/sipv4","children":[]},{"id":"ci_3af03dd9374169b489cedcfc644ac09d870e21cf4ceb32a745394ca580462a75","title":"SIPv6","path":"/lrsiem/7.23.0/sipv6","children":[]},{"id":"ci_198476f44090cb55f205dadfb4653aa0d4523960663e8886af0599fefcf66f38","title":"SIPv6E","path":"/lrsiem/7.23.0/sipv6e","children":[]}]},{"id":"ci_17ac7c7e11c1ff58c28ff4d023d756ad41ebf08c3253ca86355497291d356743","title":"Identity Tab","path":"/lrsiem/7.23.0/identity-tab","children":[{"id":"ci_884faf41716e8ce8d183c4b65e73b11eeb58507034a180768bdeba8b1c3b8513","title":"Account > User (Impacted)","path":"/lrsiem/7.23.0/account-user-impacted","children":[]},{"id":"ci_2073f2f6a76e1c60894a5b36af1b629a729cd3e120e016e3a1b23f30115dc097","title":"Group","path":"/lrsiem/7.23.0/group","children":[]},{"id":"ci_242bfc05882a0f9082b01f5944c29f17a902ef369fc0b580578051836eaa71af","title":"Login > User (Origin)","path":"/lrsiem/7.23.0/login-user-origin","children":[]},{"id":"ci_f65e6469ca9db98b001f8aff0a95209f0604c6bee9f89440477228c866d02d82","title":"Recipient","path":"/lrsiem/7.23.0/recipient","children":[]},{"id":"ci_9d1cfa122c1e0f7a6bf6b180eabfd80464f9038c07a80044e67dfabcb2c62385","title":"Sender","path":"/lrsiem/7.23.0/sender","children":[]}]},{"id":"ci_51d177fafc41143e6d52efd51fc7a8e676a59189329343a1defba088cacd02be","title":"Location Tab","path":"/lrsiem/7.23.0/location-tab","children":[]},{"id":"ci_a24d303cf2eaa065e61f4575c25be7e8dc1d644c5156acc2e05c92ebe0614430","title":"Log Tab","path":"/lrsiem/7.23.0/log-tab","children":[]},{"id":"ci_4f5b47ba6575ba1ea0785b75d6e01345e9d8a99c1013b869f1f74118c8b3a898","title":"Network Tab","path":"/lrsiem/7.23.0/network-tab","children":[{"id":"ci_2ae99e43deb5cf163f8dcd2bb3210533d43f41c47610255ba6cc5b9b010eda1d","title":"Domain (Origin) [7.4]","path":"/lrsiem/7.23.0/domain-origin-7-4","children":[]},{"id":"ci_4d35e76ab4df2a00d0e97e0ae3250e80479fa8d4e0b1da245f8da1a472bdffee","title":"Domain [7.2] (Domain (Impacted))","path":"/lrsiem/7.23.0/domain-7-2-domain-impacted","children":[]},{"id":"ci_723cd2e6490a085556bf64746e54ce37c4488f9dfb93f0b9900d49730d09b421","title":"Impacted NAT Port","path":"/lrsiem/7.23.0/impacted-nat-port","children":[]},{"id":"ci_3904c5f660a321b51afd3506205ff89b70e1bb3253d50897abffcab3269cfdc0","title":"Impacted Port","path":"/lrsiem/7.23.0/impacted-port","children":[]},{"id":"ci_6064549357c23cbbda0338633d271a8635a902db25758dafdbea5bff43d53f37","title":"Origin NAT Port","path":"/lrsiem/7.23.0/origin-nat-port","children":[]},{"id":"ci_6ed37e2539e788d0b325c7ad45e96d6343ab6e34054ee28fde03ecfd82f1f66e","title":"Origin Port","path":"/lrsiem/7.23.0/origin-port","children":[]}]},{"id":"ci_0d644e7249daa40ad28226d28fb639744a657f55dcc5c3deb87cee3e0a7765a1","title":"Other MPE Fields","path":"/lrsiem/7.23.0/other-mpe-fields","children":[{"id":"ci_3b938936d12a8d7d907a229cd6010a724bc9894e1e1ff20ff39279e2a2981d58","title":"[Tag1-Tag5]","path":"/lrsiem/7.23.0/tag1-tag5","children":[]},{"id":"ci_3a63dce9e0cbeef896e441cc5d5afe517083f21130f114b1ff0c0e6ec24e4556","title":"Items In","path":"/lrsiem/7.23.0/items-in","children":[]},{"id":"ci_84188adc46b43a4009b715ad59aedac4627763e0f2823e0505a4c8a180a0e736","title":"Items Out","path":"/lrsiem/7.23.0/items-out","children":[]}]},{"id":"ci_04e342a8d1493a11a0b6e119eb301d39162e76274529eca501ba1124f982177d","title":"Derived Data","path":"/lrsiem/7.23.0/derived-data","children":[{"id":"ci_2d819cca681c690bfc4bac0eb2ae0d11edbf97cf7c09fac643857a0dc20cf908","title":"Identity-Derived Data","path":"/lrsiem/7.23.0/identity-derived-data","children":[]},{"id":"ci_fe6db06250c7e2fbdb57f8ee7cc0274112a540a2baac166dc431adafa0f9217c","title":"Log-Derived Data","path":"/lrsiem/7.23.0/log-derived-data","children":[]}]}]},{"id":"ci_0a677ee7cdd6c00670f61050106fa6e893ee47ed33c36ff624befd24918aa130","title":"Other LogRhythm Applications","path":"/lrsiem/7.23.0/other-logrhythm-applications","children":[{"id":"ci_9ad9e55fae2e198fceed924021a2cd5cd9f238ca6360ddbaa50767037ac7ca9c","title":"Threat Intelligence Service","path":"/lrsiem/7.23.0/threat-intelligence-service","children":[{"id":"ci_4973db83c7f33e23a18176f17b1ba1b518153a878ebb3f71640c2e30a8cb9de0","title":"Install and Deploy the Threat Intelligence Service","path":"/lrsiem/7.23.0/install-and-deploy-the-threat-intelligence-service","children":[{"id":"ci_c5b55ed0eb6457459807b5634ce06ae170b83d79c7e0044ae5e8a1d727d0831e","title":"Run the Threat Intelligence Service Installer","path":"/lrsiem/7.23.0/run-the-threat-intelligence-service-installer","children":[]},{"id":"ci_f04c11cee43aedaaf52e42db22df099efffa855d1dfd99b9e305f4b1f7573f69","title":"Modify, Repair, or Remove the Threat Intelligence Service","path":"/lrsiem/7.23.0/modify-repair-or-remove-the-threat-intelligence-service","children":[]},{"id":"ci_b040ee5d5e6628a02d080e300d8d364143fef77b9e81e8e8986051b340d88fe0","title":"Enable and Import the Threat Intelligence Service Modules","path":"/lrsiem/7.23.0/enable-and-import-the-threat-intelligence-service-modules","children":[]},{"id":"ci_300aa87c62119dd36b214dfdfe2b8cb2364449fecfed3f61182f45758f35953a","title":"Associate Vendor Lists with LogRhythm Lists","path":"/lrsiem/7.23.0/associate-vendor-lists-with-logrhythm-lists","children":[]},{"id":"ci_410dba0b2df68517cb76a96b03b154310a38ab80c723e7a788ef2fbe62cb0b20","title":"Enable Threat List AIE Rules","path":"/lrsiem/7.23.0/enable-threat-list-aie-rules","children":[]},{"id":"ci_1865f94ccd031d1326be8d5a4cdbfdf844339615532d426cd0dd576b124cda3f","title":"Start the LogRhythm Threat Intelligence Service","path":"/lrsiem/7.23.0/start-the-logrhythm-threat-intelligence-service","children":[]},{"id":"ci_9c5b56dfe9fa60d3b77ebc27f0e6bc3f71f9111c9392ab0805b54f11c4be8f90","title":"Vendor Lists","path":"/lrsiem/7.23.0/vendor-lists","children":[{"id":"ci_8fed91e526a7ccbced1c6ceebc4d0278c58fc3373cbce435d615cc561e8a69cf","title":"BrightCloud","path":"/lrsiem/7.23.0/brightcloud","children":[]},{"id":"ci_ae794e6138609304dbf7f1cf215f97464b655d27e0bd04a28291b3febefbe63f","title":"CrowdStrike","path":"/lrsiem/7.23.0/crowdstrike","children":[]},{"id":"ci_bf3bc6ba7c174b4b590a309bd7631dd5ec9e0bb277f4025662e23fea4b4aa96a","title":"Cisco AMP Threat Grid","path":"/lrsiem/7.23.0/cisco-amp-threat-grid","children":[]},{"id":"ci_1d4255a282c9a6b6024b3b16e0efdc9146dcf1eb7cc49fe70adb7b9afb5d3c9c","title":"Symantec","path":"/lrsiem/7.23.0/symantec","children":[]},{"id":"ci_18ff4ccbeb77995e10ee702e59328b216b200d7650c085fb2c175f7687d11850","title":"Open Source","path":"/lrsiem/7.23.0/open-source","children":[]},{"id":"ci_d8da2accfc89ac84654d0b352052fa1239931aa92454b44076e680f5ccf4c6e2","title":"Custom Providers","path":"/lrsiem/7.23.0/custom-providers","children":[]}]}]},{"id":"ci_9c6746a71f9b835ae9b59a176d45f46d39f4aec1443f302a541ebfb8e87a766f","title":"Threat Intelligence Service User Guide","path":"/lrsiem/7.23.0/threat-intelligence-service-user-guide","children":[{"id":"ci_6d5c1fce2d2a07565ca160af23931eed225abd0e2a1e005df9ad1b1ab3e3a0d6","title":"Launch the Service Manager","path":"/lrsiem/7.23.0/launch-the-service-manager","children":[]},{"id":"ci_3cae980b9c9470d4b81a3a12466259bb0951ec5d448754ea2e35dc79847ce8a0","title":"Configure the Connection to LogRhythm","path":"/lrsiem/7.23.0/configure-the-connection-to-logrhythm","children":[]},{"id":"ci_b99a48e04730d70f23c3ae78a2f9cb10a971429af9481faff307ebfe2ce52ba7","title":"Configure Proxy Settings","path":"/lrsiem/7.23.0/configure-proxy-settings","children":[]},{"id":"ci_d411bdfc67ea24e205bd027a8e9938b6beecdd5fedddbd426fd20f7c792c1d30","title":"Configure Vendor Threat Feeds","path":"/lrsiem/7.23.0/configure-vendor-threat-feeds","children":[]},{"id":"ci_0101ea5e25b810f1ae42b7c55b6aed4628257d73c8317fa5a27c88702b050f6e","title":"Add a Custom STIX/TAXII Provider","path":"/lrsiem/7.23.0/add-a-custom-stix-taxii-provider","children":[{"id":"ci_c7dc71db9d4d6377449a5fefdb6c20de9a452978e87edb2a477cd411c87b3ea5","title":"Add a STIX Feed in TIS","path":"/lrsiem/7.23.0/add-a-stix-feed-in-tis","children":[]},{"id":"ci_afb2e94d8039e6d5789a88bcf1f2636e291c807428d8dd3d5292bd2caca715d2","title":"Configure CustomObjectType in STIX/TAXII Feeds in TIS","path":"/lrsiem/7.23.0/configure-customobjecttype-in-stix-taxii-feeds-in-tis","children":[]}]},{"id":"ci_9f41a5c918aa0c2bcf4dea98d4585b44b46083ae22172dc8ab08474193f3d401","title":"Start and Stop the Service","path":"/lrsiem/7.23.0/start-and-stop-the-service","children":[]},{"id":"ci_7ec72db4110099e46b9df807764653e2f72a1d86bceb22234dced74badba420c","title":"Configure the Threat Intelligence Service Whitelist","path":"/lrsiem/7.23.0/configure-the-threat-intelligence-service-whitelist","children":[]},{"id":"ci_2341890b4e48d511b0ec6dafbffcf0c7a8620ca9dbeb529701cc0573339b28ad","title":"URL Normalization","path":"/lrsiem/7.23.0/url-normalization","children":[]},{"id":"ci_a0dfe1932048854bc019e87872ec76df25ea656aa17fbb9f1035ad15fc87adc3","title":"Request Response Logging","path":"/lrsiem/7.23.0/request-response-logging","children":[]},{"id":"ci_0850f9485ce2b4789c49e23955e0d18b6ed5ebf5b07478e41dd6f1faccf8d245","title":"View Log Files","path":"/lrsiem/7.23.0/view-log-files","children":[]},{"id":"ci_3814997837feaff6f2e00d921b0c3a79e08ebccf4dd96efd04b08ff68f883158","title":"Troubleshoot the Threat Intelligence Service","path":"/lrsiem/7.23.0/troubleshoot-the-threat-intelligence-service","children":[{"id":"ci_92819802d77c330036d3fcb36933cc8e4fd7881c5c46d42f9deec56904221849","title":"Firewall Blocking Open Source URLs in TIS","path":"/lrsiem/7.23.0/firewall-blocking-open-source-urls-in-tis","children":[]},{"id":"ci_906e61ea62cfc01d0ed212d3e4964516c515e6e57958632d022e60886f7392ba","title":"Log Files in TIS","path":"/lrsiem/7.23.0/log-files-in-tis","children":[]},{"id":"ci_24406b4227b7c4350e62d8f50f43efb8505bed390e8e532c2227020e6670d6bc","title":"Resource Utilization in TIS","path":"/lrsiem/7.23.0/resource-utilization-in-tis","children":[]},{"id":"ci_265dd7884c6232f502a4866e5a295f0d37b7dc5e6945ac011877ddebf50d96e3","title":"Threat Intelligence Service Will Not Start","path":"/lrsiem/7.23.0/threat-intelligence-service-will-not-start","children":[]}]}]}]},{"id":"ci_eb636501013087d131deba18e9dca4b7f17615a18534f868719f28335ff9b847","title":"LogRhythm Echo","path":"/lrsiem/7.23.0/logrhythm-echo","children":[{"id":"ci_9004a736099fc753fe9e091b9cac749b3f67182ecb7ff8a8bf95eabf8c6d0d9f","title":"Install or Upgrade LogRhythm Echo","path":"/lrsiem/7.23.0/install-or-upgrade-logrhythm-echo","children":[]},{"id":"ci_6775cfe206f65a78dec8fb0457aeb8d7aceb690c4b6c2ca7b143c9f0bcc1910e","title":"Configure LogRhythm Echo","path":"/lrsiem/7.23.0/configure-logrhythm-echo","children":[]},{"id":"ci_a44f206b6a744293072bdc3617ad08a48ee8c82e3305a7bcb1e3b81ee51f7a55","title":"Manage LogRhythm Echo Use Cases","path":"/lrsiem/7.23.0/manage-logrhythm-echo-use-cases","children":[]},{"id":"ci_7e6c4220f2ec52988c970b3679c7e334941e32db75b623455d900e81beccfbc4","title":"Run LogRhythm Echo Use Cases","path":"/lrsiem/7.23.0/run-logrhythm-echo-use-cases","children":[]},{"id":"ci_70eb6e080acdd397897a44e61d87ac3726c15e092d696c890ab028054c59f63c","title":"Schedule LogRhythm Echo Use Cases","path":"/lrsiem/7.23.0/schedule-logrhythm-echo-use-cases","children":[]},{"id":"ci_fee5ec70162654133b27c3abc5bc389c120f1d6e45eb2496f68663e6b34d2435","title":"LogRhythm Echo API","path":"/lrsiem/7.23.0/logrhythm-echo-api","children":[]},{"id":"ci_811a2c0ee24e56a1ec47e79abb1d5b2ade79f4dfe8dd7278d936876dcf8c0f2e","title":"LogRhythm Echo Troubleshooting","path":"/lrsiem/7.23.0/logrhythm-echo-troubleshooting","children":[]},{"id":"ci_c0b3a27ad5c6dc6f0c7956146cd610b874d1a33da6545efeacfab3977c386a63","title":"LogRhythm Echo Use Case DB","path":"/lrsiem/7.23.0/logrhythm-echo-use-case-db","children":[]},{"id":"ci_cc6d9c16d8ff7011496a0ccfddb190780cb44b4d4373c5ae3f6ec33633834be5","title":"LogRhythm Echo Use Cases and Their AIE Rules, Lists, and SmartResponses","path":"/lrsiem/7.23.0/logrhythm-echo-use-cases-and-their-aie-rules-lists-and-smartresponses","children":[]}]},{"id":"ci_69425e3a614806daf8f3b389fe7ce5978bccc08f640ddca0d5be9412ae894a91","title":"LogRhythm Intelligence","path":"/lrsiem/7.23.0/logrhythm-intelligence","children":[{"id":"ci_06061a6712d58e502d7a4d0dbbf20c505b6db5b156d0f97b77a89a3114fede34","title":"LogRhythm Intelligence Threat Summary","path":"/lrsiem/7.23.0/logrhythm-intelligence-threat-summary","children":[]},{"id":"ci_f30ad9af83f6cfe56aa3e0be9af704a154bad1b22ce4eef6a60abf46db0d9fe3","title":"LogRhythm Intelligence Cloud Data Security","path":"/lrsiem/7.23.0/logrhythm-intelligence-cloud-data-security","children":[]}]},{"id":"ci_904eea9053c1b39638b7fdb98873265b8139de32beba54dc6f46e4c6bcaab4d3","title":"LogRhythm Diagnostics Tool","path":"/lrsiem/7.23.0/logrhythm-diagnostics-tool","children":[{"id":"ci_f2e6efaa31ac0cee65974358ffa6127e6a3467027464f7733076d053aad76d0a","title":"Install the Diagnostics Agent and Diagnostics Tool","path":"/lrsiem/7.23.0/install-the-diagnostics-agent-and-diagnostics-tool","children":[]},{"id":"ci_c47ec6e546d775fa2ac9b76906482e395a3c377eb0f78c9c420564af47422efd","title":"Configure Collection on the Diagnostics Tool","path":"/lrsiem/7.23.0/configure-collection-on-the-diagnostics-tool","children":[]},{"id":"ci_cf6be5bcb22e0c4607e8067b9c7741ee27ca5f0012afe85667e1a5d52faedf40","title":"Tabs in the Diagnostic Tool","path":"/lrsiem/7.23.0/tabs-in-the-diagnostic-tool","children":[]},{"id":"ci_573aca062fa0274623c12e6c9f4254a12318b8b3214bd705d2515a8747c6c41b","title":"Log Files and Data Collected by the Diagnostic Tool","path":"/lrsiem/7.23.0/log-files-and-data-collected-by-the-diagnostic-tool","children":[]},{"id":"ci_2e9dd30ca49aa1097420d8c2b8f30d485b26bc537264eb403fb54c8f536e3504","title":"Detailed .zip File Contents From the Diagnostics Tool","path":"/lrsiem/7.23.0/detailed-zip-file-contents-from-the-diagnostics-tool","children":[]}]},{"id":"ci_327b6858fd0ebc6d3fe93efed3382984f103bde916876081cf3be67c742a6ecc","title":"TrueIdentity Sync Client User Guide","path":"/lrsiem/7.23.0/trueidentity-sync-client-user-guide","children":[{"id":"ci_7e6992b1af5cf54adae39f253c0de55efa5e909ee816ff18cd0822407d5e1fcc","title":"TrueIdentity Sync Client Release Notes","path":"/lrsiem/7.23.0/trueidentity-sync-client-release-notes","children":[]},{"id":"ci_8d590049872ef5331559c479c801c56fe540d59205d657158fdfebfa93b68e10","title":"Install the TrueIdentity Sync Client","path":"/lrsiem/7.23.0/install-the-trueidentity-sync-client","children":[]},{"id":"ci_250464342dacf9da2e1e81671c023a0f8a2046aaf4fb58672632099f543bba62","title":"Create Custom Certificates","path":"/lrsiem/7.23.0/create-custom-certificates","children":[]},{"id":"ci_da58cd20f892d5d4ed61e9fbd92da111f77ec57db7fbdba27fd8d57cb7d5dbe4","title":"Generate LR API Token","path":"/lrsiem/7.23.0/generate-lr-api-token","children":[]},{"id":"ci_0e808f35e393c31a6bf67f622c2e2e79052f6447aad1a0d758bacbeac7c37511","title":"Launch the TrueIdentity Sync Client","path":"/lrsiem/7.23.0/launch-the-trueidentity-sync-client","children":[]},{"id":"ci_eea6cfabfd017f7209579b371c658fa924a5cccfc5e04cd04ae7972713d3baf7","title":"Add a TrueIdentity Sync Job","path":"/lrsiem/7.23.0/add-a-trueidentity-sync-job","children":[]},{"id":"ci_3f9ad37ac8b5c67769d58655651708307f14361bd21821e14ca1d114342d9777","title":"View Synchronized TrueIdentities","path":"/lrsiem/7.23.0/view-synchronized-trueidentities","children":[]},{"id":"ci_a848b3c96685ad526a466eed6efe15a71f51fa0713e89df63ed0b46be339cca0","title":"Troubleshoot the TrueIdentity Sync Client","path":"/lrsiem/7.23.0/troubleshoot-the-trueidentity-sync-client","children":[]}]},{"id":"ci_c8ba82bef5e8cdc0eb18c46d82a4f5f9c66abb6706b675b878b4eeb500eedfb2","title":"Using Kibana with LogRhythm SIEM","path":"/lrsiem/7.23.0/using-kibana-with-logrhythm-siem","children":[]},{"id":"ci_9257104ac75391021f3ab4d1dd53780ef111deb3898c23034808147986b16b62","title":"DX Upgrade Checker","path":"/lrsiem/7.23.0/dx-upgrade-checker","children":[]}]},{"id":"ci_f97ea89789536b472aa113288acadd9f88dfa6a6451fc59eb66fa18e5a70dd72","title":"Understand the LogRhythm Architecture","path":"/lrsiem/7.23.0/understand-the-logrhythm-architecture","children":[{"id":"ci_9df227d8ad72823d3d852ef7a663df28a2b37d32863956e12592b9b886985848","title":"Licensing","path":"/lrsiem/7.23.0/licensing","children":[]},{"id":"ci_8e0e339dc00ec1016fa0d9c29257d8e8f08b8c9b0f4b05d4f0f2e92c1289884f","title":"Log Processing","path":"/lrsiem/7.23.0/log-processing","children":[{"id":"ci_d5c21991d5009bfebddeec73ef4ad07abebc5f3c89ea192f9c65cf2ed70e169f","title":"Audit Classifications","path":"/lrsiem/7.23.0/audit-classifications","children":[]},{"id":"ci_e54e3288c1fea39ac01369313e8274edae89659ec2f39b85d884b0aba2606e6e","title":"Configuration and Log Processing","path":"/lrsiem/7.23.0/configuration-and-log-processing","children":[]},{"id":"ci_089a5e4567babc707f631e78d79d273ff5a699bbe53a1b67ffb2e74631bc3bba","title":"Operations Classifications","path":"/lrsiem/7.23.0/operations-classifications","children":[]},{"id":"ci_b8413698477b15becca5b6ac8b6a3d0f955a04fcc493d5d7fb051ea2397774d2","title":"Security Classifications","path":"/lrsiem/7.23.0/security-classifications","children":[]}]},{"id":"ci_12a96dcdd5c26db2e071fac7909b6ae804dbf3447a62398eb327c343da85d518","title":"LogRhythm SIEM Databases","path":"/lrsiem/7.23.0/logrhythm-siem-databases","children":[]},{"id":"ci_5cb0bfbe23c2a71443927fcb66a3b69699857e1c5307c2f188a1df79c183343e","title":"Logs, Events, and Alarms","path":"/lrsiem/7.23.0/logs-events-and-alarms","children":[]},{"id":"ci_a6e18ac5442a728d3149fd212f0a00a4162dc0a972d58788da3a028670feb2bd","title":"Networking and Communication","path":"/lrsiem/7.23.0/networking-and-communication","children":[]},{"id":"ci_98dbc4dfdc9e37f7226691bbeab80076e51238657a7131911f6bafb9f391eae1","title":"Component Reference","path":"/lrsiem/7.23.0/component-reference","children":[]}]},{"id":"ci_a2a6effe260984517deb68a6e2f7ea26b391cdef0c925983dee320a3e179f163","title":"Find More Information","path":"/lrsiem/7.23.0/find-more-information","children":[{"id":"ci_cfd9400662646f925533e6ca1ecfd541346e086244407a941a18ab268fdb9cce","title":"Customer Support Guide","path":"/lrsiem/7.23.0/customer-support-guide","children":[]},{"id":"ci_3dee075aa8f97022aea6cb75d819830f680275fd748b921fd5766b9f1ef7e88a","title":"Glossary of LogRhythm Products and Components","path":"/lrsiem/7.23.0/glossary-of-logrhythm-products-and-components","children":[]},{"id":"ci_cb76e4ec9df3146647b328e13d9f5a8ee286310d368c60571b4529c9dfda95c6","title":"Open Source License Acknowledgements","path":"/lrsiem/7.23.0/open-source-license-acknowledgements","children":[]},{"id":"ci_2bd7c58ff4b23728508d5e977f9ed0f8e14dbfdb6a40310e62302b3cecbee298","title":"Upgrade FAQ and Determining the Correct Upgrade Path","path":"/lrsiem/7.23.0/upgrade-faq-and-determining-the-correct-upgrade-path","children":[]},{"id":"ci_ee8ec8306ad784cc1558bafe65eb8ce89ece6822c4bc3a49c4a5650bff6cd30b","title":"End of Life Policies for Software and Hardware","path":"/lrsiem/7.23.0/end-of-life-policies-for-software-and-hardware","children":[]}]},{"id":"ci_5be509da7339e2209b2d3cc47ed8cc79331d7e3e356dc183b87dc1e209a48fb2","title":"Download PDFs","path":"/lrsiem/7.23.0/download-pdfs","children":[]}]