[{"id":"ci_108eb9beb079c7f8bddaf13c4ea314ef55c4f7862ddacce4a75bc2ed748f9701","title":"LogRhythm Release Notes","path":"/lrsiem/7.25.0/logrhythm-release-notes","children":[{"id":"ci_5ece72296a83341e5b64ae117182126e2ef5341e91d8e3ebb2d7acf8cb45d79a","title":"7.25.0.1067 Release Notes - 17 August 2026","path":"/lrsiem/7.25.0/7-25-0-1067-release-notes-17-august-2026","children":[]},{"id":"ci_2d219324c157b2cc0dfddab93ff6455e9693bbfdcbd0dd64e54601afeab55f20","title":"7.25.0 GA Release Notes - 1 July 2026","path":"/lrsiem/7.25.0/7-25-0-ga-release-notes-1-july-2026","children":[]},{"id":"ci_1185a185df803233a95a517e8a43bc10e0ead1ed737d4d9dfe82d892c0082205","title":"7.24.0 GA Release Notes - 1 April 2026","path":"/lrsiem/7.25.0/7-24-0-ga-release-notes-1-april-2026","children":[]},{"id":"ci_6802d2ea4ed0a47356adaacfac4557f8d6caa5193ccd693fdd1e0706ccf64b46","title":"7.23.0.119 Release Notes - 29 January 2026","path":"/lrsiem/7.25.0/7-23-0-119-release-notes-29-january-2026","children":[]},{"id":"ci_ed427c463e46f01f46bcfa915f53432c05f34a8faa3c838001b0d6a5f959924e","title":"7.23.0 GA Release Notes - 6 January 2026","path":"/lrsiem/7.25.0/7-23-0-ga-release-notes-6-january-2026","children":[]},{"id":"ci_63f3c2f5f2790bcf1d612f6fdc3b91ae1c5956f6eafdacf78b2263b0dd2c8017","title":"7.22.0 GA Release Notes - 1 October 2025","path":"/lrsiem/7.25.0/7-22-0-ga-release-notes-1-october-2025","children":[]},{"id":"ci_56b06a6ac995b2197ba1934066929b3241ef4f663c771bda6ef5a27ce39d5199","title":"7.21.0.97 Release Notes - 6 August 2025","path":"/lrsiem/7.25.0/7-21-0-97-release-notes-6-august-2025","children":[]},{"id":"ci_e7ef4c33948dc21bfbce19df53a4916eb27b1942fa4a7a6749c44c565b64adfe","title":"7.21.0 GA Release Notes - 1 July 2025","path":"/lrsiem/7.25.0/7-21-0-ga-release-notes-1-july-2025","children":[]},{"id":"ci_54376e15fd9c6f60235b105ea1352d4ac8153fc4a0a98f4504809e6b4587bf3a","title":"7.20.0.71 Release Notes - 23 April 2025","path":"/lrsiem/7.25.0/7-20-0-71-release-notes-23-april-2025","children":[]},{"id":"ci_14b25f1b5dba29883cf86df71dc21f0dc49cb6407a724716277cece69cfe457f","title":"7.20.0 GA Release Notes - 1 April 2025","path":"/lrsiem/7.25.0/7-20-0-ga-release-notes-1-april-2025","children":[]},{"id":"ci_f76c62e64a430e1551e08a8cfbea8980044b5239710869d6f66861fa8aa7ded9","title":"7.19.0.54 Release Notes - 3 February 2025","path":"/lrsiem/7.25.0/7-19-0-54-release-notes-3-february-2025","children":[]},{"id":"ci_3a9ad4b2604da4ed2f786a1b4bf6be5ecc3ea2b1ec228701869fa87c44bd71f0","title":"7.19.0 GA Release Notes - 7 January 2025","path":"/lrsiem/7.25.0/7-19-0-ga-release-notes-7-january-2025","children":[]},{"id":"ci_38289c2bec196bb51a6f660232a8bf73697721b69fc9d6911437b07befbcd450","title":"7.18.0.48 Release Notes - 7 November 2024","path":"/lrsiem/7.25.0/7-18-0-48-release-notes-7-november-2024","children":[]},{"id":"ci_b3e19cde0eb8571cf2a0fa63a5bf9ea1beae3315f8b890df5dfcc1daedfff0c1","title":"7.18.0.46 Release Notes - 31 October 2024","path":"/lrsiem/7.25.0/7-18-0-46-release-notes-31-october-2024","children":[]},{"id":"ci_46f94b192f7a8d8a1a989cc538ba3cc560e20f66bd7a4974c0239ebe50eff0b6","title":"7.18.0 GA Release Notes - 1 October 2024","path":"/lrsiem/7.25.0/7-18-0-ga-release-notes-1-october-2024","children":[]},{"id":"ci_506f1f3787cf66f878e1782a75c9310a05f7f4e6e8f0dab21288433bb3445f47","title":"7.17.0.55 Release Notes - 12 August 2024","path":"/lrsiem/7.25.0/7-17-0-55-release-notes-12-august-2024","children":[]},{"id":"ci_479c327ea033641a15aafa04cae3516ae97fdf07d37b646d83ce4ab8aa7f959f","title":"7.17.0 GA Release Notes - 1 July 2024","path":"/lrsiem/7.25.0/7-17-0-ga-release-notes-1-july-2024","children":[]}]},{"id":"ci_c8ca7481d197762345c0068d7a17dcad3ee045f3552b0125ec52717f084cd012","title":"Get Started with LogRhythm SIEM","path":"/lrsiem/7.25.0/get-started-with-logrhythm-siem","children":[{"id":"ci_4b1b27de9c833826bc108db27cce41518cf0483bcf3bdea5a6fd22b5bd5d1a03","title":"Log in to the Client Console","path":"/lrsiem/7.25.0/log-in-to-the-client-console","children":[]},{"id":"ci_d555b22cf9bf479011dcf0aefe807223b2bca7ce8cbacc6f3fb9c3e07701f229","title":"Complete the New Deployment Wizard","path":"/lrsiem/7.25.0/complete-the-new-deployment-wizard","children":[]},{"id":"ci_074034d48cbc03393a7a5c563becac79448979af1c6f6e803365a5df246a238c","title":"Assign LogRhythm Licenses","path":"/lrsiem/7.25.0/assign-logrhythm-licenses","children":[]},{"id":"ci_1f77247f7f0a4d1fcabcee5a8c01165172e6564334e5afcafd6354050ee72141","title":"Log in to the Web Console","path":"/lrsiem/7.25.0/log-in-to-the-web-console","children":[]},{"id":"ci_f09561b01416f94dc8924c1b7d956d580bf67a4801f5b5442c60829aef970258","title":"Verify the Web Console Connection Status","path":"/lrsiem/7.25.0/verify-the-web-console-connection-status","children":[]},{"id":"ci_68c09d8548f83946b1b078574bc097405f8c564f03c5d72d468619b524eca306","title":"Configure NetMon to Integrate with the Web Console","path":"/lrsiem/7.25.0/configure-netmon-to-integrate-with-the-web-console","children":[]}]},{"id":"ci_ce8e48ef6e1beca78954fa27fba9b4b3d039e7b1c9c34dc8d60bc6b3b64557e5","title":"Client Console Administrator Guide","path":"/lrsiem/7.25.0/client-console-administrator-guide","children":[{"id":"ci_31720dd06b434774f0c3de55af6b9384feb79d46185ff97531bfe725647a44ff","title":"Advanced Intelligence Engine","path":"/lrsiem/7.25.0/advanced-intelligence-engine","children":[{"id":"ci_7b398b01ad680d6564df4c2af03b53f2bbf732566d6fd8c0e38fb4cc4b4ebae7","title":"Add AI Engine Servers","path":"/lrsiem/7.25.0/add-ai-engine-servers","children":[]},{"id":"ci_27c6bc931405c693ccefa015b63452ca4208c1d270bf327a897bc37969a1cd92","title":"Apply Recommended Values to an AI Engine Server","path":"/lrsiem/7.25.0/apply-recommended-values-to-an-ai-engine-server","children":[]},{"id":"ci_eefa9d2affb2b2f4d49c79206c997a5eb1cbded8ed83e167c107c4199419761a","title":"Configure the Advanced Intelligence Engine","path":"/lrsiem/7.25.0/configure-the-advanced-intelligence-engine","children":[]},{"id":"ci_09ee5e035a928adb9c9d0eed8de6e2b96c11c801e3efa5050c6cc47a4deadb78","title":"Configure the Archive Engine Service","path":"/lrsiem/7.25.0/configure-the-archive-engine-service","children":[]},{"id":"ci_70b757172828b0627a0eb48725b4784ef0e2e1623c723bc391784c4cdf5a9aa0","title":"Create New AI Engine Rules","path":"/lrsiem/7.25.0/create-new-ai-engine-rules","children":[]},{"id":"ci_d61ab6383930ccf7f02e70c84a80da4f2661b55e8eabc0c7e718cce0c4199299","title":"Define AI Engine Linked Data Block Relationships","path":"/lrsiem/7.25.0/define-ai-engine-linked-data-block-relationships","children":[]},{"id":"ci_b26449b32e0a53cf7e9365af09f2cae35c446703fb6ca29c03bdc1d06144fec3","title":"Define AI Engine Rule Block Relationships","path":"/lrsiem/7.25.0/define-ai-engine-rule-block-relationships","children":[]},{"id":"ci_920b76e115f98ef6f738ef2d371ef5b31a954e0825abdbb2dd3b83c213b49f14","title":"Drill Down on AI Engine Results","path":"/lrsiem/7.25.0/drill-down-on-ai-engine-results","children":[]},{"id":"ci_0759f93edb4bcf44443e29444719e36685fdedb02ccf4dfd9dd8282671970661","title":"Import or Export AI Engine Rules from the Grid","path":"/lrsiem/7.25.0/import-or-export-ai-engine-rules-from-the-grid","children":[]},{"id":"ci_87b955031c4e2a43d0549af9158e7f4b05d134fbd51d19b4edb4a99748572876","title":"Modify AI Engine Rules","path":"/lrsiem/7.25.0/modify-ai-engine-rules","children":[]},{"id":"ci_bedcc2dfc06f919c06341680b63334c7971f9c2a5c0bc58cba78001d74186438","title":"Restart AI Engine Servers","path":"/lrsiem/7.25.0/restart-ai-engine-servers","children":[]},{"id":"ci_61c97b6a2873bcb3790eecec449038f3c708e9449b27e39797c8760addbe0202","title":"Revert an AI Engine Server to a Previous Configuration","path":"/lrsiem/7.25.0/revert-an-ai-engine-server-to-a-previous-configuration","children":[]},{"id":"ci_17e9a935ab7de0ea5a5d14bc2b7c14ba58af8364e9e474c9fc98dcfc4a224cb6","title":"Update the IP Address of an AI Engine","path":"/lrsiem/7.25.0/update-the-ip-address-of-an-ai-engine","children":[]},{"id":"ci_af2fab3fdf6249939f87048dcb1ec32791c72f6d03f4e6650a402df49244df18","title":"Use AI Engine Rule Sets","path":"/lrsiem/7.25.0/use-ai-engine-rule-sets","children":[]},{"id":"ci_c92fc5dea27d91367b664112582d1169456bc9e67460496c0227d67a6f436139","title":"Use AI Engine Workloads","path":"/lrsiem/7.25.0/use-ai-engine-workloads","children":[]},{"id":"ci_00e5290ef4c091146d4d63b2c8f8aa4484dc09ae05ba0f5159d7abd03a9fd86c","title":"Use Saved AI Engine Filters","path":"/lrsiem/7.25.0/use-saved-ai-engine-filters","children":[]},{"id":"ci_aec451824d4e30bbd531f0a6c3f92f274f682d2d2b5eb11f5aa9b35fb45202ed","title":"Use the AI Engine Local Configuration Manager","path":"/lrsiem/7.25.0/use-the-ai-engine-local-configuration-manager","children":[]},{"id":"ci_1298e431f6d3c093641fc3f52fc2855a4083bdf1e16d0a803c1bad6d9df9bc0c","title":"View AI Engine Generated Alarms","path":"/lrsiem/7.25.0/view-ai-engine-generated-alarms","children":[]},{"id":"ci_58ad0c29d4702097f63f41e131bc6935dc96eb21096d10fdc043d46ea46ec9a2","title":"View AI Engine Rules","path":"/lrsiem/7.25.0/view-ai-engine-rules","children":[]},{"id":"ci_fcf94a056d3feae5518f6889d238e44525ffc6663ab2405d43f924f9665241f0","title":"Work with Existing AI Engine Rules","path":"/lrsiem/7.25.0/work-with-existing-ai-engine-rules","children":[]}]},{"id":"ci_076c17430da4c56cd03c974cb3f7d9fff9e962545905e58797b2efe12c9ace85","title":"Alarm Rules","path":"/lrsiem/7.25.0/alarm-rules","children":[{"id":"ci_68a63cbeff59426f814b59cf41cc2bf329d403f5c1abff3effada42134c7b214","title":"Alarm Notification Policies","path":"/lrsiem/7.25.0/alarm-notification-policies","children":[{"id":"ci_a8742122309b4e2c58781045ee7c3cacf45e6bd26c3696ee903a49f92502d5d1","title":"Create Group Notifications for Alarms","path":"/lrsiem/7.25.0/create-group-notifications-for-alarms","children":[]},{"id":"ci_7854742bb7c7dc807478dc65031cf4becaec353125bede01f9769198714152e2","title":"Create New Email Alarm Notification Policies","path":"/lrsiem/7.25.0/create-new-email-alarm-notification-policies","children":[]},{"id":"ci_01b6f706b8395af4158b2795beb3dfe139e2e1d3ade01ae2bdaa2acfe58f8f41","title":"Create New SNMP Alarm Notification Policies","path":"/lrsiem/7.25.0/create-new-snmp-alarm-notification-policies","children":[]},{"id":"ci_ecb0c78ccd5e700400b7729254f3d6f97a58750050d66ee90b5c8042c47dcc90","title":"Create New Text File Alarm Notification Policies","path":"/lrsiem/7.25.0/create-new-text-file-alarm-notification-policies","children":[]},{"id":"ci_75aeea318326ba2b80a803750b863dd3d89e522f3304ec0133d58b27baaf0d2f","title":"Define a Text File Notification Policy","path":"/lrsiem/7.25.0/define-a-text-file-notification-policy","children":[]}]},{"id":"ci_9d8ab3093bdfa03327f2f556d0b9f21dd19cd139d488981f841485cc1073b03a","title":"Create Alarm Rules","path":"/lrsiem/7.25.0/create-alarm-rules","children":[]},{"id":"ci_f62127b2f85f870d468ad56e088a4096e365f5ad60e7e58ec6f21ef4c2c92a3e","title":"Create Alarm Rules for Known Logs","path":"/lrsiem/7.25.0/create-alarm-rules-for-known-logs","children":[]},{"id":"ci_62f2d06dd2502b1a1ddef6f49a563b51d9d795bf0617c967742971585709008a","title":"Enable and Disable Alarm Rules","path":"/lrsiem/7.25.0/enable-and-disable-alarm-rules","children":[]},{"id":"ci_00da4d82021be37bf70f34124cc57bd9cfcfc3bafcc6be8bb2b49bb10135da36","title":"Modify Alarm Rule Notifications in Batch","path":"/lrsiem/7.25.0/modify-alarm-rule-notifications-in-batch","children":[]},{"id":"ci_8337a7d5554035254efa3ad839010c81ff5e5595e83454e172e72af0e40e86e7","title":"Modify Alarm Rules","path":"/lrsiem/7.25.0/modify-alarm-rules","children":[]},{"id":"ci_2a00dc6635098e1fc49954af9d468e23d7f564ef05af6c40fcc0b0ab357078cf","title":"Retire or Activate Alarm Rules","path":"/lrsiem/7.25.0/retire-or-activate-alarm-rules","children":[]}]},{"id":"ci_91c76dfb618abaeaa41ec43ff22073d30000a87a0d50a8122e3bea081673df10","title":"Automatic Host Contextualization","path":"/lrsiem/7.25.0/automatic-host-contextualization","children":[{"id":"ci_1a176148b90573b5bc68ec81f5a99092e8e86f223d82a61b55d996ae4f81c529","title":"Disable Automatic Host Contextualization","path":"/lrsiem/7.25.0/disable-automatic-host-contextualization","children":[]},{"id":"ci_dbb331e4810faef538e53abc2506c8e4614e2bf571085079429dc0698362ca6d","title":"Map Ports","path":"/lrsiem/7.25.0/map-ports","children":[]}]},{"id":"ci_261e8fc5dc49721b3b3aa25832619a08e62bde038e6166e3c7b3a13f44143e6b","title":"Data Archives and Restoration","path":"/lrsiem/7.25.0/data-archives-and-restoration","children":[{"id":"ci_fbd4b01b4f86acba473222919b60b9cb85f0d3d447e7fd25191d74ca2a371581","title":"Add a Data Processor to Restore Archives","path":"/lrsiem/7.25.0/add-a-data-processor-to-restore-archives","children":[]},{"id":"ci_7a8b117c440f8c5bf86ef2731b00fff992be2409d0480615f5bb7a8005ea1df3","title":"Backup and Recovery Procedures","path":"/lrsiem/7.25.0/backup-and-recovery-procedures","children":[{"id":"ci_a81419616d582e22ce651b08a182a178e20a02fbdee44f81d83646911de6f327","title":"Back Up LogRhythm Archives","path":"/lrsiem/7.25.0/back-up-logrhythm-archives","children":[]},{"id":"ci_cb560cb2c201da5a82615e9327bb42b82a9144c8e95efdb6e1b81aaf49ca2a74","title":"Configure Automated Platform Manager Database Backups","path":"/lrsiem/7.25.0/configure-automated-platform-manager-database-backups","children":[]},{"id":"ci_69cd388714c1461c45ea609133f27bf31c836d7bf335bab39cba6fe9cdd6d560","title":"Perform a Manual Platform Manager Backup","path":"/lrsiem/7.25.0/perform-a-manual-platform-manager-backup","children":[]},{"id":"ci_a5c096e3aabbea59be6a0bfcea4be230fbbc95115794ddce1edbe6ce5e26e366","title":"Restore From a Database Backup","path":"/lrsiem/7.25.0/restore-from-a-database-backup","children":[]},{"id":"ci_b63132616a493a3d07d8f8cf7f7a04ca0047881d39567a7bf77bc7781dfccf1a","title":"Restore Service State","path":"/lrsiem/7.25.0/restore-service-state","children":[]},{"id":"ci_a52f054a9521929f78bbb4f6200f977f1fc045f8b7f7a0e6a66f8749786e53d8","title":"Use a Dark Spare Backup Appliance","path":"/lrsiem/7.25.0/use-a-dark-spare-backup-appliance","children":[]}]},{"id":"ci_91ada13f3383416378514cfb5bf2d32ca30ac13fe44ed0ab2a3f57eac45d64e1","title":"Configure Object Access Auditing for LogRhythm Archive Files","path":"/lrsiem/7.25.0/configure-object-access-auditing-for-logrhythm-archive-files","children":[]},{"id":"ci_92424c749b0e5b7e284fa115e8d121ce86b38c1e8cfd22e65673606aac369267","title":"Restore Platform Managers","path":"/lrsiem/7.25.0/restore-platform-managers","children":[]},{"id":"ci_4b7f5fc998e1fd1d18b3c50469aff9e93d62be73bcff72067821b3bf85bc9af5","title":"SecondLook","path":"/lrsiem/7.25.0/secondlook","children":[{"id":"ci_16df16be8b709c9f4eb06640965e77f83c782be6c98627f9089666f3941fcf47","title":"Run a Saved SecondLook Restore","path":"/lrsiem/7.25.0/run-a-saved-secondlook-restore","children":[]},{"id":"ci_ffde6ce4eef6f918c35488959fb88043c116053e791ea796829254fe04e59523","title":"Create a SecondLook Restore","path":"/lrsiem/7.25.0/create-a-secondlook-restore","children":[]}]},{"id":"ci_a6c1b5f210acd26322f7182672e3541d71ea2f38b68f071ec35a8a6a88938c48","title":"Use Intelligent Indexing","path":"/lrsiem/7.25.0/use-intelligent-indexing","children":[]},{"id":"ci_ba566a63ff6e16057c350f6807b8bb0ddd7425435fbf86b1744fddcc27a1387a","title":"Change Archive Location","path":"/lrsiem/7.25.0/change-archive-location","children":[]}]},{"id":"ci_1e941be7d158de4cdb491545be1b28f34fa2aa331493e1651fa7daa7cb120ce4","title":"Data Indexer","path":"/lrsiem/7.25.0/data-indexer","children":[{"id":"ci_94c8fd9d9145704a4f8eb59d637505f1234249b25ac24d98bdbbbf2393e1432a","title":"Add a Data Indexer Node","path":"/lrsiem/7.25.0/add-a-data-indexer-node","children":[]},{"id":"ci_756ba12046bdab8d3604b532e48014a5eaffadbc0f4405dde51d42313a04ad07","title":"Apply System Updates to a Data Indexer","path":"/lrsiem/7.25.0/apply-system-updates-to-a-data-indexer","children":[]},{"id":"ci_91c0a11dcb8ab292640784c2a9c2dddbac3b21205d7abbdf2e9ac192cef6430f","title":"Configure the Data Indexer","path":"/lrsiem/7.25.0/configure-the-data-indexer","children":[]}]},{"id":"ci_e92270ec3acf6d1179819b613cccbee1f820bea6ee07eaf96fd2f7f56774fd58","title":"Data Processor","path":"/lrsiem/7.25.0/data-processor","children":[{"id":"ci_a28648e46a2b836ed0206f61f7e77883b2b291c445559d5701c2071b803e6e01","title":"Add a Data Processor","path":"/lrsiem/7.25.0/add-a-data-processor","children":[]},{"id":"ci_97e64a068713fc6c4596ff594f50c8481a57d39ad9c184e7eb0ddfac2eed0c33","title":"Apply Recommended Data Processor Values","path":"/lrsiem/7.25.0/apply-recommended-data-processor-values","children":[]},{"id":"ci_e6bf2cf237247a8d5313e0b674a10114d0092c8083101bbbea0f421061aac24b","title":"Configure a Data Processor to Duplicate Data Indexer Logs","path":"/lrsiem/7.25.0/configure-a-data-processor-to-duplicate-data-indexer-logs","children":[]},{"id":"ci_f9385ec5dccb6e8c794dde24ab862f6849b4b27561c06fc69a8f0b1de6aa69b6","title":"Configure the Mediator for Automatic Startup","path":"/lrsiem/7.25.0/configure-the-mediator-for-automatic-startup","children":[]},{"id":"ci_95d8866aa652765f3676edf543aabdd7cfdd706e20db5d33570ded4305034093","title":"Create a Custom Certificate for Communication Between the Data Processor and AI Engine","path":"/lrsiem/7.25.0/create-a-custom-certificate-for-communication-between-the-data-processor-and-ai-engine","children":[]},{"id":"ci_e170ff104e510e027a7472fdb4a10daa899bf6472a48cd10fa1f31eaa2de1734","title":"TrueIdentity Entity Segregation","path":"/lrsiem/7.25.0/trueidentity-entity-segregation","children":[]},{"id":"ci_271b3c49b530f20c3b16e8ceaceb460dcfe2362b60ac3e387cbf5e5dfc58a076","title":"Filter LogRhythm Diagnostic Events","path":"/lrsiem/7.25.0/filter-logrhythm-diagnostic-events","children":[]},{"id":"ci_dcb56cd2e1d0a16d2ff35620609715c3f0ba8dae4261673ec6063ced9107bafe","title":"Modify Data Processor Advanced Properties","path":"/lrsiem/7.25.0/modify-data-processor-advanced-properties","children":[]},{"id":"ci_4ba555ac30aba930d9a6492d40a0f4d93feb44109bb14992b847eb1b75a1b816","title":"Modify Data Processor Basic Properties","path":"/lrsiem/7.25.0/modify-data-processor-basic-properties","children":[]},{"id":"ci_692ff6472eabac8c49f890e46631a0d93fd76278653cb59f7ade08d4ae487975","title":"Retire a Data Processor","path":"/lrsiem/7.25.0/retire-a-data-processor","children":[]},{"id":"ci_4e45fda82f80d883408106f8598dde648e8986e7510e8ea75efddd91bc39e8b8","title":"Revert to a Previous Data Processor Configuration","path":"/lrsiem/7.25.0/revert-to-a-previous-data-processor-configuration","children":[]},{"id":"ci_9c4ea00600bb9f0b8ed664945cf8382bf82ad77df65c41694e97a0d5ebc08753","title":"Set Data Processor Messages Per Second Value","path":"/lrsiem/7.25.0/set-data-processor-messages-per-second-value","children":[]},{"id":"ci_3936a6549d1e87d9a266474cf7f42e440dc0bc0c5f6b5e262fb8090264fdd37c","title":"Start, Stop, and Restart Data Processor Services","path":"/lrsiem/7.25.0/start-stop-and-restart-data-processor-services","children":[]},{"id":"ci_810781bfb55053e79cb6fbe4b434c7155c0a34fa8d8477037b65827b24bda042","title":"Throttle the Mediator","path":"/lrsiem/7.25.0/throttle-the-mediator","children":[]},{"id":"ci_179cccaf11d2ec4b54b880b63512c992bb7eb45b45cb951012b32543d68b92cc","title":"Update the IP Address of a Data Processor","path":"/lrsiem/7.25.0/update-the-ip-address-of-a-data-processor","children":[]},{"id":"ci_a82a3d8794adcb9da4392f7af54cdb142ac42a25bf553ce1d1ced7efa9886383","title":"Use the Data Processor Configuration Manager","path":"/lrsiem/7.25.0/use-the-data-processor-configuration-manager","children":[]}]},{"id":"ci_c3987aaadc642824e37d5f69691e0d8c158eccbafbd068ff0a10cc7044878538","title":"Deployment Health","path":"/lrsiem/7.25.0/deployment-health","children":[{"id":"ci_b24fbcc4e302a3029d3badbf98651097a4ddf4f6697c57aa6a8c436aef6b7921","title":"Centralized Service Metrics","path":"/lrsiem/7.25.0/centralized-service-metrics","children":[{"id":"ci_c04d952d00a94350566762d377924289b13354629dccff1b50f50bd815e274e4","title":"Install and Work With Centralized Service Metrics","path":"/lrsiem/7.25.0/install-and-work-with-centralized-service-metrics","children":[]},{"id":"ci_365cb74376ea82155bc32644950a43b0312b9b4364142cece19ba16d9999582a","title":"Troubleshoot Centralized Service Metrics","path":"/lrsiem/7.25.0/troubleshoot-centralized-service-metrics","children":[]}]},{"id":"ci_31bf46d2e38f984889e2470807c2f240649ecf7bbe9385f911fab068c41cffbc","title":"Deployment Monitor","path":"/lrsiem/7.25.0/deployment-monitor","children":[]},{"id":"ci_8260835727fe8a385c5a8a3c53d34baffe668e8e7461e2f2cf73e7a151f4aa3a","title":"Log Processing Reports","path":"/lrsiem/7.25.0/log-processing-reports","children":[{"id":"ci_6526aaeec08361dfc2c20b424ad90bb377e9d51fb3365ff21b6edfaf8bb47054","title":"LPS Detail Report","path":"/lrsiem/7.25.0/lps-detail-report","children":[]},{"id":"ci_07eb879288d847771c3f75aa56c1954c994e929bd055eb82860b000a5614df47","title":"LPS Policy Sorting Stats Report","path":"/lrsiem/7.25.0/lps-policy-sorting-stats-report","children":[]}]},{"id":"ci_921f7fa385b5984dc499a417ef7ac76859a3a544c2a3c5db3d562c62aa9a2d18","title":"Performance Counters","path":"/lrsiem/7.25.0/performance-counters","children":[{"id":"ci_37e6e76289ac42287423c38a6d2476db99d8e805110e118c73f10f410a3ed085","title":"Performance Counters—LR AI Engine Communication Manager","path":"/lrsiem/7.25.0/performance-counterslr-ai-engine-communication-manager","children":[]},{"id":"ci_ad5591afc172e8e7cd8577defc258fd029f3677546b6a5a9f9976c5d115d90eb","title":"Performance Counters—LR AI Engine Data Provider","path":"/lrsiem/7.25.0/performance-counterslr-ai-engine-data-provider","children":[]},{"id":"ci_6c6e17e9d5e8f165bfa96e4cd37a091ffdafde97c4c9b6cd0b45c3310caf9307","title":"Performance Counters—LR AI Engine Server","path":"/lrsiem/7.25.0/performance-counterslr-ai-engine-server","children":[]},{"id":"ci_6f133d34569d990d41add23c92e81495885882b8b35fb08ba126a645fcf738fb","title":"Performance Counters—LR Alarming and Response Manager","path":"/lrsiem/7.25.0/performance-counterslr-alarming-and-response-manager","children":[]},{"id":"ci_422c38452c3301bf618b0462cc7f0e1ffb6f9223c81dd196a9d24b7d6f0859b3","title":"Performance Counters—LR Mediator, Log Distribution Services","path":"/lrsiem/7.25.0/performance-counterslr-mediator-log-distribution-services","children":[]},{"id":"ci_ec31f67ef900822e7d5a93ad297c7797c9c22022a6912074132be8e36ed34318","title":"Performance Counters—LR Mediator, LDS, Sender","path":"/lrsiem/7.25.0/performance-counterslr-mediator-lds-sender","children":[]},{"id":"ci_41ffcee01d72f0fc1ffefe927ed26da368876c28622af5814b2049709084332b","title":"Performance Counters—LR Mediator, LogMart","path":"/lrsiem/7.25.0/performance-counterslr-mediator-logmart","children":[]},{"id":"ci_73dc5879940609531b345d54a9be7e66c1529b84c20a9d4c126664a4cb7aa567","title":"Performance Counters—LR Mediator, Processing","path":"/lrsiem/7.25.0/performance-counterslr-mediator-processing","children":[]},{"id":"ci_aa5217249192a4a112d7d5d7708fa59d046dcbee45d5b19dd6cd35feca25dd86","title":"Performance Counters—LR Mediator, Stats","path":"/lrsiem/7.25.0/performance-counterslr-mediator-stats","children":[]},{"id":"ci_f004b7ae023a91774bf9fde2c96c247d3ea75843847d5231835cdbee394d24ed","title":"Performance Counters—LR Mediator, True Source","path":"/lrsiem/7.25.0/performance-counterslr-mediator-true-source","children":[]},{"id":"ci_36e09b4f8be190497a36ca28059270cc7e929f95bc616adc64fd16b4776d86b4","title":"Performance Counters—LR Messaging (DP to DX)","path":"/lrsiem/7.25.0/performance-counterslr-messaging-dp-to-dx","children":[]},{"id":"ci_e73d26a3bb7e206df734b266dad07dc18bc61dcb7f4f18bef8d9d61d024843e0","title":"Performance Counters—LR System Monitor","path":"/lrsiem/7.25.0/performance-counterslr-system-monitor","children":[]},{"id":"ci_502e1d9928581df669677cf31ec8d4753b1f573321246483b96d2f1fb9bc799d","title":"View and Add Performance Counters","path":"/lrsiem/7.25.0/view-and-add-performance-counters","children":[]}]}]},{"id":"ci_536341e0b3915235d24fa913d35d8c503171bbfa9234d4ca323ba937fcfbd74f","title":"Deployment Manager","path":"/lrsiem/7.25.0/deployment-manager","children":[]},{"id":"ci_c65a5d335dde3d62d3289c3198ded45ae9b20a58f20781c8669b0c6e5a3d4836","title":"Deployment Security","path":"/lrsiem/7.25.0/deployment-security","children":[{"id":"ci_18795d9fe7bfb4b24fab25e32d91aa3da227e7c2f64537c65750a5a85416498e","title":"Common Criteria Audit Data Generation","path":"/lrsiem/7.25.0/common-criteria-audit-data-generation","children":[{"id":"ci_4a84d70a1d6fd70411e16f247cf01f4a5e0390286182aec6eece95ed286430bc","title":"Set Up the Audit Functionality","path":"/lrsiem/7.25.0/set-up-the-audit-functionality","children":[]},{"id":"ci_dae8f6e771ff925764f900719982830279b51fc0e0572ab381ce93da68729e1d","title":"Set up Discretionary Access Controls on the Trace Folder on an NTFS File System","path":"/lrsiem/7.25.0/set-up-discretionary-access-controls-on-the-trace-folder-on-an-ntfs-file-system","children":[]},{"id":"ci_28fa44545b0a52a081118fbb13a8d6bb2f79c95564803f3a91612a9114e12c81","title":"Configure Windows Task to Alarm on Audit Trace Failure","path":"/lrsiem/7.25.0/configure-windows-task-to-alarm-on-audit-trace-failure","children":[]},{"id":"ci_d6dcbdf236cbf91e17eaf7e6c93533f4c788216aa7e4ebe292e4d4be0a202a82","title":"Configure SQL Server to Run Under Domain Account","path":"/lrsiem/7.25.0/configure-sql-server-to-run-under-domain-account","children":[]},{"id":"ci_6833ccf08135c79c77ba3fe38fe82a891c13e9387b654b4ee1c1519dcdc9f8d6","title":"SQL Server Trace File Converter (TFC) User Guide","path":"/lrsiem/7.25.0/sql-server-trace-file-converter-tfc-user-guide","children":[{"id":"ci_472e625f133fbf73b72317a01a11fb56e51fd739b9f85b24d269546eb3b3a404","title":"Download the SQL TFC Installer","path":"/lrsiem/7.25.0/download-the-sql-tfc-installer","children":[]},{"id":"ci_c5638c0975b47cc97886c5e920acf8493925cb51780e7a7a7318b456c86e26cc","title":"Install the SQL Server TFC Server","path":"/lrsiem/7.25.0/install-the-sql-server-tfc-server","children":[]},{"id":"ci_b3ff6839e50a9ac971c7aada31da4bf50fbfc399c174fca48196c8faf024bcfa","title":"Configure SQL Server TFC","path":"/lrsiem/7.25.0/configure-sql-server-tfc","children":[]},{"id":"ci_787a972d6e4b1652fae0d2689d5e2a314567b8e902f126b0ea68ac0278eadc5f","title":"Add a SQL Server TFC Log Source","path":"/lrsiem/7.25.0/add-a-sql-server-tfc-log-source","children":[]}]}]},{"id":"ci_4fdfceac9c29b7f6556158b53ef2d3142946d95681f5f566beb5153cbba8c2e7","title":"Common Criteria","path":"/lrsiem/7.25.0/common-criteria","children":[{"id":"ci_443caf372e65bf2fd74f3392d63fa0a92aaf15a3f0b79b48c22de0f7bf3b7491","title":"Web Console Compliance","path":"/lrsiem/7.25.0/web-console-compliance","children":[{"id":"ci_4560e83ff55fff559b4d05d213bce0179c633ee172aefc7597ca232e21ae5492","title":"Auto Logout for Idle Users (US9521)","path":"/lrsiem/7.25.0/auto-logout-for-idle-users-us9521","children":[]},{"id":"ci_68441450dc4c936b0573b4570609764de26bdea5b3145fae97ab958726a448a1","title":"Nginx File Configuration Updates (US9305)","path":"/lrsiem/7.25.0/nginx-file-configuration-updates-us9305","children":[]},{"id":"ci_1b4c9fb81608ee1f5c65321024daab70a9af79570e36669a9196a440ac9265aa","title":"Requirements","path":"/lrsiem/7.25.0/requirements","children":[]},{"id":"ci_92c835075a84088ff4a03b94cf7b4d651ed3852d177fd9592acab8d977a08a2e","title":"Warning Banner on Login Page (US9518)","path":"/lrsiem/7.25.0/warning-banner-on-login-page-us9518","children":[]},{"id":"ci_ae8a0586174eae1aadd383e8bf1144d2aa957a60b6bc6286df89e360e7755e89","title":"Web Console FIPS Compliance Configuration (US9525)","path":"/lrsiem/7.25.0/web-console-fips-compliance-configuration-us9525","children":[]},{"id":"ci_f047facb736d98ed4f0decfd8ca05aa46e430e3690bf173c823eaeb78720d876","title":"Web Console Logout Button (US9519)","path":"/lrsiem/7.25.0/web-console-logout-button-us9519","children":[]}]}]},{"id":"ci_c9acb622c48bb551eadfd63daaed5a2396d748b9e78b558e0e7a6bcb9c6467c1","title":"Federal Information Processing Standards (FIPS)","path":"/lrsiem/7.25.0/federal-information-processing-standards-fips","children":[{"id":"ci_6390844df11432fd05d9d187524eff7a66e26e33cb78cbc72b31423e9fdf71de","title":"Configure User Access Control for FIPS Mode","path":"/lrsiem/7.25.0/configure-user-access-control-for-fips-mode","children":[]},{"id":"ci_9a1f82fc1d5d8f289a5a4c912cb0a5c54b381cfd820aae8178c8bffe1fa3f142","title":"Configure LogRhythm XM for FIPS Mode","path":"/lrsiem/7.25.0/configure-logrhythm-xm-for-fips-mode","children":[]},{"id":"ci_74b0b8b772db974adee21736906a30911be185f1e287e17e6a8569adc80a7ab8","title":"Configure LogRhythm DPAWC + DX for FIPS Mode","path":"/lrsiem/7.25.0/configure-logrhythm-dpawc-dx-for-fips-mode","children":[{"id":"ci_e185585982120aad520e0aab4291f59bab88c1898a497ee78433c6e3668a2010","title":"Configure LogRhythm DPAWC","path":"/lrsiem/7.25.0/configure-logrhythm-dpawc","children":[]},{"id":"ci_881775608949b590e808919c79debecc30913cd25a63176a430700e12343cfe7","title":"Configure LogRhythm DX","path":"/lrsiem/7.25.0/configure-logrhythm-dx","children":[]},{"id":"ci_9e2ccd4e43a3b7e8a0780e0c4dc00d04b306ea5f49c59649835490725466be9b","title":"Establishing IPsec Communications between Windows & Linux OS","path":"/lrsiem/7.25.0/establishing-ipsec-communications-between-windows-linux-os","children":[{"id":"ci_2d4e4ed7c762161fccfba3269a1a223ae22c19039678382d79af25201f3df6d3","title":"Windows OS IPsec Configuration","path":"/lrsiem/7.25.0/windows-os-ipsec-configuration","children":[{"id":"ci_1b00b3cf6e13f386cbd31946acce47355e59252b251e3991feead54392bd39eb","title":"Create a Custom MMC Console","path":"/lrsiem/7.25.0/create-a-custom-mmc-console","children":[]},{"id":"ci_2fdc9cd2899cf2c3fde69e2f58754b279ab88cf9785e3e60c3c1fcbb70a6a697","title":"Enable Audit Policy for Your Computer","path":"/lrsiem/7.25.0/enable-audit-policy-for-your-computer","children":[]},{"id":"ci_a3531010ff595895307720347968a31ea28cfce4e10fda3a9f49adda2100051a","title":"Build a Custom IPsec Policy","path":"/lrsiem/7.25.0/build-a-custom-ipsec-policy","children":[]},{"id":"ci_2504cb1b8782e948f529b85cf2dfa55cb33514cfa2e18ecad2b9d5c2fd1192a5","title":"Configure an IPsec Filter List","path":"/lrsiem/7.25.0/configure-an-ipsec-filter-list","children":[]},{"id":"ci_86dad53a1d403507967f7a77effd9d87b60dcb3194d5b7c1ab8c9d68682761be","title":"Configure an IKE Authentication Method","path":"/lrsiem/7.25.0/configure-an-ike-authentication-method","children":[]}]},{"id":"ci_1a7d748c4c807b00aa8fc2471763c56e2dd4f88e48adb3aeebb50d33b21e47f4","title":"Linux/CentOS IPsec Configuration","path":"/lrsiem/7.25.0/linux-centos-ipsec-configuration","children":[{"id":"ci_d27d54cf54f50890c16376a9bca2fa6e9026c9596d817c325483e021bc82f879","title":"Configure IPsec on Linux Machine","path":"/lrsiem/7.25.0/configure-ipsec-on-linux-machine","children":[]},{"id":"ci_26667a2cbea07e1f6839ae0989d3019640e9af2c075cc3fc3e6cff3f1f81cc88","title":"Put Linux/CentOS into FIPS Mode","path":"/lrsiem/7.25.0/put-linux-centos-into-fips-mode","children":[]}]},{"id":"ci_75ede145844003039fb98f1e00c0445317d62832cd979d916fed7d5e5f21a731","title":"Test Your Custom IPsec Policy on both Computers","path":"/lrsiem/7.25.0/test-your-custom-ipsec-policy-on-both-computers","children":[]}]}]},{"id":"ci_3b1bf6465668986ea76e90dbe520f49933755a412f209e721d2b5e6f4b545f52","title":"Force Encrypted Connections for SQL (Recommended)","path":"/lrsiem/7.25.0/force-encrypted-connections-for-sql-recommended","children":[]},{"id":"ci_e6d513b3b6c8a7f75f228712b43990e795eff27967348adb82cc4da05e2b2ef1","title":"Deploy LogRhythm in a FIPS-Enabled Domain","path":"/lrsiem/7.25.0/deploy-logrhythm-in-a-fips-enabled-domain","children":[]},{"id":"ci_4cac0624ae51e4fb7843752caa58877f053c5ea26da00e93b2cd41fa2b1d5af2","title":"Put Windows into FIPS Mode","path":"/lrsiem/7.25.0/put-windows-into-fips-mode","children":[]},{"id":"ci_c227f5c0df696277cab5829f1a3ba14c768c06418f2c893037ef9e1d333abd1d","title":"Configure LogRhythm Services and the Windows Data Indexer for FIPS Mode","path":"/lrsiem/7.25.0/configure-logrhythm-services-and-the-windows-data-indexer-for-fips-mode","children":[]}]},{"id":"ci_a7559058ba3be9c94e36c03e23395eeea44e067e59cfbb3ed4e10bcc4b5ec5de","title":"Integrated Security","path":"/lrsiem/7.25.0/integrated-security","children":[{"id":"ci_cca31ed19c85fe6aed76f25a7d4e00b4eefb2ecaa96c0e9ff9a17c51a58c8cb9","title":"Create Accounts for LogRhythm Components","path":"/lrsiem/7.25.0/create-accounts-for-logrhythm-components","children":[]},{"id":"ci_abb2a98f82704e5865ec633ab8c007d20bd8ab5e8f7288808cecfe89126635d5","title":"Configure Database Access","path":"/lrsiem/7.25.0/configure-database-access","children":[]},{"id":"ci_7d3eae95e2403b3f97f51a5a8eaf8bfa62711b375b520b05e0ec2076372a98c8","title":"Shut Down LogRhythm Services","path":"/lrsiem/7.25.0/shut-down-logrhythm-services","children":[]},{"id":"ci_d05eea501e648b88dfca6bde9b6abda568bf43a74c08ec80523f080a9b9c5368","title":"Reconfigure LogRhythm Services to Use Integrated Security","path":"/lrsiem/7.25.0/reconfigure-logrhythm-services-to-use-integrated-security","children":[]},{"id":"ci_295f4457534c098d46d7a1c0ddedc4153cb1f52c5475564c696f01fd3b0b6c8d","title":"Enable Mixed Authentication Mode","path":"/lrsiem/7.25.0/enable-mixed-authentication-mode","children":[]},{"id":"ci_5ce7299bced0e3182eebbb782e72d69cf4009ca0fc3706d8c582ecd0baea2e03","title":"Restart LogRhythm Services","path":"/lrsiem/7.25.0/restart-logrhythm-services","children":[]}]},{"id":"ci_6eb608748c869e86c54402dfb1a5dcaf72a41ae2391364687ff1852ee2d15ac9","title":"Least Privileged User","path":"/lrsiem/7.25.0/least-privileged-user","children":[{"id":"ci_2378c490efa2110a6f1d720b8d2bf38fdbabc10971f6a8db567e2862ac2be338","title":"Configuring LogRhythm Permissions","path":"/lrsiem/7.25.0/configuring-logrhythm-permissions","children":[]},{"id":"ci_5417a39016d564b31626e524ebfe6d6426271f9a8d5a0b8fa604d174d32f6132","title":"Least Privileged User: DP, Mediator Server","path":"/lrsiem/7.25.0/least-privileged-user-dp-mediator-server","children":[]},{"id":"ci_715e96d964d9a5f5e0139b3b312787d9b2e3eac91e8764eb7abbf4ec5f3e493a","title":"Least Privileged User: DX, Linux","path":"/lrsiem/7.25.0/least-privileged-user-dx-linux","children":[]},{"id":"ci_3fe187acabe996defe93a654bdeaaefdd199956d3927c39fd77175ecbdcdb77c","title":"Least Privileged User: DX, Windows","path":"/lrsiem/7.25.0/least-privileged-user-dx-windows","children":[]},{"id":"ci_d719ba028a754561674fc8acbab23701aed4568a4bd9ce01a549d07cf61be420","title":"Least Privileged User: PM, Advanced Intelligence Engine","path":"/lrsiem/7.25.0/least-privileged-user-pm-advanced-intelligence-engine","children":[]},{"id":"ci_537b37995da9e323e450a91114fe57067fc184adf9d6c2de060a7b8146552e62","title":"Least Privileged User: PM, AIE Communication Manager","path":"/lrsiem/7.25.0/least-privileged-user-pm-aie-communication-manager","children":[]},{"id":"ci_799cc775cfc215e892c7996014b468fef657dc9051a5bd45a6dbfad5736c2121","title":"Least Privileged User: PM, Alarming and Response Manager","path":"/lrsiem/7.25.0/least-privileged-user-pm-alarming-and-response-manager","children":[]},{"id":"ci_efc7b139b4613fbc30c3de910e2e6ddeda6500b4efcaec63ffac7693b5b4e32f","title":"Least Privileged User: PM, Disaster Recovery","path":"/lrsiem/7.25.0/least-privileged-user-pm-disaster-recovery","children":[]},{"id":"ci_1c3032dd4752f0972abb230f8e522c694b62e48207c892479b5bdbd16bee61f5","title":"Least Privileged User: PM, High Availability","path":"/lrsiem/7.25.0/least-privileged-user-pm-high-availability","children":[]},{"id":"ci_55ccd9a7ac390d46d4193ef031f17eb72da35294233a2ca07b90e868ce1e7993","title":"Least Privileged User: PM, Job Manager","path":"/lrsiem/7.25.0/least-privileged-user-pm-job-manager","children":[]},{"id":"ci_f8a329b52e5529fb7beb4f3b669ad5789dadbeaab117a4587b20bd87ef36d9d3","title":"Least Privileged User: PM, Web Console","path":"/lrsiem/7.25.0/least-privileged-user-pm-web-console","children":[]},{"id":"ci_cbfc663ce32d8d669c2cf85a506d901a1d34fe692ab80e9a7b724abeb325dd85","title":"Least Privileged User: SysMon, Linux, Unix","path":"/lrsiem/7.25.0/least-privileged-user-sysmon-linux-unix","children":[]},{"id":"ci_e20437f135564eeeca0eaa15f6135470f84a01a1e357b119e61b9a8b7343b8ba","title":"Least Privileged User: SysMon, Windows","path":"/lrsiem/7.25.0/least-privileged-user-sysmon-windows","children":[]},{"id":"ci_a74e1f12e52e3d6366088493bfea51de5cc236c8257072c0fe7c881cd815f112","title":"Least Privileged User: TIS, Windows","path":"/lrsiem/7.25.0/least-privileged-user-tis-windows","children":[]}]},{"id":"ci_b77117fc605b7dc90edc55c9eb7631f7cad8cd0af8d72d0eb6024cf1d6b24fc3","title":"Public Key Infrastructure (PKI) Support","path":"/lrsiem/7.25.0/public-key-infrastructure-pki-support","children":[{"id":"ci_bdd0d8eed27fb954f3783e4c6ec071aeeaa93a02773878dc10641c5bad7cdf42","title":"Certificate Configuration for LogRhythm Component Connections","path":"/lrsiem/7.25.0/certificate-configuration-for-logrhythm-component-connections","children":[]},{"id":"ci_30b920f0c72c9c75f910fb33e92664163d1887ed6d820de2662fda55af17305e","title":"Create a Certificate for Microsoft SQL Server Connections","path":"/lrsiem/7.25.0/create-a-certificate-for-microsoft-sql-server-connections","children":[]},{"id":"ci_fb216f731993d95ae1427093f11030b324286fcbaed8b85df87618b95edaac7d","title":"Create Client and Server Certificates","path":"/lrsiem/7.25.0/create-client-and-server-certificates","children":[]},{"id":"ci_fab49b2b6787e1850d1e25b8da564adc69b157c8d943fd0fcdd91b0399389457","title":"Verify Certificates","path":"/lrsiem/7.25.0/verify-certificates","children":[]},{"id":"ci_d53645612d83404d942fe1e7a403ec1c84bab0cfec51753dea4a9ab51b3810c0","title":"View an Example of Configuring Mutual Authentication in LogRhythm","path":"/lrsiem/7.25.0/view-an-example-of-configuring-mutual-authentication-in-logrhythm","children":[]},{"id":"ci_4220e56c48ec6b15ecb9a0ccb22deb494936a85bc03c60ce5edeb162d70cdb96","title":"View an Example of Configuring Certificates for AI Engine","path":"/lrsiem/7.25.0/view-an-example-of-configuring-certificates-for-ai-engine","children":[]}]},{"id":"ci_aea6b3385fbd1baea97c9ab01a8ed82bba77d09125c13d98e3dc74eff4e0ff61","title":"Security Banners","path":"/lrsiem/7.25.0/security-banners","children":[{"id":"ci_dca8fe2dc564e2aefdffc852836e6a0d9fb833ac2fb514676a9f83ab77239f36","title":"Configure the Session-Timeout Error Message","path":"/lrsiem/7.25.0/configure-the-session-timeout-error-message","children":[]},{"id":"ci_3ee2038cd208e5ff997272de32661fe0b79b6ad788b1225c3db45ca6a8ba48a4","title":"Configure the Start-Up Warning","path":"/lrsiem/7.25.0/configure-the-start-up-warning","children":[]}]},{"id":"ci_e2b7f135559721ef40ee8867bb1f069c71a30551da56eb0cbb1b900e0f228f7e","title":"Enhanced Auditing","path":"/lrsiem/7.25.0/enhanced-auditing","children":[{"id":"ci_3d68ca089d08a754e8ef0dd990c05bec5071a608a37ede22659978078e364ae1","title":"Collect Enhanced Audit Logs","path":"/lrsiem/7.25.0/collect-enhanced-audit-logs","children":[]}]},{"id":"ci_9deeb6cdfa545a8bb393b14fb6a65f2fbbf5fc1cef88e8707b5f4c30e0fb602a","title":"Query Auditing","path":"/lrsiem/7.25.0/query-auditing","children":[]},{"id":"ci_1f54511fdf6776deb4c544ba1a30cae3b9037fea2ee6b9afec180ab27ef32e6e","title":"LogRhythm Default Passwords","path":"/lrsiem/7.25.0/logrhythm-default-passwords","children":[]}]},{"id":"ci_2f2073839260e5171d4996ee855c0884ec5e44b8b49d36c0f52936f8266b6c88","title":"Endpoint Monitoring","path":"/lrsiem/7.25.0/endpoint-monitoring","children":[{"id":"ci_243f44561623c545125d26fe6b51152f7ea62ba8cb01b682d5ee5afa505f7a83","title":"Data Loss Defender (DLD)","path":"/lrsiem/7.25.0/data-loss-defender-dld","children":[{"id":"ci_3d11d5f03fe518bb9debf1f6484c7c7780adb759a7e34f52aa89ade8db38f3fd","title":"Create DLD Policies","path":"/lrsiem/7.25.0/create-dld-policies","children":[]},{"id":"ci_b040c4595716c41a490483860c0bca841674a14a41e101ef00888d67149883cb","title":"Delete DLD Policies","path":"/lrsiem/7.25.0/delete-dld-policies","children":[]},{"id":"ci_331426f8ffa4bf2101c111a0d073935a5eb68428cc423e4a0660884f5dde53bf","title":"Enable DLD for an Agent","path":"/lrsiem/7.25.0/enable-dld-for-an-agent","children":[]},{"id":"ci_29f23b2a6ebf697ef9d5a6d7e82bddba9b6014c15d2e1d5483ee652276a74148","title":"Modify DLD Policies","path":"/lrsiem/7.25.0/modify-dld-policies","children":[]}]},{"id":"ci_5c70452318a578afae5e4ca19609ca197b0ce63cbbc7e25b33f3ab07bc9dd46e","title":"File Integrity Monitor (FIM)","path":"/lrsiem/7.25.0/file-integrity-monitor-fim","children":[{"id":"ci_a56c7b314518cba162c48f03276d78caf764717b65f6bd150070ed30eb7b9d4d","title":"Create File Integrity Monitor Policies","path":"/lrsiem/7.25.0/create-file-integrity-monitor-policies","children":[]},{"id":"ci_c25632ae49d0659f652c256b6f2ee8666556437fb7062e4d6b221bb50ff16233","title":"Create Inclusions and Exclusions for FIM","path":"/lrsiem/7.25.0/create-inclusions-and-exclusions-for-fim","children":[]},{"id":"ci_569ac72cc7f517f2612827dace7ba9ad47886bceb4b0db0c0ac2cc1f7fa73ea5","title":"Associate a File Integrity Monitor Policy With an Agent","path":"/lrsiem/7.25.0/associate-a-file-integrity-monitor-policy-with-an-agent","children":[]},{"id":"ci_24b8bd8d12f93fdf3682e2abc293520f4a3e4f2dc3dfa61a809ebaabb89d8bbf","title":"Modify File Integrity Monitor Policies","path":"/lrsiem/7.25.0/modify-file-integrity-monitor-policies","children":[]},{"id":"ci_0396bbb89a5f70d2b3daf70fd0452b68b12086e4507de89330f6684b89b7fd93","title":"Clone File Integrity Monitor Policies","path":"/lrsiem/7.25.0/clone-file-integrity-monitor-policies","children":[]},{"id":"ci_15edc94077c212b22c248fd35353d85526d643b0f6a70a4bcf7fae7548f7e7df","title":"Delete File Integrity Monitor Policies","path":"/lrsiem/7.25.0/delete-file-integrity-monitor-policies","children":[]}]},{"id":"ci_e3338e4501f48747c1b8160aca06f440d61eac0972038e56dc11a19338aae1b4","title":"Network Connection Monitor (NCM)","path":"/lrsiem/7.25.0/network-connection-monitor-ncm","children":[{"id":"ci_a53c4a4c27a3e7d34bfa1dd718736549acdede0af215ca1bc9ee8ddff810eb76","title":"Enable NCM for an Agent","path":"/lrsiem/7.25.0/enable-ncm-for-an-agent","children":[]}]},{"id":"ci_378fcdb16649b1aab05bba9e43adcb54eb4bcf631814b8498694f6cdefaf243f","title":"Process Monitor","path":"/lrsiem/7.25.0/process-monitor","children":[{"id":"ci_ea7711c5dd338e05d893f195f89eafee84723991e5423d4b6179164e007b3d4d","title":"Enable Process Monitor for an Agent","path":"/lrsiem/7.25.0/enable-process-monitor-for-an-agent","children":[]}]},{"id":"ci_e6a858ec3234a31de241b35ba84e9ae8610e82d391490a2ca8134a55e2020629","title":"Registry Integrity Monitor (RIM)","path":"/lrsiem/7.25.0/registry-integrity-monitor-rim","children":[{"id":"ci_8e8463b286d2ecc41d20ef9ec3c734c7bac856faaf2e9dc3b1ec77930be3c296","title":"Associate Items to RIM Policies","path":"/lrsiem/7.25.0/associate-items-to-rim-policies","children":[]},{"id":"ci_65f20423db14190498fb219ce6f3e237c52c9553ac87bdad7af495a96f157225","title":"Associate RIM Policies to Windows System Monitor Agents","path":"/lrsiem/7.25.0/associate-rim-policies-to-windows-system-monitor-agents","children":[]},{"id":"ci_1e1081b6a1d1cdec1a0d205d75e85ffdd1bc499fd45f32dc5f38f303d9802c0c","title":"Configure RIM Policy Items","path":"/lrsiem/7.25.0/configure-rim-policy-items","children":[]},{"id":"ci_1e5bc6595a964c9d1dbb35c4d01cb4592910742246a5ead3a7544dfcf74e561f","title":"Create RIM Policies","path":"/lrsiem/7.25.0/create-rim-policies","children":[]},{"id":"ci_73f857bfc90a6fabffc36a76e9a8447f561367be16fd209d308b786514f57a03","title":"Delete RIM Policies","path":"/lrsiem/7.25.0/delete-rim-policies","children":[]},{"id":"ci_6c542b0999ab4c23ab2326b2a675c47679555fbea5b199825575ea6921ec0d22","title":"Delete RIM Policy Items","path":"/lrsiem/7.25.0/delete-rim-policy-items","children":[]},{"id":"ci_305048cf5018665b16d60435a404c1a92e86194414627718eb5e3c278eff8d16","title":"Modify RIM Policies","path":"/lrsiem/7.25.0/modify-rim-policies","children":[]},{"id":"ci_147fe90c17f304ad356da2a33dedc55e840f2984b5fad8243b6bee071275bf6d","title":"Modify RIM Policy Items","path":"/lrsiem/7.25.0/modify-rim-policy-items","children":[]}]},{"id":"ci_a73d61dd1894ac56f18e4d5f9c29340a2d631d1f7e0eff82ccb45962cdc92ff1","title":"User Activity Monitor (UAM)","path":"/lrsiem/7.25.0/user-activity-monitor-uam","children":[{"id":"ci_1411e170648427df06ae77d13820897a08068cd949319be53ac5813e936ca45b","title":"Enable UAM for an Agent","path":"/lrsiem/7.25.0/enable-uam-for-an-agent","children":[]},{"id":"ci_e8acb8f3ab9826a545de8c02e5335900dbb79ed8b9a8047d4c2242bfc0b942b8","title":"Include UAM in File Integrity Monitor","path":"/lrsiem/7.25.0/include-uam-in-file-integrity-monitor","children":[]}]}]},{"id":"ci_168de27f0b0e4796294a5fb3efcfdd897d45a451d560d065bae0d9072994fd67","title":"Entities","path":"/lrsiem/7.25.0/entities","children":[{"id":"ci_687c736e4db5bb1b5df5a98a59d0fece30cb63525270141e1fadb466ce83a600","title":"Add a Single Entity","path":"/lrsiem/7.25.0/add-a-single-entity","children":[]},{"id":"ci_afb5ea6bb366cb20b58f4da2bb7ca2ab387c31213a5aa5297f72613179cf9d7e","title":"Bulk Import Entities From a File","path":"/lrsiem/7.25.0/bulk-import-entities-from-a-file","children":[]},{"id":"ci_cff7b7f27582dc662df45daa16e239ebf2ee2cf608e4792f1095d6c67f8a9744","title":"Delete Entities","path":"/lrsiem/7.25.0/delete-entities","children":[]},{"id":"ci_4bf37065a1b380cdb08b6d4f9b31d406018087b9c2f9f380bb90bb0487a44f1e","title":"Modify Entities","path":"/lrsiem/7.25.0/modify-entities","children":[]},{"id":"ci_2755aa2ccdb8558607e6520a3c059d08f53cfe274d9c3836a2a71a80f42702a7","title":"Run the Entities Reorganization Wizard","path":"/lrsiem/7.25.0/run-the-entities-reorganization-wizard","children":[]}]},{"id":"ci_b978f8a2c05a67ead1db0428bf846446fcfee710fc45425a617e47450fb82c6b","title":"Global Log Processing Rules","path":"/lrsiem/7.25.0/global-log-processing-rules","children":[{"id":"ci_2702ee69f2ad260ee9607446f28bca06965050d4ca2649ef7dc916903409266c","title":"Create Global Log Processing Rules","path":"/lrsiem/7.25.0/create-global-log-processing-rules","children":[]},{"id":"ci_e3871a91e37aabe4b05afc390e9e42cbd05a4022af5c49a0679635eee2d31301","title":"Modify Global Log Processing Rules","path":"/lrsiem/7.25.0/modify-global-log-processing-rules","children":[]}]},{"id":"ci_3a67074212dd8dca896adab644452c13ca5a0d2ef9d9eee5913a94c9f117889c","title":"Host Records","path":"/lrsiem/7.25.0/host-records","children":[{"id":"ci_d1d9bb91ceb0da6e32617f1dbb93c43b645eea4547d219ab5bb1f8567c476ee4","title":"Add Host Records Manually","path":"/lrsiem/7.25.0/add-host-records-manually","children":[]},{"id":"ci_ff01e6c453284a4c4b2d5121931afd0291bcb5ac1177e40c42643a2617aedfb8","title":"Add Hosts From Clipboard","path":"/lrsiem/7.25.0/add-hosts-from-clipboard","children":[]},{"id":"ci_b8f16196551a75fe92af40b161807d85199c8f3ad8507f6f4400197b3ddbb30f","title":"Add Hosts From File","path":"/lrsiem/7.25.0/add-hosts-from-file","children":[]},{"id":"ci_c50c994048230003ba5a3d6c523061ed3a3a0bf121648a8c466030ed824954a5","title":"Add Origin Hosts or Impacted Hosts as Known Hosts","path":"/lrsiem/7.25.0/add-origin-hosts-or-impacted-hosts-as-known-hosts","children":[]},{"id":"ci_6d15a3ea584c4b949d4318be07b123b2ab6633fa090e07d37967bd292f3b7043","title":"Add or Remove Multiple Host Roles","path":"/lrsiem/7.25.0/add-or-remove-multiple-host-roles","children":[]},{"id":"ci_0e8ae4c838db91c9641e16c429c2e3de3a1ccf3715ad6dd44eb004a8ab6139d6","title":"Export Multiple Host Roles to File","path":"/lrsiem/7.25.0/export-multiple-host-roles-to-file","children":[]},{"id":"ci_17c5a3b72d69471a52d01c1ff28e1b62bd768e015bf435dbd821a29368fe980c","title":"Modify Properties for a Single Host Record","path":"/lrsiem/7.25.0/modify-properties-for-a-single-host-record","children":[]},{"id":"ci_dcbacd56c8613c9b55dd62327c4b1061afd384df4b22c68f9c4ad58482263f65","title":"Modify Properties for Multiple Host Records","path":"/lrsiem/7.25.0/modify-properties-for-multiple-host-records","children":[]},{"id":"ci_9d5df570da9ecc7e5a12a31131a38ecb4ccd701e3592c2072b85fdcec8da1ce4","title":"Resolve Known Hosts","path":"/lrsiem/7.25.0/resolve-known-hosts","children":[]},{"id":"ci_85586157462fb1503955a1ed6e9662010e0057fd78287f312b765ef204eab6f2","title":"Retire Host Records","path":"/lrsiem/7.25.0/retire-host-records","children":[]},{"id":"ci_06ad0b765b5c6b331e1429cd8df0e2352c6293d1aff970aa4bd9603fdbacf26d","title":"Search for Hosts","path":"/lrsiem/7.25.0/search-for-hosts","children":[]},{"id":"ci_561197f916e54ff450eed75102d1ab1573b84294c4c4cb2e4563920f01146c6a","title":"Windows Host Wizard","path":"/lrsiem/7.25.0/windows-host-wizard","children":[{"id":"ci_b5e0d7fc738846abf135908fa634816c99a9674da9f32aedfd277949cad3ad22","title":"Configure Initial Host Settings in Windows Host Wizard","path":"/lrsiem/7.25.0/configure-initial-host-settings-in-windows-host-wizard","children":[]},{"id":"ci_fe6c1dd0bd8f4f353afdb3f4c6a96ae6b98b45ae35fb50e8c89c567981aad2bb","title":"Import Computers for Log Collection","path":"/lrsiem/7.25.0/import-computers-for-log-collection","children":[]},{"id":"ci_5dd1f9c1f89ff51c3910342a5c986f5579574d39441a7abf29492209edfc6d40","title":"Perform Optional Configuration for Remote Log Collection","path":"/lrsiem/7.25.0/perform-optional-configuration-for-remote-log-collection","children":[]},{"id":"ci_2139330b2447b27ed7205fa149af424d3c7858c920ea9134b27d896a86d46476","title":"Query Computers with Windows Host Wizard","path":"/lrsiem/7.25.0/query-computers-with-windows-host-wizard","children":[]},{"id":"ci_ebe312559bc4b9f1b7b5f294a98d571d8a5ed4648ce0b2ea5145ef968c995812","title":"Review Computers with Windows Host Wizard","path":"/lrsiem/7.25.0/review-computers-with-windows-host-wizard","children":[]},{"id":"ci_c12338a485ec7dc3010b991c012dcb7e700011a8bf71992b40ee7d495ebcc2aa","title":"Scan a Domain for Computers","path":"/lrsiem/7.25.0/scan-a-domain-for-computers","children":[]},{"id":"ci_f5fc414d29116a110f1bda8ee754499e92663fc6b154e3f0d0f085be0df25248","title":"Work with Hosts and Agents in Windows Host Wizard","path":"/lrsiem/7.25.0/work-with-hosts-and-agents-in-windows-host-wizard","children":[]}]}]},{"id":"ci_e981eed106819ed1e38893f79481822e2708d45e2bac654deed83cdce3653292","title":"Knowledge Base","path":"/lrsiem/7.25.0/knowledge-base","children":[{"id":"ci_e8f97d498111eca2f25092259e97fcf7b3fdeaba5bea3183ccd05058d495e696","title":"Back Up the EMDB","path":"/lrsiem/7.25.0/back-up-the-emdb","children":[]},{"id":"ci_41456e48d06fe24a127ef6a69e39cd2ed1e3320a063bafadf61b2e16a5a2406b","title":"Configure Knowledge Base Synchronization Settings","path":"/lrsiem/7.25.0/configure-knowledge-base-synchronization-settings","children":[]},{"id":"ci_a6e8b0153ea762c66cd090edaf05de785553f24ed28b9c6885d50a0e02260c69","title":"Download the Knowledge Base File","path":"/lrsiem/7.25.0/download-the-knowledge-base-file","children":[]},{"id":"ci_a5d8b6f6cab9c50bcaddf339e2c1e54b5602d538a08af6c2d85f9594d26441ef","title":"Import a Knowledge Base","path":"/lrsiem/7.25.0/import-a-knowledge-base","children":[]},{"id":"ci_0c262ea1c4c737551a8f898430fadd040cb5a1d07a5eb864a391cd6cdc07b2ad","title":"Knowledge Base Manager","path":"/lrsiem/7.25.0/knowledge-base-manager","children":[{"id":"ci_626872b27a303e3d7be6fdd7bedf28a5fb7aac68ba02aad02c7d930cf9bbb2bb","title":"Disable Knowledge Base Modules","path":"/lrsiem/7.25.0/disable-knowledge-base-modules","children":[]},{"id":"ci_a10664a8c4a5457fd4dffc512f6516c22253d0398b3d172cb58b8aa91402676e","title":"Enable Knowledge Base Modules","path":"/lrsiem/7.25.0/enable-knowledge-base-modules","children":[]},{"id":"ci_b10b446ba1764f237f14f4186586b0d03a9856c59ebac404e6618581c1744a45","title":"Export Knowledge Base Module Information to a File","path":"/lrsiem/7.25.0/export-knowledge-base-module-information-to-a-file","children":[]},{"id":"ci_daf53d0c0ac4a6501a3d727ce6146b2c883a2c90d6a73177c78c228afcbfbc43","title":"Migrate Common Events","path":"/lrsiem/7.25.0/migrate-common-events","children":[]},{"id":"ci_43151e33fc0fa3071fa8ed3fbbb373c23815d5adde5dfa1360be942e90b599e5","title":"Modify the Properties of Knowledge Base Modules","path":"/lrsiem/7.25.0/modify-the-properties-of-knowledge-base-modules","children":[]},{"id":"ci_8ae6adb05e1f107c8d0599b4d51726127be52918381b0c0957614f00064b1b05","title":"View Knowledge Base Module Dependent Objects","path":"/lrsiem/7.25.0/view-knowledge-base-module-dependent-objects","children":[]}]}]},{"id":"ci_43802bf1666f049092f1156b441e536ad5d54f95bdf035c0a7f518d63da0b07b","title":"Log Distribution Services","path":"/lrsiem/7.25.0/log-distribution-services","children":[{"id":"ci_72b80320985d819e040fc0363ee926cafafa0b6e8606ed758ae3ceaa62ed8e57","title":"Log Distribution Receiver Manager","path":"/lrsiem/7.25.0/log-distribution-receiver-manager","children":[{"id":"ci_9b227ff5fc9e5466dbecafc49e39abc78532c53aa4cf4738d8587c0e2ab94d3c","title":"Create Log Distribution Receivers","path":"/lrsiem/7.25.0/create-log-distribution-receivers","children":[]},{"id":"ci_1e938705383a543d0cd4a2a6cb955f3b67620aa1d70c4437f8ce2efa18b63d27","title":"Enable Log Distribution Receivers","path":"/lrsiem/7.25.0/enable-log-distribution-receivers","children":[]},{"id":"ci_7760943d87b7132885228230b64f7dcccc3f23a953952331fda459cae288eaee","title":"Modify Log Distribution Receivers","path":"/lrsiem/7.25.0/modify-log-distribution-receivers","children":[]}]},{"id":"ci_288548ecb397b7711be393b1478d2426c7a5c90d86fc03754cf14b5d0ffd9d93","title":"Log Distribution Policy Manager","path":"/lrsiem/7.25.0/log-distribution-policy-manager","children":[{"id":"ci_b259fec2db21861742318e0d16fe9c65339cacf4c2525476734c864d6a045414","title":"Create Log Distribution Service Policies","path":"/lrsiem/7.25.0/create-log-distribution-service-policies","children":[]},{"id":"ci_0579e81df5a044fd8ea140d3fa54f3c0ed96aa2f2f0451b74221fa6aac2b002d","title":"Enable or Disable Log Distribution Service Policies","path":"/lrsiem/7.25.0/enable-or-disable-log-distribution-service-policies","children":[]},{"id":"ci_4a2fcd31125b3b734b9d4e0a821f27dbee228edfde9fc3caddc4ae701525c048","title":"Modify Log Distribution Service Policies","path":"/lrsiem/7.25.0/modify-log-distribution-service-policies","children":[]}]},{"id":"ci_d2aacc206555d3966f40b4178f69c4ddb308b6d57a3ced4b570c536aa0dd8e26","title":"LogRhythm Log Distribution Services Version 2","path":"/lrsiem/7.25.0/logrhythm-log-distribution-services-version-2","children":[{"id":"ci_6b0563114a58068ada18943e2cbc8ee86e78192fbcea59ba87672f0376aa2918","title":"Determine When to Switch to Log Distribution Services v2","path":"/lrsiem/7.25.0/determine-when-to-switch-to-log-distribution-services-v2","children":[]},{"id":"ci_be5129b7fd75aeaebb326817432ff8b3ede271475d8ccc54fd07df8467e2b68b","title":"Enable Log Distribution Services v2","path":"/lrsiem/7.25.0/enable-log-distribution-services-v2","children":[]},{"id":"ci_6199431fe5a868e706a4fb3626a89da7d1c09ad2a830983755be2f61da45daeb","title":"Troubleshoot Log Distribution Services v2","path":"/lrsiem/7.25.0/troubleshoot-log-distribution-services-v2","children":[]}]},{"id":"ci_6c985886cf54cdb434c743d70b5856555f62ad17b0d904769200cfa3cbae13bd","title":"Modify Log Distribution Service Properties in Data Processors","path":"/lrsiem/7.25.0/modify-log-distribution-service-properties-in-data-processors","children":[]}]},{"id":"ci_7b35561b1e57b0dadcad069d1bf9dd39b89dc16d31b291e0b41f7e2fc41e6aa2","title":"Log Processing Policies","path":"/lrsiem/7.25.0/log-processing-policies","children":[{"id":"ci_9369ce0d11d4c4ef4f890dc3bc6b4ddc629d34e8728d7e9c3e8b57572d11759d","title":"Create Log Processing Policies","path":"/lrsiem/7.25.0/create-log-processing-policies","children":[]},{"id":"ci_c32806fb3f3fd80a54eaef667c1e018efb48f0ae3112b9de2a415bd9dd4b8a52","title":"Assign Log Processing Policies","path":"/lrsiem/7.25.0/assign-log-processing-policies","children":[]},{"id":"ci_d31398dbb6be8464a70a469b3841ef6fd6274c6db5cadf49f1eb45b14223648a","title":"Modify Log Processing Policies","path":"/lrsiem/7.25.0/modify-log-processing-policies","children":[]},{"id":"ci_55726e1b6a2483d919147419e04fe7838c76e75ac8384051d3467807e9c8ef1b","title":"Delete Log Processing Policies","path":"/lrsiem/7.25.0/delete-log-processing-policies","children":[]},{"id":"ci_7735edf85ef6e549b4c102f5a5456d17bb6024b0e801c562f1fdcad333b80d24","title":"Troubleshoot MPE Rule Performance","path":"/lrsiem/7.25.0/troubleshoot-mpe-rule-performance","children":[]}]},{"id":"ci_6ab6d12c495e70594ac649ac3ef38565cc6a286b880f7c3c0fe182bbac698f82","title":"Log Sources","path":"/lrsiem/7.25.0/log-sources","children":[{"id":"ci_f750a15fb74704be9883b75d8541548859275e194fb7ac5c4540f201f7fc8d8a","title":"Work With Log Sources","path":"/lrsiem/7.25.0/work-with-log-sources","children":[{"id":"ci_f59bf41e4e3f1ba7c1749862e120ba24c7413fd339ae1e471941bca9cf691ddd","title":"Add a Single Log Source","path":"/lrsiem/7.25.0/add-a-single-log-source","children":[]},{"id":"ci_cf9e6bddf5930638c215991acc37d2c1d5e2d2506db896d226c5608d211123d0","title":"Add Multiple Log Sources","path":"/lrsiem/7.25.0/add-multiple-log-sources","children":[]},{"id":"ci_ee2926bb2fb9d746ff6e88655e806bf6bb895582886cae8a083b3c3fe87debc0","title":"Associate New Log Sources","path":"/lrsiem/7.25.0/associate-new-log-sources","children":[]},{"id":"ci_d5029356074521ad82505d3c90ae9b1dc535798a85289388efe967024054e99d","title":"Collect Local Event Logs with the Server Service Disabled","path":"/lrsiem/7.25.0/collect-local-event-logs-with-the-server-service-disabled","children":[]},{"id":"ci_fd98358a352dd733893e90c0ac3c94ba8d5879804f668993fc3492b3db42bca6","title":"Configure Log Sources Automatically","path":"/lrsiem/7.25.0/configure-log-sources-automatically","children":[{"id":"ci_69d1803cddf7b2cbc1deb43aefbc75d3b40a31bcf73eefbc527af2646fb9932b","title":"Add and Delete SNMP Connections","path":"/lrsiem/7.25.0/add-and-delete-snmp-connections","children":[]},{"id":"ci_a5fc40d0e2c60217caaf7ffd4b5b9fa7899a816067fa38e20dac4f1f3abc4ad3","title":"Enable Automatic Log Source Configuration","path":"/lrsiem/7.25.0/enable-automatic-log-source-configuration","children":[]},{"id":"ci_6456a9e1923d5cd23c16f01861fce214c3b9982f5f72eebfaf3ad31ed8d176cb","title":"Use the Advanced Criteria Manager","path":"/lrsiem/7.25.0/use-the-advanced-criteria-manager","children":[]}]},{"id":"ci_8f515bba6d4bd05f68e7a0cfaca2bbb6df5178c3c1125508cd553b3ffc88d8de","title":"Configure Support for Multi-Line Logs","path":"/lrsiem/7.25.0/configure-support-for-multi-line-logs","children":[]},{"id":"ci_625d76494f1d553e7132b8f5c421afbf8bf3cfab52719ec4e3af47168dcf8de0","title":"Export Log Sources","path":"/lrsiem/7.25.0/export-log-sources","children":[]},{"id":"ci_07af552a1f2b8bc75dc17891926cd120ca3b4684bc0377ea26f75e6f1b086331","title":"Modify a Single Log Source","path":"/lrsiem/7.25.0/modify-a-single-log-source","children":[]},{"id":"ci_e926144742346fddec946fbc2573f82068d980ffd443b1d146ae243d6c8d722c","title":"Modify Event Settings","path":"/lrsiem/7.25.0/modify-event-settings","children":[]},{"id":"ci_dbfd677a4dd57c495c7a05dc5b0cc7ff8256d0614379c80f631b65c4ed1e0b7b","title":"Modify Multiple Log Sources","path":"/lrsiem/7.25.0/modify-multiple-log-sources","children":[]},{"id":"ci_65a5f7aea06f54bec7fd0648490dfc5a8ef51d37c81bde97748d55a9e0eb7501","title":"Move Log Sources to New Hosts","path":"/lrsiem/7.25.0/move-log-sources-to-new-hosts","children":[]},{"id":"ci_bb15821e5c6d06915cf4159b7d20ad3362e83573a9219f408cbc3cb4eeb3d800","title":"Preregister Log Sources","path":"/lrsiem/7.25.0/preregister-log-sources","children":[]},{"id":"ci_e27b030305c994de86cbe35b44f9283ee398f2e5e520b5504f78128fddba6c64","title":"Resolve Log Source Hosts","path":"/lrsiem/7.25.0/resolve-log-source-hosts","children":[]},{"id":"ci_7f5c1392f94cca4315039cd42517647085570e29aecc119daf08381f0f4a580c","title":"Retire or Activate Log Sources","path":"/lrsiem/7.25.0/retire-or-activate-log-sources","children":[]}]},{"id":"ci_23d6b9278828d7c3e7477256ca9ee3ca8d8df89155a50141fc9417236ac929c0","title":"Log Source Types","path":"/lrsiem/7.25.0/log-source-types","children":[{"id":"ci_9c0d3f71f9171985cf08e51cbbeab53b1f54eeb9433bee87a0867bb9cf2c70f1","title":"Create Custom Log Source Types","path":"/lrsiem/7.25.0/create-custom-log-source-types","children":[]},{"id":"ci_1dec99b46187b4a3ee54fac6df2055422b2028c2c1309424404f7d66039eac92","title":"Delete Custom Log Source Types","path":"/lrsiem/7.25.0/delete-custom-log-source-types","children":[]},{"id":"ci_90391b81dba47e7e08617d5af990f6b28db772523c3fad1373d934271d1e633c","title":"Modify Custom Log Source Type","path":"/lrsiem/7.25.0/modify-custom-log-source-type","children":[]},{"id":"ci_929c109e7e0d82db536ddcd1f4d6ea3563d5f5a2418db90a03e86ceeae048f62","title":"Modify Type for Pending Log Source","path":"/lrsiem/7.25.0/modify-type-for-pending-log-source","children":[]}]},{"id":"ci_4d4b3d4b20d616ee12c77c6b636923fd5f6abfff772ea6a266c6f0d01167fe05","title":"Data Masking","path":"/lrsiem/7.25.0/data-masking","children":[{"id":"ci_2a70c277421a5e7b7dfcfa8dd7444087c7cf5d611291b3f1c5bc6ad20bb6bc9d","title":"Add New Data Masking Rules","path":"/lrsiem/7.25.0/add-new-data-masking-rules","children":[]},{"id":"ci_d08dcdd7e666609251c5f0257d0c73758f5bbd748c20e5c167038e8270305314","title":"Import and Export Data Masking Rules","path":"/lrsiem/7.25.0/import-and-export-data-masking-rules","children":[]},{"id":"ci_c8ce3d4b07140396ebb2d7ca812eea1b847f2a92c4a10dc752ff7b8831981eac","title":"Enable and Disable Data Masking Rules","path":"/lrsiem/7.25.0/enable-and-disable-data-masking-rules","children":[]},{"id":"ci_1f4a027311078f0c14fb2c8c7eb602e2972af76d5d827da159323f420779959e","title":"Reorder Data Masking Rules","path":"/lrsiem/7.25.0/reorder-data-masking-rules","children":[]},{"id":"ci_dd9aaf2993fccb0f07bfa966f9ac79a8d00a6cf6e59ec779cf9815257c851ef9","title":"Delete Data Masking Rules","path":"/lrsiem/7.25.0/delete-data-masking-rules","children":[]}]},{"id":"ci_b2ccfbd55bad692c4d45106bb727d1b2f8eead6da6d322d1a9416a3600d6764e","title":"Log Source Identification and Acceptance","path":"/lrsiem/7.25.0/log-source-identification-and-acceptance","children":[{"id":"ci_608f14e7a8753768b70503b5470d55f6c6e887462a399d96ec81c77796cd160d","title":"Accept New Log Sources","path":"/lrsiem/7.25.0/accept-new-log-sources","children":[]},{"id":"ci_61f6791d4697a774a0184a6964440ad5307007ec602fb8f0f8f25453c15aac9d","title":"Accept New Log Sources Automatically","path":"/lrsiem/7.25.0/accept-new-log-sources-automatically","children":[{"id":"ci_e8fe23d94ae33dafbdc5cc55611f99f2f64f4d3c0234ee685931a531be831ca4","title":"Create IP Range Log Source Acceptance Rules","path":"/lrsiem/7.25.0/create-ip-range-log-source-acceptance-rules","children":[]},{"id":"ci_37444b27f40f819c72ee5e66de45a2cc1209843696cab9805a452b20c8bb7612","title":"Create Pattern Match Log Source Acceptance Rules","path":"/lrsiem/7.25.0/create-pattern-match-log-source-acceptance-rules","children":[]},{"id":"ci_8b18104d60e90c40ba946bdfd015ea4ffa3aaff23ebd12ba30ea3b737583a0cf","title":"Manage Automatic Log Source Acceptance Rules","path":"/lrsiem/7.25.0/manage-automatic-log-source-acceptance-rules","children":[]}]},{"id":"ci_062205824a5a6c6809723c7f138c4d3369290a0098bb9880b9f8533e2c3646f6","title":"Set the Log Source Identification Search Scope","path":"/lrsiem/7.25.0/set-the-log-source-identification-search-scope","children":[]},{"id":"ci_ffdf6127700801edefcd4843a63ce6079133c4a52f7a34d992edc5d677c2c709","title":"View Log Source Acceptance Properties","path":"/lrsiem/7.25.0/view-log-source-acceptance-properties","children":[]}]},{"id":"ci_137de33eb6c6438561c51dece5d0edffa1a9cc8de87367bbb7e90ab88959a94a","title":"Log Sources and Agents","path":"/lrsiem/7.25.0/log-sources-and-agents","children":[{"id":"ci_95b97c489352c9bd778d23cc9865efdfa23a73c3556e30dd7299fbae6198ed94","title":"Limit the Number of Agents Available for Batch Updates","path":"/lrsiem/7.25.0/limit-the-number-of-agents-available-for-batch-updates","children":[]},{"id":"ci_60c5fe0f2141a9f73a0b145563164d656f28efbb7a60a263ad4ea0df091a44ec","title":"Move Log Sources Between Agents","path":"/lrsiem/7.25.0/move-log-sources-between-agents","children":[]}]},{"id":"ci_9e08b7448009ff4f260d17e14d78fa3b6ec13050af3881dc2ea0b9c7ab83a646","title":"Flat File Collection","path":"/lrsiem/7.25.0/flat-file-collection","children":[{"id":"ci_9ea2675f722e0102d17ee23cf67cef7a4eb52c7d03a48767e6673b48d762b3b9","title":"Configure a Host for Local Flat File Collection","path":"/lrsiem/7.25.0/configure-a-host-for-local-flat-file-collection","children":[]},{"id":"ci_712f9295d8c32796e85b0a04fb2033183c1508d2053c302a417a146130936a79","title":"Configure an Agent for IIS Log Collection","path":"/lrsiem/7.25.0/configure-an-agent-for-iis-log-collection","children":[]},{"id":"ci_88ea1622158e5ea87d418ed87596907b12fb67ed4f7adcad3d3b1a988d0245ba","title":"Convert Flat File to Epoch Time","path":"/lrsiem/7.25.0/convert-flat-file-to-epoch-time","children":[]},{"id":"ci_2cfa8348bf12e35623dca5ef7c09864c8c90daeec63e1ca03ce0330a3676d26c","title":"Supported Date Parsing Formats","path":"/lrsiem/7.25.0/supported-date-parsing-formats","children":[]}]},{"id":"ci_be2ab66b5b1efaffd74cac14f20e95944afd0844c8e4b1ae17079f1189850771","title":"UDLA Collection","path":"/lrsiem/7.25.0/udla-collection","children":[{"id":"ci_e0f1d4dad9183e55f1859eaed1165a9f99590b1db4b48e5dce9f8d0afb0f30a8","title":"Configure UDLA Log Collection","path":"/lrsiem/7.25.0/configure-udla-log-collection","children":[]},{"id":"ci_626c69c027584432d3b2e7743b0dc092ca0ab53958d164128da22ca3d083bc1b","title":"Create a Sample McAfee ePolicy Orchestrator (ePO) Event Log Source","path":"/lrsiem/7.25.0/create-a-sample-mcafee-epolicy-orchestrator-epo-event-log-source","children":[]},{"id":"ci_73e4e2ddbffc4f21160b29b0a806217d09132503f0c0f5ac3a66c99d9ca3d65a","title":"Create a Sample Oracle 10g Audit Trail UDLA Log Source","path":"/lrsiem/7.25.0/create-a-sample-oracle-10g-audit-trail-udla-log-source","children":[]},{"id":"ci_4fc7697f8c5257045f8fb2a7a7d0f7fbb5583d7cceffcea66e71d2cc9d85c92e","title":"Export and Import UDLA Log Source Configurations","path":"/lrsiem/7.25.0/export-and-import-udla-log-source-configurations","children":[]},{"id":"ci_461911dff11e3e411d06d36787766753b4f0ef4d48a37ea7cc9917bc0cbce699","title":"Override UDLA SQL","path":"/lrsiem/7.25.0/override-udla-sql","children":[]}]},{"id":"ci_c4c209e653d7aa3502eb6cc0ce47c8bbe6b06f4119058b108d80419f533a8f2b","title":"Log Source Virtualization","path":"/lrsiem/7.25.0/log-source-virtualization","children":[{"id":"ci_a9fc42969353a942ac7ac3adec105b822e8f292c5c5442dcff2fafd50a62e8dd","title":"Create Log Source Virtualization Templates","path":"/lrsiem/7.25.0/create-log-source-virtualization-templates","children":[]},{"id":"ci_2df5d041b80986866f147d96e451b7e400301db4bbc6195f22f340c526431908","title":"Create Virtual Log Sources","path":"/lrsiem/7.25.0/create-virtual-log-sources","children":[]},{"id":"ci_ee5c84f3cb0219bd8acf6ecd38517248dcf53dc3d6f7b3e878eb8fe95ea87fed","title":"Delete Log Source Virtualization Templates","path":"/lrsiem/7.25.0/delete-log-source-virtualization-templates","children":[]},{"id":"ci_bfc2378234093528436ecf3ced8ea026a71b282c45e94e603c85bb13c2ee9239","title":"Delete Virtual Log Sources","path":"/lrsiem/7.25.0/delete-virtual-log-sources","children":[]},{"id":"ci_52ad8364659039beb2fdff21a77403e42b7876c316df63e8f61ee702dea2265e","title":"Enable Virtualization on a Single Log Source","path":"/lrsiem/7.25.0/enable-virtualization-on-a-single-log-source","children":[]},{"id":"ci_61849e9c2bc7d910f09f4e9629d30a481d67dda04c06b43f509a130a0a28b623","title":"Enable Virtualization on Multiple Log Sources","path":"/lrsiem/7.25.0/enable-virtualization-on-multiple-log-sources","children":[]},{"id":"ci_2c7d2964531d8e115f02c74a6e8d7fd6cf6f2cc0a65843d5d779c24d50ddcbd7","title":"Export Log Source Virtualization Templates","path":"/lrsiem/7.25.0/export-log-source-virtualization-templates","children":[]},{"id":"ci_9bbf0c3534a407a39ca23b8a6ce479091a5eb1a0e779e3958ee801b30699deb2","title":"Filter Virtual Logs at the Agent","path":"/lrsiem/7.25.0/filter-virtual-logs-at-the-agent","children":[]},{"id":"ci_554b0aa5113f0ce0d94265271157fb60b1094ded671c46b065b0c859df212376","title":"Import Log Source Virtualization Templates","path":"/lrsiem/7.25.0/import-log-source-virtualization-templates","children":[]},{"id":"ci_a112e5ab353fcf9c19eae2e6d22944b993cf2ae2e044df325e27f7a6ebe25c8b","title":"Modify Catch-All Sources on a Batch of Parent Log Sources","path":"/lrsiem/7.25.0/modify-catch-all-sources-on-a-batch-of-parent-log-sources","children":[]},{"id":"ci_57f89e9a8970cddbc5716b8e4e110aed7a603fb277319d22cbfe3264c0c6088e","title":"Modify Log Source Virtualization Templates","path":"/lrsiem/7.25.0/modify-log-source-virtualization-templates","children":[]},{"id":"ci_2240912c4dcc6eab163f740e5366d1baca97fb71138a21d359026a943860261e","title":"Modify Virtual Log Sources","path":"/lrsiem/7.25.0/modify-virtual-log-sources","children":[]}]}]},{"id":"ci_d4cc8b68e0bd74674ca986179db96ae4de5b1eb02b950bb9a4b7f0ee00ae38aa","title":"Network Monitor","path":"/lrsiem/7.25.0/network-monitor","children":[{"id":"ci_afc80b3671c81849e7bd09c83d4cb8572a02989cd3f16f0d9420e737b2064f41","title":"Add NetMon in the Client Console","path":"/lrsiem/7.25.0/add-netmon-in-the-client-console","children":[]},{"id":"ci_f6715b6453014136e532d2615d42584dbf63c560400ef1aba06fcc7930e7f421","title":"Configure NetMon in the Client Console","path":"/lrsiem/7.25.0/configure-netmon-in-the-client-console","children":[]},{"id":"ci_de804ed7f1cdb9790293e0af165173b6b9742a53c73520088ef52bb3e7ccdb4b","title":"Delete NetMon in the Client Console","path":"/lrsiem/7.25.0/delete-netmon-in-the-client-console","children":[]},{"id":"ci_e20f0f4e65f8e7d4c10b81de9d45bf77e20c9a86a5591e6954be3347e2ca2090","title":"Modify NetMon in the Client Console","path":"/lrsiem/7.25.0/modify-netmon-in-the-client-console","children":[]},{"id":"ci_25328396f3a938eda81ddafedac0037c815563fe24b08b909c0e3595018b7769","title":"Monitor NetMon in the Client Console","path":"/lrsiem/7.25.0/monitor-netmon-in-the-client-console","children":[]}]},{"id":"ci_675366c878a1edacac99e6c5394fcd1f77564bb7c40ff56fa7929bff19eef5b1","title":"Network Records","path":"/lrsiem/7.25.0/network-records","children":[{"id":"ci_e10884e7c7b2af703422c31986d8bb9a945d918e0387d89f863588a3b07145d8","title":"Add Network Records from File","path":"/lrsiem/7.25.0/add-network-records-from-file","children":[]},{"id":"ci_2bed75449fbb55d56ddc888f1be81f30538d820a57c886d3518f5b86d84315ab","title":"Manually Add Network Records","path":"/lrsiem/7.25.0/manually-add-network-records","children":[]},{"id":"ci_66cfbae4e16a00abc7bb48ae5286d576aa24c8cefc7e506bce59c57a7f6fa51c","title":"Modify Properties for a Single Network","path":"/lrsiem/7.25.0/modify-properties-for-a-single-network","children":[]},{"id":"ci_26255f79692ccfe0bde53408dbc8bdb97a08ad3f66f073a1fbd3b65f14c1e0bf","title":"Modify Properties for Multiple Network Records","path":"/lrsiem/7.25.0/modify-properties-for-multiple-network-records","children":[]},{"id":"ci_b832563b0d8d38aec7d906c4f1d525d519184fc284fb63c4014f3b76d82b6907","title":"Resolve Known Networks","path":"/lrsiem/7.25.0/resolve-known-networks","children":[]},{"id":"ci_caa5e84f61ebe84746807ef6b1b97343e6a60003a1b73478f8961934b7cd5a9c","title":"Retire Network Records","path":"/lrsiem/7.25.0/retire-network-records","children":[]},{"id":"ci_71adf3867c11697c7ef4f9b13419deee50ae88cc134fa861a04789321b250d20","title":"Search for Networks","path":"/lrsiem/7.25.0/search-for-networks","children":[]}]},{"id":"ci_8a7cebf9e1257d6df6adcd9915d562f33b5954b7baa6706eb977ccc46b61ed3b","title":"Object Permissions Manager","path":"/lrsiem/7.25.0/object-permissions-manager","children":[{"id":"ci_904e281ed0addfeb4c0d3f4ecf43e27d811b84f225919367434086860982186b","title":"Modify Objects' Security Settings","path":"/lrsiem/7.25.0/modify-objects-security-settings","children":[]}]},{"id":"ci_5e88a6c96cd58aebaa2659f4c102f2386e23e3545cc8d20e0516156e234f5c67","title":"People and Users","path":"/lrsiem/7.25.0/people-and-users","children":[{"id":"ci_c06aab90b151808eb752e608c85007cfb1555077e84a4f6fb9939bd8240a8361","title":"Add Person Records or Roles","path":"/lrsiem/7.25.0/add-person-records-or-roles","children":[]},{"id":"ci_2409803728012e50f0f16cba913dc0ac25106d01a1b05fc06c8d5a4df86bb443","title":"Assign Active Directory Credentials to Local Users","path":"/lrsiem/7.25.0/assign-active-directory-credentials-to-local-users","children":[]},{"id":"ci_73516768141a1d2c607f96c8313d1807fe4807b181bf0b643bb2cc34b93b3783","title":"Create User Accounts for Person Records or Roles","path":"/lrsiem/7.25.0/create-user-accounts-for-person-records-or-roles","children":[]},{"id":"ci_6437c29ea28ac9591fdcce3972ddcc51e0a02c58b30b6d3541896b4c6959293e","title":"Direct Requests to the Case API URL","path":"/lrsiem/7.25.0/direct-requests-to-the-case-api-url","children":[]},{"id":"ci_ea6e597abb047e2ac04f72654b1a6025f72f640f6db1f5f9a35af18f7645291c","title":"Disable Person Records or Roles","path":"/lrsiem/7.25.0/disable-person-records-or-roles","children":[]},{"id":"ci_c01b7a803f25f43210348d3fcb3549d1e59c36f40dc1b023703eb5dcb9924d9e","title":"Modify Logins for Person Records or Roles","path":"/lrsiem/7.25.0/modify-logins-for-person-records-or-roles","children":[]},{"id":"ci_b1c90467391dbbbdfbf8c2abd844088c275750d25ba768c820d000793d4c93c1","title":"Modify Person Records or Roles","path":"/lrsiem/7.25.0/modify-person-records-or-roles","children":[]},{"id":"ci_9bf5ec002af0b1933075df0d380e124b4645f2cb20c12e96b283e7dd1cbdff29","title":"Rename LogRhythm Users","path":"/lrsiem/7.25.0/rename-logrhythm-users","children":[]},{"id":"ci_df32e8c1cb881985c2ae842a0d76100bd9860500a821a621c333ba68af6b7b8e","title":"Reset Multi-Factor Authentication Access to the Web Console","path":"/lrsiem/7.25.0/reset-multi-factor-authentication-access-to-the-web-console","children":[]},{"id":"ci_c027a18bb83e20c12b1a253f26013f7a14a7fb7f55a91a36aaa55283e37ba5cd","title":"User Profile Manager","path":"/lrsiem/7.25.0/user-profile-manager","children":[{"id":"ci_3bd3382a20bef52c2e69ff556caafa7a2d529aacf1cac4fdeb625479654a5a46","title":"Create a New User Profile","path":"/lrsiem/7.25.0/create-a-new-user-profile","children":[]},{"id":"ci_f60819e36de3dd6b2d4146e1da7434a4dc6502e739e38263ca1f086be0c60a51","title":"Manage User Profile SmartResponse Access Rights","path":"/lrsiem/7.25.0/manage-user-profile-smartresponse-access-rights","children":[]},{"id":"ci_11f50e189d028ab95e6cf1eba3c929ddf9f67017d4d6c28726e99bc2896f8957","title":"Modify User Profile Data Processor Access Rights","path":"/lrsiem/7.25.0/modify-user-profile-data-processor-access-rights","children":[]},{"id":"ci_fc7be8056b307ff76235f9b316ccc18631b637b67f6959c1e4c8f5d3e67e30c6","title":"Modify User Profile Effective Log Sources Settings","path":"/lrsiem/7.25.0/modify-user-profile-effective-log-sources-settings","children":[]},{"id":"ci_9628edd13cbb684d01b4f0966487f9d429a75465e8aa06a7691127a435015db4","title":"Modify User Profile Entities Settings","path":"/lrsiem/7.25.0/modify-user-profile-entities-settings","children":[]},{"id":"ci_5fe797b1cdde6e5c53de60f46af04c4467661276f5634d5d90594eab13a07741","title":"Modify User Profile General Settings","path":"/lrsiem/7.25.0/modify-user-profile-general-settings","children":[]},{"id":"ci_fe0e19f48a98e0ca374a855c8699b8dec4cd3ab3cd8338a2a88fcdb0475fa380","title":"Modify User Profile Log Sources Access Rights","path":"/lrsiem/7.25.0/modify-user-profile-log-sources-access-rights","children":[]},{"id":"ci_f4f36da72d7297111064fd001b98ddc37b3e5e373b24047138cacb5894ed5d51","title":"Manage User Profile Notification Group Access Rights","path":"/lrsiem/7.25.0/manage-user-profile-notification-group-access-rights","children":[]},{"id":"ci_ae954f54fe2487ae388209c1274502aefdebc93e5676d4369866334f0a86cbb9","title":"Modify User Profile Management Permissions","path":"/lrsiem/7.25.0/modify-user-profile-management-permissions","children":[]}]}]},{"id":"ci_bf24cdc2fc0c8795d26db8c057c010019d5ede1dade3d5a6332b15b883aed0e8","title":"SmartResponse","path":"/lrsiem/7.25.0/smartresponse","children":[{"id":"ci_d15434f15d64f92670d5e8ae4ba89d12d2dcb661a0329cf01fe34c00a7d171e8","title":"Approve or Deny SmartResponse Actions in the Client Console","path":"/lrsiem/7.25.0/approve-or-deny-smartresponse-actions-in-the-client-console","children":[]},{"id":"ci_ab3d79c7ee6f1e95c7db051304ec1320ad4d9a57b7acb9f21b916c1718974ed2","title":"Develop SmartResponse Plugins","path":"/lrsiem/7.25.0/develop-smartresponse-plugins","children":[{"id":"ci_556c2e2049a89c7353e3a9d52f97ed2af07b17541e6d76e42bb91c1021943ba9","title":"Create the Payload","path":"/lrsiem/7.25.0/create-the-payload","children":[]},{"id":"ci_2477798026dee03bbfaffc2dfcac14fe6b39d64be534044b247602ed4ebdb396","title":"Create the Configuration File","path":"/lrsiem/7.25.0/create-the-configuration-file","children":[]},{"id":"ci_943044542110091f8f2082ed63190dd9ab5bb38cc18e02148b148955bd7a3e22","title":"Package and Test the SmartResponse","path":"/lrsiem/7.25.0/package-and-test-the-smartresponse","children":[]},{"id":"ci_9bd754ad0767a3b468022421bd41e79c7b47180a6933f3e6c0464b5ec62aca1d","title":"Deploy Custom SmartResponse Plugins","path":"/lrsiem/7.25.0/deploy-custom-smartresponse-plugins","children":[]}]},{"id":"ci_ab9a1d17c6fe8183a08470915f612a12146905ee500df9c59dd4d712b6ab55e1","title":"Import SmartResponse Plugins","path":"/lrsiem/7.25.0/import-smartresponse-plugins","children":[]},{"id":"ci_b48302b7056ca43bfbe4747abd2e55c4b94846c6937c4ed93d14a77e914d4e06","title":"Initiate SmartResponse","path":"/lrsiem/7.25.0/initiate-smartresponse","children":[]},{"id":"ci_288def481df3e5718f593dbc152f04a22722f9974e70de83d88b7621b2e08d99","title":"Preview SmartResponse Command Execution","path":"/lrsiem/7.25.0/preview-smartresponse-command-execution","children":[]},{"id":"ci_196403570d429d51ae4f3e950f950dc992e590cb68b22de8ac04aedc4766a455","title":"Test SmartResponse Plugin Actions","path":"/lrsiem/7.25.0/test-smartresponse-plugin-actions","children":[]},{"id":"ci_3aa4a62338351103c21a37654c5724eb738d9cd3b1af7911f437ca6c6e6ba8f0","title":"Troubleshoot SmartResponse Action Testing","path":"/lrsiem/7.25.0/troubleshoot-smartresponse-action-testing","children":[]},{"id":"ci_4d0892581664f5043185f742022a94fabcb210c1508d740cff3f2060d56fdc05","title":"Validate SmartResponse Plugins","path":"/lrsiem/7.25.0/validate-smartresponse-plugins","children":[]}]},{"id":"ci_a5f4670886e28768225700654c69156ff90835ee1812ee509a78926b8453c41c","title":"System Monitor","path":"/lrsiem/7.25.0/system-monitor","children":[{"id":"ci_64047c8ae65b9e1dbe0425a72a7441ac3f5ca6d4bc31cfe569db5a282a0e62ee","title":"Agent Identification and Acceptance","path":"/lrsiem/7.25.0/agent-identification-and-acceptance","children":[{"id":"ci_a9614a99566a0d212a0155ae15d5786f45f506c2716d35ca407d3b7c8d97627c","title":"Accept a New System Monitor","path":"/lrsiem/7.25.0/accept-a-new-system-monitor","children":[]},{"id":"ci_04861a29f917874e76867c4390cdfd634a69339fbe3a09e77e9f244a23c9918f","title":"Associate a System Monitor Agent","path":"/lrsiem/7.25.0/associate-a-system-monitor-agent","children":[]},{"id":"ci_9834a14278c2a60bf2b4770017935f06c24d873a0dd118cd077e5b353ed9079e","title":"Work With New System Monitors","path":"/lrsiem/7.25.0/work-with-new-system-monitors","children":[]}]},{"id":"ci_3d2464ac0f8a76e87756b1f9fb3e9cefeb2b012985ae540958a346e2c7dd1e3d","title":"NetFlow, IPFIX, and J-Flow Collection","path":"/lrsiem/7.25.0/netflow-ipfix-and-j-flow-collection","children":[{"id":"ci_569c3cc4e923663c461d2e082f0d293cdc4e66d649de08a7db112a9173d45a79","title":"Configure a Device or Host for NetFlow, IPFIX, or J-Flow Collection","path":"/lrsiem/7.25.0/configure-a-device-or-host-for-netflow-ipfix-or-j-flow-collection","children":[]},{"id":"ci_13c0cb98c119d9d78ea278bae7b75708eb9fb56003bd9bd7c301b5ca710dacaa","title":"Customize IPFIX Logs","path":"/lrsiem/7.25.0/customize-ipfix-logs","children":[]}]},{"id":"ci_2e358bdb7c2af3a8b1265690b2f27026dfdae59d79143848767000d1095222f1","title":"Work With System Monitor Agents","path":"/lrsiem/7.25.0/work-with-system-monitor-agents","children":[{"id":"ci_993565b1d2a138c71e56721ad0d214818065c6d117745539405532d32af1a2ca","title":"Add System Monitors","path":"/lrsiem/7.25.0/add-system-monitors","children":[]},{"id":"ci_529a98ae68caacf582b33d68897f7e928b5a4c976dfa9e12677cde82767da386","title":"Configure the scsm Service","path":"/lrsiem/7.25.0/configure-the-scsm-service","children":[]},{"id":"ci_19c77e77af17b5540ea43f8066e347e310b89d86330da5dc941797920e1964d5","title":"Connect System Monitor Agents to Different Entities","path":"/lrsiem/7.25.0/connect-system-monitor-agents-to-different-entities","children":[]},{"id":"ci_0d6fac3aa8e13e2beb5c7a9bfbeed443e8e380ec492085aa2b342bd47c199521","title":"Connect System Monitor Agents to New Data Processors","path":"/lrsiem/7.25.0/connect-system-monitor-agents-to-new-data-processors","children":[]},{"id":"ci_7c4a414a43a1c21409ecdedbe48b4e49b4b1004c217b8f4cc1e33927de983235","title":"Connect System Monitor Agents to Existing Data Processors","path":"/lrsiem/7.25.0/connect-system-monitor-agents-to-existing-data-processors","children":[]},{"id":"ci_137de42dc042687f5f4486062d0150920509544b51c85876715e2666bcef2aa2","title":"Data Processor Pooling","path":"/lrsiem/7.25.0/data-processor-pooling","children":[{"id":"ci_fab305f66c4c16c45daf3f0ce3df690c5eedbdc0b8a80c2499fcce65662c96a1","title":"Data Processor Pool Manager","path":"/lrsiem/7.25.0/data-processor-pool-manager","children":[]},{"id":"ci_3c7e93387d51b92a3e165fa7210a85b068f98de35b9da112423acfd798ab8c12","title":"Assign a Data Processor to a DP Pool","path":"/lrsiem/7.25.0/assign-a-data-processor-to-a-dp-pool","children":[]},{"id":"ci_06d5440d547412f2bd6775d34d7a6c06daf35a320763a64a12727e917b2729a9","title":"Remove a Data Processor from a DP Pool","path":"/lrsiem/7.25.0/remove-a-data-processor-from-a-dp-pool","children":[]},{"id":"ci_dff7c3f748596030125f5c6cc76c0475b6427ec6665af35800b34809ef31583e","title":"Configure a System Monitor Agent into DP Pool Mode","path":"/lrsiem/7.25.0/configure-a-system-monitor-agent-into-dp-pool-mode","children":[]},{"id":"ci_e8b95012764bf55fe610d90f08befdd416870d366968d865dd41a4906299d30b","title":"Edit System Monitor Data Processor Settings","path":"/lrsiem/7.25.0/edit-system-monitor-data-processor-settings","children":[]},{"id":"ci_5b1eb27043b725e04ce1a119e40d3ecc9de1642bac1f0b52b2ff641d9d82cc9d","title":"Assign a DP Pool to a System Monitor Configuration Policy","path":"/lrsiem/7.25.0/assign-a-dp-pool-to-a-system-monitor-configuration-policy","children":[]}]},{"id":"ci_2ed565b67f29294b337aa962a334606f28f845ce5b21124d51b441dff10dc66f","title":"License System Monitors","path":"/lrsiem/7.25.0/license-system-monitors","children":[]},{"id":"ci_d0c3d2ec729fc61861783110509d61c628047ea954f4014a152370d72bb7537e","title":"Load Balanced Agent Groups","path":"/lrsiem/7.25.0/load-balanced-agent-groups","children":[{"id":"ci_c747ee50f6afe748b55afca1668eecf66aa8aa66f8eb7b1c073d092ee039036a","title":"Load Balanced Group Manager","path":"/lrsiem/7.25.0/load-balanced-group-manager","children":[]},{"id":"ci_37ed318c32a36273a8cf3d21bbfbbe19a263a5478a1ee9ef6002a4b70c9378f5","title":"Assign Agents to a Load Balanced Group","path":"/lrsiem/7.25.0/assign-agents-to-a-load-balanced-group","children":[]}]},{"id":"ci_9a1bb1e345a9422814bdd17e427034b896000be8d44cdaf18fce2460c76fdc6f","title":"Modify System Monitor Basic Properties","path":"/lrsiem/7.25.0/modify-system-monitor-basic-properties","children":[]},{"id":"ci_ecb1aa01008e83445822fa9a239db33e6df1fc5f52bb7d476e7e6f12e761e932","title":"Modify System Monitor Advanced Properties","path":"/lrsiem/7.25.0/modify-system-monitor-advanced-properties","children":[]},{"id":"ci_647c74136d1015c423b36112c7a56ea5eee90bea1c8183041ea3c7649c466d87","title":"Modify Properties of Multiple System Monitor Agents","path":"/lrsiem/7.25.0/modify-properties-of-multiple-system-monitor-agents","children":[]},{"id":"ci_d5bbe19757fe127cded5f067f8d1756e7624ebaf2c09b93a39a9be11d2b440cc","title":"Modify System Monitors","path":"/lrsiem/7.25.0/modify-system-monitors","children":[]},{"id":"ci_d5f063ffca5aa3bb412d65da4615dfa723f3382a92210708b5af5a9948c53444","title":"Configure a Secure Syslog Agent","path":"/lrsiem/7.25.0/configure-a-secure-syslog-agent","children":[]},{"id":"ci_b563060179067d070d96e137dcc363db203e0affc7c75b5f4f34beeb5625d6af","title":"Retire or Activate System Monitor Agents","path":"/lrsiem/7.25.0/retire-or-activate-system-monitor-agents","children":[]},{"id":"ci_1a6456614b1dbfd88524ba335a243e5aa26f6342f552b73ed5ad835a80f316a2","title":"Revert System Monitor Agents to Previous Configurations","path":"/lrsiem/7.25.0/revert-system-monitor-agents-to-previous-configurations","children":[]},{"id":"ci_6087604b6ecc9ca27e0ecbfd5d08b347e70590564a85f3d096ffc3c892e343a8","title":"Startup and Shutdown System Monitors on Linux","path":"/lrsiem/7.25.0/startup-and-shutdown-system-monitors-on-linux","children":[]},{"id":"ci_4c1f641ecf960173a81c8ae41724820f9983f565bf3e182a2ca83730cc584711","title":"Stop, Start, and Restart Agent Services on Windows","path":"/lrsiem/7.25.0/stop-start-and-restart-agent-services-on-windows","children":[]},{"id":"ci_9d2c65761b22db1de2243d6adc2a07ffe6dfe78e4cdab55762d3aefe0fe03416","title":"Generic JSON Collector","path":"/lrsiem/7.25.0/generic-json-collector","children":[]}]},{"id":"ci_723753dc8e6a342282d0f088ccd4dbf88dd2b62e246e12f22bd0df894de15fa7","title":"Register Agent to Host with Duplicate Name","path":"/lrsiem/7.25.0/register-agent-to-host-with-duplicate-name","children":[]},{"id":"ci_42a045492f6b3ba831bd36ceec1ee4b35f4fa105fbc69349f04c3be752fb9e20","title":"sFlow Collection","path":"/lrsiem/7.25.0/sflow-collection","children":[{"id":"ci_97a80e1496ca55a1c3674d5f8a43784f1c5b4b75c617594653ef242aa8a53b4b","title":"Configure a Device or Host for sFlow Collection","path":"/lrsiem/7.25.0/configure-a-device-or-host-for-sflow-collection","children":[]}]},{"id":"ci_b21bc0699e6c62e56e70afc3202e99148c5c272f65a79ffb4837f9ea8cf47e0e","title":"SNMP Trap Receivers","path":"/lrsiem/7.25.0/snmp-trap-receivers","children":[{"id":"ci_84f235b93f17102ef65a43028f08995e4dd1875e5c0448c4675c0a764f769a7d","title":"Configure a System Monitor for SNMP Trap Receiver","path":"/lrsiem/7.25.0/configure-a-system-monitor-for-snmp-trap-receiver","children":[]}]},{"id":"ci_e5cf1040ec68aa7c3ecbdee70b3fcb080e30231d78a3358156b440496c4d821d","title":"System Monitor Configuration Policy Manager","path":"/lrsiem/7.25.0/system-monitor-configuration-policy-manager","children":[{"id":"ci_5e7c59adf84e03c325314110ce3e6914d0eb26e026420daa0440de4708aab0ac","title":"Apply System Monitor Configuration Policies","path":"/lrsiem/7.25.0/apply-system-monitor-configuration-policies","children":[]},{"id":"ci_c045c66f85efa502858b7ed53b5c04ffb82503c78483542d30dcf1abfd3df043","title":"Assign Configuration Policies to Multiple System Monitor Agents","path":"/lrsiem/7.25.0/assign-configuration-policies-to-multiple-system-monitor-agents","children":[]},{"id":"ci_10f395007a96369c456b1151d3118b24acc78f7b1b41268ea2806186bd0044bd","title":"Create New System Monitor Configuration Policies","path":"/lrsiem/7.25.0/create-new-system-monitor-configuration-policies","children":[]},{"id":"ci_a0d574d414e8b8410a7bdd38d31c60d130a8ebaf5c891a188f8410d5f1ad5cdb","title":"Delete System Monitor Configuration Policies","path":"/lrsiem/7.25.0/delete-system-monitor-configuration-policies","children":[]},{"id":"ci_e20229e42a99aa09960fe88b83fca29dc3b8b436aaa18d28a9541998a8210744","title":"Modify Configuration Policies on System Monitor Agents","path":"/lrsiem/7.25.0/modify-configuration-policies-on-system-monitor-agents","children":[]},{"id":"ci_064ac3f8528e6b717dcea378b6fcf0c9e7d703aa50d498f9949cbeb1b2d23c30","title":"Modify System Monitor Configuration Policies","path":"/lrsiem/7.25.0/modify-system-monitor-configuration-policies","children":[]}]},{"id":"ci_34840179f41104ff012d275c67cef74f2ce982f3767393b60edc395416bed29a","title":"Unidirectional Windows Agent Settings","path":"/lrsiem/7.25.0/unidirectional-windows-agent-settings","children":[{"id":"ci_eb6459b151ab3eea95ebadb3baf3753876dc17ca31544951d0c39f04df7f2025","title":"Confirm a SysMon Agent is Sending Logs","path":"/lrsiem/7.25.0/confirm-a-sysmon-agent-is-sending-logs","children":[]},{"id":"ci_def3faf1299acbc271be566d4154ac4309946579ba009786e6a038f9d5ba884f","title":"Copy the System Monitor Agent Configuration File to the Agent Machine","path":"/lrsiem/7.25.0/copy-the-system-monitor-agent-configuration-file-to-the-agent-machine","children":[]},{"id":"ci_5750870cf590735e515aa353c3e86158680507c7ac5c5dc6bb25b9efa0599219","title":"Enable the Unidirectional Feature on the Data Processor","path":"/lrsiem/7.25.0/enable-the-unidirectional-feature-on-the-data-processor","children":[]},{"id":"ci_ff0b756d4e80d53f6dfb1b0327ee9752927e8091cc0207de10688894e795389c","title":"Enable the Unidirectional Feature on the System Monitor Agent","path":"/lrsiem/7.25.0/enable-the-unidirectional-feature-on-the-system-monitor-agent","children":[]},{"id":"ci_4b7754cd386e40a01e5d7b4a554f5eb52dae03fab559b61c26db5458553d0ed1","title":"Export the System Monitor Agent's Local Configuration File","path":"/lrsiem/7.25.0/export-the-system-monitor-agent-s-local-configuration-file","children":[]}]},{"id":"ci_a565e683a7a594cc71681478b41bad80a570be09e0393b627ce5c29c227aa5f9","title":"Windows Event Log Collection","path":"/lrsiem/7.25.0/windows-event-log-collection","children":[{"id":"ci_0ade7659b55537ee771901495ae45d0a8dcd7077ba807612f018e0559e115c2e","title":"Collect Non-Domain Logs Remotely","path":"/lrsiem/7.25.0/collect-non-domain-logs-remotely","children":[]},{"id":"ci_1d3f73902ab8181caf15586d125ce172ea7187f0cd61f544a4eb5552de4195a8","title":"Create a Least-Privileged Domain User Account for Remote Log Collection","path":"/lrsiem/7.25.0/create-a-least-privileged-domain-user-account-for-remote-log-collection","children":[]},{"id":"ci_7ab17a716d2c4459796be18ecb5426fdc1aa794714d53d1cc28612fba552170f","title":"Set Up Remote Log Collection","path":"/lrsiem/7.25.0/set-up-remote-log-collection","children":[]}]},{"id":"ci_9efdba05f22bbdcfe78bed4a7ba85214c0e5e324b8a1316b8876d0ff36bb16c5","title":"Syslog Collection","path":"/lrsiem/7.25.0/syslog-collection","children":[{"id":"ci_6acbc6128cb6188fdcc115809046bec3a0c21443b3da7b75dd9022f180113c20","title":"Configure a Device or Host for Syslog Collection","path":"/lrsiem/7.25.0/configure-a-device-or-host-for-syslog-collection","children":[]}]}]},{"id":"ci_a52075c0000d2642c89f92e8fe9451f59faba838bbe117768b0c1225b96470d5","title":"Platform Manager","path":"/lrsiem/7.25.0/platform-manager","children":[{"id":"ci_8e9d870ad843d9e3b70280011cbe415611e9c15cf58941d1872f52946ebe149c","title":"Alarming, Reporting, and Response Manager Services","path":"/lrsiem/7.25.0/alarming-reporting-and-response-manager-services","children":[{"id":"ci_e9e01abc4c91eaa4df98a2b042f4bb79616925bca1b0b4ed1b042538e760a1f0","title":"Apply Recommended Platform Manager Values","path":"/lrsiem/7.25.0/apply-recommended-platform-manager-values","children":[]},{"id":"ci_7da72454f2f8fe73ce21e56d9d5e9b1446278de432f23677c788572cf8ee910f","title":"Integrate LogRhythm and McAfee ePolicy Orchestrator","path":"/lrsiem/7.25.0/integrate-logrhythm-and-mcafee-epolicy-orchestrator","children":[]},{"id":"ci_c60e7903d39d11bfec759115348e4dfa27bb92da0c0412cc175b6a5a2a6ac4b0","title":"Modify Platform Manager Advanced Properties","path":"/lrsiem/7.25.0/modify-platform-manager-advanced-properties","children":[]},{"id":"ci_251d04c711d607e2696d5a1adcbc2e6656d25986d2053848d65403427fe944be","title":"Modify Platform Manager Basic Properties","path":"/lrsiem/7.25.0/modify-platform-manager-basic-properties","children":[]},{"id":"ci_872da658efbe2cd339d99874ffcc9e3482ac1943a1b2f9d2e7fbfde4f4b9bcae","title":"Revert to a Previous Platform Manager Configuration","path":"/lrsiem/7.25.0/revert-to-a-previous-platform-manager-configuration","children":[]},{"id":"ci_483ee220943094635222c12934f998079924ea01b6ab34a2e4cad3cc1bcb8248","title":"Specific SMTP Servers to Allow for Failover","path":"/lrsiem/7.25.0/specific-smtp-servers-to-allow-for-failover","children":[]},{"id":"ci_016821d2c2630d738b5076b0c69c1ef43ce6fe1903b10a3a53ce3bfa5362a9ca","title":"Start, Stop, and Restart Platform Manager Services","path":"/lrsiem/7.25.0/start-stop-and-restart-platform-manager-services","children":[]}]},{"id":"ci_2e41bebf1e1746345bf1e0d155c3b78ae53e6a22310e7bc1b19f89b8cb4b0d53","title":"Global Risk Based Priority","path":"/lrsiem/7.25.0/global-risk-based-priority","children":[{"id":"ci_d7d6786de8badb54b0f7a0630218cdcd6867dc8f37bb887cf7570b4a0995282f","title":"Determine the MPE RBP Manually","path":"/lrsiem/7.25.0/determine-the-mpe-rbp-manually","children":[]},{"id":"ci_3a922be61ede32ebb5354a85d614f18cbaaad7371d3a423d57a96375530ec5ce","title":"Modify AIE Risk Based Priority Settings","path":"/lrsiem/7.25.0/modify-aie-risk-based-priority-settings","children":[]},{"id":"ci_73ca4e17dc543c8d4de31c0e2f1d8c7e0b554734bb73be70ef68388af3a776d7","title":"Modify the Default Destination Risk Level","path":"/lrsiem/7.25.0/modify-the-default-destination-risk-level","children":[]},{"id":"ci_900d4326df0d51643ca7018962f4c1969a51259d4a7b851425980ce027728dbd","title":"Modify the Default Source Threat Level","path":"/lrsiem/7.25.0/modify-the-default-source-threat-level","children":[]},{"id":"ci_e8fc78279a910e78ff6b16ff5956114d8a669eafa8eeaaf8af208ec533934a88","title":"Modify the MPE Risk Based Priority Settings","path":"/lrsiem/7.25.0/modify-the-mpe-risk-based-priority-settings","children":[]},{"id":"ci_0b2456f389c0f460ce8b5a48f0d4bf84ddb7566892a85e21499ffd75bd2f4e27","title":"Risk Based Priority Calculator","path":"/lrsiem/7.25.0/risk-based-priority-calculator","children":[{"id":"ci_91687180146fe3a9bd6112e0aca1ae88fe01a2d1d53729701c8b9fe5e1b40e02","title":"Install the RBP Calculator","path":"/lrsiem/7.25.0/install-the-rbp-calculator","children":[]},{"id":"ci_95d6087167331b56e91abbc2a5e01da41e11cf6157cac6bc2e520b8994315b9b","title":"Determine MPE or AIE Risk Based Priority With The RBP Calculator","path":"/lrsiem/7.25.0/determine-mpe-or-aie-risk-based-priority-with-the-rbp-calculator","children":[]},{"id":"ci_09df8628a34180001eee03f86c416435e382f6d25919240bcff1b2fc4757759a","title":"Transfer AIE RBP Calculator Values to a LogRhythm Deployment","path":"/lrsiem/7.25.0/transfer-aie-rbp-calculator-values-to-a-logrhythm-deployment","children":[]},{"id":"ci_d1ca06e64295fd21b23ed696f6cdcbc98012c711cb968bf399e885db5584a4e5","title":"Host, Network, and Default DRL and STL Settings","path":"/lrsiem/7.25.0/host-network-and-default-drl-and-stl-settings","children":[{"id":"ci_36733339fc32eb3f68b1bfaa63c073f307eeb9e7b5cc5b297184d497b69e8f2f","title":"Known Host and Network Search Algorithm","path":"/lrsiem/7.25.0/known-host-and-network-search-algorithm","children":[]}]},{"id":"ci_fcbc2a975c3f15e2354fc3f5a602115e389cd3195a7217332f1d6a6ec6494032","title":"Message Processing Engine RBP Algorithm","path":"/lrsiem/7.25.0/message-processing-engine-rbp-algorithm","children":[]},{"id":"ci_ab1cac61f029280b79fb75d64eaff3d261cb68b451ee66da3bd085eacccceb15","title":"AI Engine RBP Algorithms","path":"/lrsiem/7.25.0/ai-engine-rbp-algorithms","children":[]}]}]},{"id":"ci_80e91cd3bc4671a53ec9530094b59913134834b4b4ddfcc49c559375132a384c","title":"Job Manager Services","path":"/lrsiem/7.25.0/job-manager-services","children":[{"id":"ci_597143cefd80ab3efe6c4fb8f5e6e51819f0ef047a647a618b607531d3379221","title":"Modify Job Manager Advanced Properties","path":"/lrsiem/7.25.0/modify-job-manager-advanced-properties","children":[]},{"id":"ci_8e9693ef17ff80074530c2210ae7580c43213c8f5d744df51e32a5d5172a5fd2","title":"Modify Job Manager Basic Properties","path":"/lrsiem/7.25.0/modify-job-manager-basic-properties","children":[]},{"id":"ci_9d405b4db3f1d40075ee20b90a1bb88f44aab476e15b65c3ae10375588dda400","title":"Start, Stop, and Restart Job Manager Services","path":"/lrsiem/7.25.0/start-stop-and-restart-job-manager-services","children":[]},{"id":"ci_8e4cb9107597d7aa5f34b47a044a74a4bf28e4d6270a3fec2eed067ba45cc337","title":"Use the Job Manager Configuration Manager","path":"/lrsiem/7.25.0/use-the-job-manager-configuration-manager","children":[]}]},{"id":"ci_5a62156adef8b3a510426284e9ad6116e58e2714594c703b7bfca80aaab5923d","title":"System Management Settings","path":"/lrsiem/7.25.0/system-management-settings","children":[{"id":"ci_98c25111c3f91fa201e0278b76721119a37f4ee7d744ef0489e0d1646b075440","title":"Active Directory Domain Manager","path":"/lrsiem/7.25.0/active-directory-domain-manager","children":[{"id":"ci_ccb02ef2ebf62894f662e7064000a97a44de2020710d53ea2320a98d363537e0","title":"Add Active Directory Groups as Filters","path":"/lrsiem/7.25.0/add-active-directory-groups-as-filters","children":[]},{"id":"ci_69c39302968e687a0116ec65f84f5b01646dcf6981701ce70ab702fcebb4d4de","title":"Add New Active Directory Domains","path":"/lrsiem/7.25.0/add-new-active-directory-domains","children":[]},{"id":"ci_0bf7ccfd4f686a605c829f723123191f50f91b961aa9015d149d1b89a7aac9b6","title":"Check the Active Directory Synchronization Status","path":"/lrsiem/7.25.0/check-the-active-directory-synchronization-status","children":[]},{"id":"ci_8e7bbd54be7cce43e2e82fa9cfe980dfe8bf60ad5546c7cb79cecb0d247b48b8","title":"Modify Active Directory Domains","path":"/lrsiem/7.25.0/modify-active-directory-domains","children":[]},{"id":"ci_ca882468e7bee4a918294a795e694a45cd1656133f1d802f61d2a775cb456990","title":"Retire or Activate Active Directory Domains","path":"/lrsiem/7.25.0/retire-or-activate-active-directory-domains","children":[]},{"id":"ci_27acd88a10d9923bd7aac57a0af5b68db154f8ab425febf6f7e6b921928856e7","title":"Run Active Directory Browser Investigations","path":"/lrsiem/7.25.0/run-active-directory-browser-investigations","children":[]}]},{"id":"ci_87da45918bbe3208ec2539155a91b893097c4a1f4329fbb4100178421029d2eb","title":"Configure Global Maintenance Settings","path":"/lrsiem/7.25.0/configure-global-maintenance-settings","children":[]},{"id":"ci_704235aa4a96164ab2fc5c6c6a99116ac28a06464ce864bed8a5d45fa0b370f0","title":"Set or Modify Data Management Settings","path":"/lrsiem/7.25.0/set-or-modify-data-management-settings","children":[]},{"id":"ci_9ddf792eeee06ab6c1fda7e835a4d1aa5f66cbcb87cbfe3613696c7a583aeda2","title":"Enable Intelligent Indexing Globally","path":"/lrsiem/7.25.0/enable-intelligent-indexing-globally","children":[]}]},{"id":"ci_ae8cd7b17045999a3820b6a8ea32cf80d4339be6e6bb8608f85b18eec05fe1d4","title":"Update the IP Address of the Platform Manager","path":"/lrsiem/7.25.0/update-the-ip-address-of-the-platform-manager","children":[]},{"id":"ci_4c9e573c24f7822459d563f83310c1b2a74333e63869da236732ae339f2fbcf1","title":"Use the Platform Manager Configuration Manager","path":"/lrsiem/7.25.0/use-the-platform-manager-configuration-manager","children":[]}]}]},{"id":"ci_bfcacc9879b70cc6e940f40db104376dbb673eb3d399b821fd23d9a59a4f6f02","title":"Client Console Analyst Guide","path":"/lrsiem/7.25.0/client-console-analyst-guide","children":[{"id":"ci_ec2042c5256fb10d570884edfc1348119a23fa2923ecf7bae458abba2a33c920","title":"Filters and Wizards","path":"/lrsiem/7.25.0/filters-and-wizards","children":[{"id":"ci_4b4199e07bb936b717877fd6b20b4f9d858a22628f262dee164439ba1cf1d99a","title":"Use Filter Modes","path":"/lrsiem/7.25.0/use-filter-modes","children":[]},{"id":"ci_b569b023a7a3f02f40e5c36b6ef5d66543f25bda28fc9872f34fdc9763c2f307","title":"Use Lists with Filters","path":"/lrsiem/7.25.0/use-lists-with-filters","children":[]},{"id":"ci_3faf7719fc3b07ca8644f1fc25e7aa0fac2a1a44d75664b88fb7061027c0a4fd","title":"Use Multiple Filters","path":"/lrsiem/7.25.0/use-multiple-filters","children":[]},{"id":"ci_173d3d8b8f48eb87c4c8d9695954a50649502b13a0bb286b3aaa29589df5205a","title":"Use Multi-Type Filters","path":"/lrsiem/7.25.0/use-multi-type-filters","children":[]},{"id":"ci_9dea8567dded8eb2e40713b4c0ac8790ce111e1954b241a6d7762fd4e1442938","title":"Use Search Strings with Filters","path":"/lrsiem/7.25.0/use-search-strings-with-filters","children":[]},{"id":"ci_fadc15c3746a0142c0cfee0f1744f766aabb529d9f46a31476f4bc27fe527ad2","title":"Use SQL Pattern Match with Filters","path":"/lrsiem/7.25.0/use-sql-pattern-match-with-filters","children":[]},{"id":"ci_f4befd5fd4b80482f210f6459b89e84e5315efbc8220ddb07da0cf3104d41c3e","title":"Use the Filter Editor","path":"/lrsiem/7.25.0/use-the-filter-editor","children":[{"id":"ci_d83f599ebe132742abc2f3d225afd0e42d028f5d559a74cb1c9d9049f64cfd4a","title":"Filters—Action","path":"/lrsiem/7.25.0/filtersaction","children":[]},{"id":"ci_a1b74e57e517a2fdc050526a8bb54cc43f353fb3e03cd5b5a9378acd6bda7b7a","title":"Filters—Aggregation","path":"/lrsiem/7.25.0/filtersaggregation","children":[]},{"id":"ci_61881aed2a54680803e33c8e713f0ff682d0925e919125b6e2b09a36895d9f90","title":"Filters—AIE Summary Fields","path":"/lrsiem/7.25.0/filtersaie-summary-fields","children":[]},{"id":"ci_9bd423eba763a0f26d80fe997e19fce2a258e8b8d4296a72ae6ac372454204d6","title":"Filters—Data Fields","path":"/lrsiem/7.25.0/filtersdata-fields","children":[]},{"id":"ci_2a9f0e4f111f3132039b6b6f424df08d7270c5e95d23d28705b658a001e440f9","title":"Filters—Day and Time Criteria","path":"/lrsiem/7.25.0/filtersday-and-time-criteria","children":[]},{"id":"ci_df3ca1bf443247441e315447cc4bd0a4989d26ed47727b2e3cc18029755b333c","title":"Filters—Distinct","path":"/lrsiem/7.25.0/filtersdistinct","children":[]},{"id":"ci_0c831ecad52f4cced4dba149528dbd2951067ff815fa1437e8a0343afd0882ab","title":"Filters—Exclude Filter","path":"/lrsiem/7.25.0/filtersexclude-filter","children":[]},{"id":"ci_ee5127af4d9af055e1daffe68fbfb25f24e6f77bc08d5a6e7a91c125e9f2cfd9","title":"Filters—Expressions","path":"/lrsiem/7.25.0/filtersexpressions","children":[]},{"id":"ci_d61a0da31f7ac74becfe8d23d327d8c566cf49c4afb5839f3dffea1ec57cc1a1","title":"Filters—Group By","path":"/lrsiem/7.25.0/filtersgroup-by","children":[]},{"id":"ci_358e0bddad96bad0f5695e338b84974c13b96453733aa93bf29ed9f483f29e4a","title":"Filters—Include Filter","path":"/lrsiem/7.25.0/filtersinclude-filter","children":[]},{"id":"ci_e9a03ee26c7fa1eb49616d3bd373a3264f763c129a98a30ed43289e68dfb02de","title":"Filters—Information","path":"/lrsiem/7.25.0/filtersinformation","children":[]},{"id":"ci_f069c2141d7972ad98ff65116861a8d53839be4a870dc3183be32d016fc390dc","title":"Filters—Log Source Criteria","path":"/lrsiem/7.25.0/filterslog-source-criteria","children":[]},{"id":"ci_22bb68afc5e59c5b9655d3d2e65dd64d60a8083b6500cc3b771bf4a09f0c8f2c","title":"Filters—Notify","path":"/lrsiem/7.25.0/filtersnotify","children":[]},{"id":"ci_296b66cdf5205a7bc6fa42fec85709b0782a19e06fc349a741eadd67db2e515f","title":"Filters—Primary Criteria","path":"/lrsiem/7.25.0/filtersprimary-criteria","children":[]},{"id":"ci_bb6b4a4dfc632d3084fc0b0c7398116006a91f5e921fc0402322cf66e508e91f","title":"Filters—Profile","path":"/lrsiem/7.25.0/filtersprofile","children":[]},{"id":"ci_b8417310f7c419687963e01930b6eaad97b80feba7e35537863519b0eebceeca","title":"Filters—Schedule","path":"/lrsiem/7.25.0/filtersschedule","children":[]},{"id":"ci_8ad75f735aace06693c6434de352d096ec375f00f8e2895447657160b0ade8e4","title":"Filters—Settings","path":"/lrsiem/7.25.0/filterssettings","children":[]},{"id":"ci_ba48f80eb8dd8c2dead991ff381b2eb7556f0294ca7bf6bc4e5c0097618bdbbf","title":"Filters—Thresholds","path":"/lrsiem/7.25.0/filtersthresholds","children":[]},{"id":"ci_4972f9497eac249efffaa1bc9e303dd600f28e08c16c6394644ea42348af2b49","title":"Filters—Time and Schedule","path":"/lrsiem/7.25.0/filterstime-and-schedule","children":[]},{"id":"ci_9c3e867e6f9ab123b1ba83593408cd97a7f2cbf09b6fbe586cbae921efd238e1","title":"Filters—Unique Values","path":"/lrsiem/7.25.0/filtersunique-values","children":[]}]}]},{"id":"ci_6c58b7066b31fbc2bdf85e5b33300b1f24c4d3f77dfcaea45bb8479c08d9575c","title":"General Console Features","path":"/lrsiem/7.25.0/general-console-features","children":[{"id":"ci_904983801df266a760f9e665f7466d948820d34237cfb8ec9a454068189b39d0","title":"Export Grid to File","path":"/lrsiem/7.25.0/export-grid-to-file","children":[]}]},{"id":"ci_5d73ad4e429b708071faf36f5953bf5f1e68eaf4d6ad134ab54bd3c103dfb986","title":"Layouts","path":"/lrsiem/7.25.0/layouts","children":[{"id":"ci_93b65a95149726d97e7b03fd91f2b71bb4a2d162a98684983ded620e17036582","title":"Clone Existing Layouts","path":"/lrsiem/7.25.0/clone-existing-layouts","children":[]},{"id":"ci_fc5191d7614341d85b8993da4ac6941b60a2ae6d934ef4b28715b13e74b6857e","title":"Create New Layouts","path":"/lrsiem/7.25.0/create-new-layouts","children":[]},{"id":"ci_6fa60d3e0b2050a31a0676b938a9abf36e92fdcef0ba1b204c5e781fa94caaeb","title":"Delete Layouts","path":"/lrsiem/7.25.0/delete-layouts","children":[]},{"id":"ci_edd94d141206ced02b1f4a9e52e967866d7778dbca55437b829b560f77a0169b","title":"Import and Export Layouts","path":"/lrsiem/7.25.0/import-and-export-layouts","children":[]},{"id":"ci_960b69490a377b9df95ed6c5250482120088849e2fbdb632317db606d674466f","title":"Make or Clear Default Layouts","path":"/lrsiem/7.25.0/make-or-clear-default-layouts","children":[]},{"id":"ci_1a2fec5b11836d5addb532531c3dcdac0b5326d939613a647cd84dccf380e4c4","title":"Modify Layout Properties","path":"/lrsiem/7.25.0/modify-layout-properties","children":[]},{"id":"ci_c60a9d2b5d0b9613ebaf4cde11383a450822b5e6512fe2378a6ab22f5dcc907b","title":"Reset Layouts","path":"/lrsiem/7.25.0/reset-layouts","children":[]},{"id":"ci_ed41f1dc11bf60c4a647d541ae82bf19b820e4ab829356cf158ee2c335333a20","title":"Save Layouts","path":"/lrsiem/7.25.0/save-layouts","children":[]},{"id":"ci_a3b2c12a86fde5638ac4af9fac9d2d62888b519d32d80c916070fa0cd7f774ee","title":"Set Color Themes in Layouts","path":"/lrsiem/7.25.0/set-color-themes-in-layouts","children":[]}]},{"id":"ci_486e11026453a033435559f8c35ecbcd783b080189e3a6f03c33daa7d974a7c7","title":"Lists in the Client Console","path":"/lrsiem/7.25.0/lists-in-the-client-console","children":[{"id":"ci_883baf70b1ec7160c23f8a37a12d0379f2b02e19bfe380aa9e00476979169124","title":"Add Expiring Items to a List","path":"/lrsiem/7.25.0/add-expiring-items-to-a-list","children":[]},{"id":"ci_689c62c6176854ec3fe56988c18394e76dd4daba92413939d8f0ed3c65bf70cd","title":"Add Values to a List","path":"/lrsiem/7.25.0/add-values-to-a-list","children":[]},{"id":"ci_4d60efbc2b2f88b837b1753f0b650258e5967959df02432068c1079b7dd94272","title":"Clone Lists","path":"/lrsiem/7.25.0/clone-lists","children":[]},{"id":"ci_e670c6ae28b28cf47bf64d49a428163fd91576445469406884770085b9e0ef0b","title":"Create Lists in the Client Console","path":"/lrsiem/7.25.0/create-lists-in-the-client-console","children":[]},{"id":"ci_371cf86ab464078f19732a555cb40d00da69d8a36480ff1f81ccdc466cb9a237","title":"Modify the Properties of Lists","path":"/lrsiem/7.25.0/modify-the-properties-of-lists","children":[]},{"id":"ci_b446c7c4c5b8941e774d04f2198c167263df6469033381e4e2acf972c462a50e","title":"Remove List Items","path":"/lrsiem/7.25.0/remove-list-items","children":[]},{"id":"ci_f5de4f7747f7740a5d0b5bc759d3f9aa6b372556a1e655ac5ce257af10e2941c","title":"Reset Expiration Date for List Items","path":"/lrsiem/7.25.0/reset-expiration-date-for-list-items","children":[]}]},{"id":"ci_b0744129aa79a96efaf2c00e4541181f84fc032f281d77f6268dc843b6b9fd4b","title":"Message Processing Engine Rule Builder","path":"/lrsiem/7.25.0/message-processing-engine-rule-builder","children":[{"id":"ci_390191dc0748c5351770d1aa61472c6d299a030a47b54e2f9f4a90dd8adf53c7","title":"Application Manager","path":"/lrsiem/7.25.0/application-manager","children":[{"id":"ci_11ae2e4119ac25c347b8c9345dcaa29bf7e9e2f429b4169913e2046f4a5ee3ae","title":"Create New Application Records","path":"/lrsiem/7.25.0/create-new-application-records","children":[]},{"id":"ci_9dfb756420e115b185224b876045f8d6e59a67551895a7ee7c111ac1ff5b51da","title":"Modify Application Record Properties","path":"/lrsiem/7.25.0/modify-application-record-properties","children":[]},{"id":"ci_751148003363f4140a8ce7b0ef1a0dbc6ef8ab33f80421dd9bd3004141afa72b","title":"Refresh the Application Manager","path":"/lrsiem/7.25.0/refresh-the-application-manager","children":[]},{"id":"ci_ab3871fd5e7f5c8128e12c93ede26611a26a267ec8788435e486941b6561a272","title":"Retire or Activate Application Records","path":"/lrsiem/7.25.0/retire-or-activate-application-records","children":[]}]},{"id":"ci_3b3ddad53c943ff6e8d7e5be1eb56bd251bb204d78da8f59a85ab8434dd6f0a1","title":"Common Event Manager","path":"/lrsiem/7.25.0/common-event-manager","children":[{"id":"ci_6b4972d98e742ff5703b2906a74f3f897f596ac83d5e65eafcbe6750f593fafb","title":"Create Common Events","path":"/lrsiem/7.25.0/create-common-events","children":[]},{"id":"ci_886ed88a527602e9d16995bca84e3fe831abb9c8a570138ebb1ec96936b6dced","title":"Delete Common Events","path":"/lrsiem/7.25.0/delete-common-events","children":[]},{"id":"ci_b4284303ae13560528c29253ba5a5963feb1e518e2305d3df1c43a03d4de8253","title":"Modify Common Events","path":"/lrsiem/7.25.0/modify-common-events","children":[]},{"id":"ci_d4477ffd9352705d3f6ed930f1b9acf5629cc4d8b4286ce0d4a332ed870e5bd5","title":"Search for Common Events","path":"/lrsiem/7.25.0/search-for-common-events","children":[]}]},{"id":"ci_c34bdbd17dee64bf40220b9927e44209d4046d83f8c9907e454fefc638868b7c","title":"Create MPE Policies","path":"/lrsiem/7.25.0/create-mpe-policies","children":[]},{"id":"ci_912c6de699eecc04fb98f6e37a515f5c9f694bd0355d8a07a3fe99dde89d654d","title":"Create New Base MPE Rules","path":"/lrsiem/7.25.0/create-new-base-mpe-rules","children":[]},{"id":"ci_32d2b16a55917d8068c03a4f1b117ee4dbc46d2b488cba3efe6090c7c49e17ed","title":"Edit MPE Rules","path":"/lrsiem/7.25.0/edit-mpe-rules","children":[]},{"id":"ci_f12b2c86fddcc1ae6de0aace822cd25c3aadf654162bd0c5d0d5fe5a1487fc65","title":"Edit Sorting Properties for System Base MPE Rules","path":"/lrsiem/7.25.0/edit-sorting-properties-for-system-base-mpe-rules","children":[]},{"id":"ci_cadcb0a968d59e400ea02e648f27290c3f4ea1cb43f9a0f28813936d3e7f0178","title":"Import and Export MPE Rules","path":"/lrsiem/7.25.0/import-and-export-mpe-rules","children":[]},{"id":"ci_53899d46f08e35d513125d1ca33f7a1600774dc48c46e5b74b6452f276f19b9c","title":"Regular Expression Characters and Practices","path":"/lrsiem/7.25.0/regular-expression-characters-and-practices","children":[]},{"id":"ci_14dcd0c7f1aa7890e79aebe79cd07669c266c19e313b14e3e3c48b5753ac2efa","title":"Create Custom MPE Sub-Rules","path":"/lrsiem/7.25.0/create-custom-mpe-sub-rules","children":[]}]},{"id":"ci_c3b0445d826fd89a9033c2f91f349617deedea0e8dddb05e75e9ddb0578869d6","title":"Monitor, Search, and Analysis","path":"/lrsiem/7.25.0/monitor-search-and-analysis","children":[{"id":"ci_d850b15576c5798f1cd5b96ceb902124224c29f617fbc36ebd60ed0e2217da00","title":"Alarm Viewer","path":"/lrsiem/7.25.0/alarm-viewer","children":[{"id":"ci_be2c840e95f7d1f39898fa1a5fea8b1b9e931f67b7a7d3f102b7a55d1827a995","title":"Change the Status of a Single Alarm","path":"/lrsiem/7.25.0/change-the-status-of-a-single-alarm","children":[]},{"id":"ci_59e30195d062e2a1fe7fcfe478c6161b832b750e55bfd8d95022a73e0be926af","title":"Change the Status of Multiple Alarms","path":"/lrsiem/7.25.0/change-the-status-of-multiple-alarms","children":[]},{"id":"ci_787234bf9626c75333ae8002b833898bf9b7fe62b2ac1bbe8865c08b73bef8b0","title":"Create Alarm Lists","path":"/lrsiem/7.25.0/create-alarm-lists","children":[]}]},{"id":"ci_d9182c9c7fc936ae180f9f2601a799d075d450c658b0d00fd2be9b5e78c5e50a","title":"Investigator","path":"/lrsiem/7.25.0/investigator","children":[{"id":"ci_c1bce340ba208dde1b63edd6b39d6e6eebd3c8fccbca6d2448211b9bf9df8380","title":"Change Share Permissions on a Saved Investigation","path":"/lrsiem/7.25.0/change-share-permissions-on-a-saved-investigation","children":[]},{"id":"ci_377387391f7b02a386ad96a4f9a551d405a8bb18adc3fc110e904dd8ecf4ab93","title":"Create Investigations","path":"/lrsiem/7.25.0/create-investigations","children":[]},{"id":"ci_5f506ba3d8092b6e0e26a9086625f586a9ff7cad99be709aa052b76653abd637","title":"Drill Down on a Single Item in Investigation Results","path":"/lrsiem/7.25.0/drill-down-on-a-single-item-in-investigation-results","children":[]},{"id":"ci_333321c88f2c0d6902e44d98ac19094d6b39f1a1abfad831332ecb358b4b2e0b","title":"Drill Down on Multiple Items in Investigation Results","path":"/lrsiem/7.25.0/drill-down-on-multiple-items-in-investigation-results","children":[]},{"id":"ci_47ddf2ad82211af93b3d38804b5adc7c90ee3218c3be7fcf50a2f317adc119a4","title":"Import and Export Investigations","path":"/lrsiem/7.25.0/import-and-export-investigations","children":[]},{"id":"ci_5562683e1607277600cb3caecc8c2b9baa938126338362248eb7fc39cfadcc03","title":"Run Saved Investigations","path":"/lrsiem/7.25.0/run-saved-investigations","children":[]},{"id":"ci_6a82121b68385ac5ef64566c90977aed624f68e68a57ad1c0c05231debe68c3e","title":"Save Investigations with Report Packages","path":"/lrsiem/7.25.0/save-investigations-with-report-packages","children":[]},{"id":"ci_4a04af09e985f210f46a9cec8b271b92ac7667b3f8b665569f9b360417b110d8","title":"Save Investigations with Report Templates","path":"/lrsiem/7.25.0/save-investigations-with-report-templates","children":[]},{"id":"ci_743550d9aacc83d59fb98055701a44b5420b98468267d9f728a4a0b953a009c1","title":"Search for Most Frequent Common Events","path":"/lrsiem/7.25.0/search-for-most-frequent-common-events","children":[]},{"id":"ci_123a859c19c2b5822ee326dafeb7cde5a7c936cec32dcf9b77a851eda957789e","title":"View Metadata in the Log Viewer Tab","path":"/lrsiem/7.25.0/view-metadata-in-the-log-viewer-tab","children":[]},{"id":"ci_986a75a8062fbd7f3c0add0b72eb9b489f805ddcf8c03754b8ad2e4c7f31157e","title":"Work With Investigation Result Graphs","path":"/lrsiem/7.25.0/work-with-investigation-result-graphs","children":[]},{"id":"ci_bd8b97ba0af504a67f1b161de683ff991aec5e3865b9fdafd8e52d082d7216a9","title":"Work with Log Miner","path":"/lrsiem/7.25.0/work-with-log-miner","children":[]},{"id":"ci_7a8363ada3a9cd7c99205111e9fd554294453f1e43a2ae8c28c54e2000fce253","title":"Work With Network Visualization Diagrams","path":"/lrsiem/7.25.0/work-with-network-visualization-diagrams","children":[]}]},{"id":"ci_cef45f6d593ff389c69b0d8483f53ec09ada195abb8b7baf0c4f07fbd5f6dc0c","title":"Personal Dashboard","path":"/lrsiem/7.25.0/personal-dashboard","children":[{"id":"ci_54900b4550362a7fc133bd2c0c9d1e8a8e861e1a04ebacfdf6817af836c05e50","title":"Add Personal Dashboard Filters","path":"/lrsiem/7.25.0/add-personal-dashboard-filters","children":[]},{"id":"ci_aab03ebc2671a8f1b1171c9ce50115ac039f8266639c197d7639c44e4081247e","title":"Apply Personal Dashboard Filters","path":"/lrsiem/7.25.0/apply-personal-dashboard-filters","children":[]},{"id":"ci_539e22233ac9ff6cffd4305d81b43a70cc845d8bea87bebe84c9e3762fd98004","title":"Clone Personal Dashboard Filters","path":"/lrsiem/7.25.0/clone-personal-dashboard-filters","children":[]},{"id":"ci_b654b91997b83fe56f3e83203386ca5deaf3bf11dc036932078c703aba02e1f0","title":"Configure the Personal Dashboard Display","path":"/lrsiem/7.25.0/configure-the-personal-dashboard-display","children":[]},{"id":"ci_12fc1ff3cb4793051333d4979aaad8b323da9ad81798824b43f14a904dacc775","title":"Delete Personal Dashboard Filters","path":"/lrsiem/7.25.0/delete-personal-dashboard-filters","children":[]},{"id":"ci_b8bd30fe4f9316a7ad89929e8fabf84daee4b26a223a8a04f0e8ed704b14bfd7","title":"Drill Down on Dashboard Data","path":"/lrsiem/7.25.0/drill-down-on-dashboard-data","children":[]},{"id":"ci_9bf913932bccd6cc84a718f4470cebe0e4c7cc52d3d5c1360e143c11b9e13b00","title":"Modify the Properties of Personal Dashboard Filters","path":"/lrsiem/7.25.0/modify-the-properties-of-personal-dashboard-filters","children":[]}]},{"id":"ci_23e02f8764a2fbff0eb776d4ba0942f0151466a66650137a36c2ab3aafcc9e5d","title":"Quick Search Toolbar","path":"/lrsiem/7.25.0/quick-search-toolbar","children":[{"id":"ci_ec34a47a091b7ba2b277b73cc960a145f32b1f3fcb43b4b8e19c9c573f6cc572","title":"Use the Quick Search Toolbar","path":"/lrsiem/7.25.0/use-the-quick-search-toolbar","children":[]}]},{"id":"ci_f9788c88dd7900f054573384692c6ad6f7db05ab614981afc69e4e5e5898e44e","title":"Run Contextualize","path":"/lrsiem/7.25.0/run-contextualize","children":[]},{"id":"ci_98aac1c53a911366d742484fb225a374b354da941a40fb1068d127fc7054fb6b","title":"Run Correlate","path":"/lrsiem/7.25.0/run-correlate","children":[]},{"id":"ci_0a26f4ed49ef2c540b4f7d72ec552fb5fd5fcbf9054c6e0dfddb78765a230f17","title":"Tail","path":"/lrsiem/7.25.0/tail","children":[{"id":"ci_fcef245644ed7d985dc5617bb1f2e2f7463025e02d1f51aecd0a79459dc7e6ba","title":"Create New Tails","path":"/lrsiem/7.25.0/create-new-tails","children":[]},{"id":"ci_e9fae5d662e5fe77bb4b88e7c518bfa45921058154358c1297d071616f74d1a5","title":"Run Saved Tails","path":"/lrsiem/7.25.0/run-saved-tails","children":[]},{"id":"ci_70ca01e6f81b2c1c33424ec8ca5bb8c88c79600bb1ce8f9722d05c1ad04fc4ad","title":"Tail Log Sources","path":"/lrsiem/7.25.0/tail-log-sources","children":[]}]},{"id":"ci_7f3bf41cf2c38eced2d700f00247b95f5d32b8eb11a804d87bbe3cf61b9d8149","title":"TopX Analysis","path":"/lrsiem/7.25.0/topx-analysis","children":[{"id":"ci_e77f0e1ab300755069dbb1151213272f0a27d85e2069f352843f102ee11d2999","title":"Analyze TopX Results","path":"/lrsiem/7.25.0/analyze-topx-results","children":[]},{"id":"ci_aab4aefe16522438399cd3f57121e38eda742bf2debc63ec2b2c66907038d879","title":"Configure TopX Widgets","path":"/lrsiem/7.25.0/configure-topx-widgets","children":[]}]}]},{"id":"ci_5580a724562e176597ae4c6ceda602a442d663aaab9dbfcf83a840137ae2b044","title":"My LogRhythm","path":"/lrsiem/7.25.0/my-logrhythm","children":[{"id":"ci_4da4ffcaaf938e9bd2842f4b91e7fd2ae753529e2c6c545362fbfc503755ed6c","title":"Add or Modify a Person Record","path":"/lrsiem/7.25.0/add-or-modify-a-person-record","children":[]},{"id":"ci_eef534c4f4d59bc8ef9bf23cb2e4e31e3019128d3320be31e33c6593811ca803","title":"Change Your Password","path":"/lrsiem/7.25.0/change-your-password","children":[]},{"id":"ci_d80405a2233682ed15b78819e96042904f2fa6d59b552514799ad816d34bfd6e","title":"Create Email Notification Policies","path":"/lrsiem/7.25.0/create-email-notification-policies","children":[]},{"id":"ci_50f16a54808ed500045ec1a30bc89f2c865d18392f1ce68d9cd2f3c102fa9682","title":"Manage Your Preferences","path":"/lrsiem/7.25.0/manage-your-preferences","children":[]}]},{"id":"ci_134809c7b49b92e6388824c031a7380704e609f70082e619dde04b1facee2ed3","title":"Report Center","path":"/lrsiem/7.25.0/report-center","children":[{"id":"ci_d48f8ce3218b28e1b4c9e4a7e31513a17fa800f4b0eda88a3f766294e643dd1d","title":"Add Custom Logos to Reports","path":"/lrsiem/7.25.0/add-custom-logos-to-reports","children":[]},{"id":"ci_4c31d41fefbac49bbe0856c4f33f087740eaaf4b75e1f540aa7ecd76efb09d02","title":"Clone Reports or Report Packages","path":"/lrsiem/7.25.0/clone-reports-or-report-packages","children":[]},{"id":"ci_6f42a0ea812390a4795410c1451d4d64aed5789b30fedf5f71d7facbf1f03dd2","title":"Create Custom Log Detail Report Templates","path":"/lrsiem/7.25.0/create-custom-log-detail-report-templates","children":[]},{"id":"ci_b0c14f7943418ca66aa724ee5b8f5997339f7e9a846118b8f8715ca450825e07","title":"Create Custom Log Summary Report Templates","path":"/lrsiem/7.25.0/create-custom-log-summary-report-templates","children":[]},{"id":"ci_35e5db9a53d40eddd14ed85cafb57ba7b004a46d0358aef088c1560c230461af","title":"Create Report Packages","path":"/lrsiem/7.25.0/create-report-packages","children":[]},{"id":"ci_31ad5241fc813d800dce22fb2e077fa484a43d46b7ba814e211dacc5b52f84cb","title":"Create Reports","path":"/lrsiem/7.25.0/create-reports","children":[]},{"id":"ci_3d0a085e7d653899777bcded759bd2bfc72499416a1ceb1f0d1826e30cb72443","title":"Create Scheduled Reports","path":"/lrsiem/7.25.0/create-scheduled-reports","children":[]},{"id":"ci_a7152d00c015afb6cace35b2b4b2e91de1da639b2a8a2a5db91542665d7ae6e8","title":"Import or Export Reports or Report Packages","path":"/lrsiem/7.25.0/import-or-export-reports-or-report-packages","children":[]},{"id":"ci_cc4b7af7c920656829e0ef43d1f7ee431554e26afafb5e53cb92d89aaa155b8e","title":"Manage Scheduled Reports","path":"/lrsiem/7.25.0/manage-scheduled-reports","children":[]},{"id":"ci_0d53eb1a761899c1d5717a934a8f8f9407acaf8283ad92b6566f9a735776af25","title":"Modify Custom Report Templates","path":"/lrsiem/7.25.0/modify-custom-report-templates","children":[]},{"id":"ci_a1b8188116f47be8fb066ff689d3dfc4387c40fe105b5580b63ffcce713fec68","title":"Restore Default Logo to a Report","path":"/lrsiem/7.25.0/restore-default-logo-to-a-report","children":[]},{"id":"ci_396dfcba6fe0ee34ba40106beafc0a764aab830a9dcec95194006c88ca0d13ff","title":"Run Reports","path":"/lrsiem/7.25.0/run-reports","children":[]},{"id":"ci_ac7047a73574023cdaddc3859b1d3a0a9186d444c311412435dabb88cbc34079","title":"Run Reports as Investigations","path":"/lrsiem/7.25.0/run-reports-as-investigations","children":[]},{"id":"ci_b705253c2dd3372b620ac81c8e57ade67f347382f50dae0c045682d9d7946700","title":"Troubleshoot Empty Reports","path":"/lrsiem/7.25.0/troubleshoot-empty-reports","children":[]},{"id":"ci_3bfa9211191803ab5858e923a4d5fedce2f91784e52903debf6caee0a697a1c3","title":"View Report Center Job Status","path":"/lrsiem/7.25.0/view-report-center-job-status","children":[]},{"id":"ci_00c6b3980d371f092ff961c533f34ebfd1c87c21b542a8036d1cf0ae0c8a60e6","title":"View Reports in the Client Console","path":"/lrsiem/7.25.0/view-reports-in-the-client-console","children":[]}]}]},{"id":"ci_4d7e84d70c76cfbeb2d8c28b1e2684d0498d9ffc6555cd8912f05f089f239690","title":"Web Console User Guide","path":"/lrsiem/7.25.0/web-console-user-guide","children":[{"id":"ci_ea064827f43b76e8ee7276a87b72b4e15cf22364557b4ea3428cbddaf2eeba18","title":"Alarms","path":"/lrsiem/7.25.0/alarms","children":[{"id":"ci_a3f6d4a75df7c1bce32898b70135ba656c2b2b3696504a0239087d206850ad07","title":"Alarms Page Overview","path":"/lrsiem/7.25.0/alarms-page-overview","children":[{"id":"ci_9bde2739420c6c3742513ebd4c11399fbbacdf6f84f4076d6bf75a403c0961db","title":"Alarm Cards","path":"/lrsiem/7.25.0/alarm-cards","children":[{"id":"ci_b13ee38f3f894a999821be93109590dae65c010a7c08afa1f9221ddef4bdbe8b","title":"Sort Alarm Cards","path":"/lrsiem/7.25.0/sort-alarm-cards","children":[]}]},{"id":"ci_06ca12137a9d91054272fbcb10b0d4d54deebbbc5ca042fe0148932bc374d9c1","title":"Alarm Grid","path":"/lrsiem/7.25.0/alarm-grid","children":[{"id":"ci_9ed3ebd37f750b64648e7ad4a7b19798741ba53f42d7ff9213557b66a83cd7b4","title":"Pin and Resize Alarm Grid Columns","path":"/lrsiem/7.25.0/pin-and-resize-alarm-grid-columns","children":[]}]},{"id":"ci_b2891441fad5d298a8a6e94c5a29d77c47ecbd120933d3fb1e7e251939ae17fa","title":"Alarm Status Trends","path":"/lrsiem/7.25.0/alarm-status-trends","children":[]}]},{"id":"ci_bbc02b2eecece07ce7f67f83d69b090ae77bb2ad3ff06450c62542f8fb6a64e6","title":"Alarm Filters","path":"/lrsiem/7.25.0/alarm-filters","children":[{"id":"ci_feda7d24a43764fa5c1da890cb6f9b5c3faf59f7e7ebfe74fd2eccc2464369b8","title":"Remove Alarm Filters","path":"/lrsiem/7.25.0/remove-alarm-filters","children":[]},{"id":"ci_8ce38673cdbba3aef9475b890c9db9d9671020206d06622689525636fc52849f","title":"Use Dynamic Alarm Filters","path":"/lrsiem/7.25.0/use-dynamic-alarm-filters","children":[]},{"id":"ci_fcb922eebb232c29a9ca9f8be4fd30a88ae79e1ff9fa5be5ca367feebcd5ecff","title":"Use the Time Frame Filter","path":"/lrsiem/7.25.0/use-the-time-frame-filter","children":[]}]},{"id":"ci_8d5e32a5893199540310d2a84ae7a9fbb38c39bbbd4d9c52f9cb15ee69f392b5","title":"Add Comments to Alarms","path":"/lrsiem/7.25.0/add-comments-to-alarms","children":[]},{"id":"ci_2eee20e07c0e8b5c136092bd64742f95d8f1467fe420296fe317936a695e2d00","title":"Approve or Deny SmartResponse Actions in the Web Console","path":"/lrsiem/7.25.0/approve-or-deny-smartresponse-actions-in-the-web-console","children":[]},{"id":"ci_7a088f52376056ccf7c4643f938f71a367ff11390774f0850d2d0e4a9cfc2df1","title":"Drill into Log Data Associated with an Alarm","path":"/lrsiem/7.25.0/drill-into-log-data-associated-with-an-alarm","children":[]},{"id":"ci_9cf68bfe6fa8e25426cf8873870f3db9db34d87ffa648d972376bdfcc003d6a0","title":"Update the Alarm Status","path":"/lrsiem/7.25.0/update-the-alarm-status","children":[]},{"id":"ci_72cfa52953742565047a925e2ee577d12a18fd74a0aae35cacf7bbd0c859b622","title":"View Alarms in Your Browser","path":"/lrsiem/7.25.0/view-alarms-in-your-browser","children":[]},{"id":"ci_2edde03b8eb8b151906209930163f1ce0f8be25735a03bda2bc8577d83e816d8","title":"Alarm Inspector Panel","path":"/lrsiem/7.25.0/alarm-inspector-panel","children":[]}]},{"id":"ci_e1809011cfbd8beaaf929bf28820f617fd6a7bdb7962346bf7efd603dc6add43","title":"Analyzer Grid","path":"/lrsiem/7.25.0/analyzer-grid","children":[{"id":"ci_2bc5f88d9da9a361d98b29693227e5a041298c3c11133bec7832e815519127c2","title":"Use the Analyzer Grid","path":"/lrsiem/7.25.0/use-the-analyzer-grid","children":[]},{"id":"ci_96ba9cfba808e27f4ba249b6c7966815b2628efc1caa1ea86bb4936f14fd4f6f","title":"Configure the Analyzer Grid","path":"/lrsiem/7.25.0/configure-the-analyzer-grid","children":[]},{"id":"ci_d05a37ccf2a9cc77cb7f9fe224e5c7a6677602bf0aeca1d6e1bc6961c89b2eb1","title":"Details & Actions Panel","path":"/lrsiem/7.25.0/details-actions-panel","children":[]},{"id":"ci_2172797e8147ca0bbf3dcdba0048007544b5cd4d88b8f9ca1acceac9737489fe","title":"Export Log Data into a CSV File","path":"/lrsiem/7.25.0/export-log-data-into-a-csv-file","children":[]},{"id":"ci_d8ea41566d9513abfd27f87dec5954565c5d2e9889b5ebc3fc673ed00b65910d","title":"Inspector Panel","path":"/lrsiem/7.25.0/inspector-panel","children":[{"id":"ci_067a1c7a5d96a29e7b98ee014c1ff9cb8c06a921b39a6525e2b62c27f97f39a4","title":"Integrate with LogRhythm UEBA (formerly CloudAI)","path":"/lrsiem/7.25.0/integrate-with-logrhythm-ueba-formerly-cloudai","children":[]},{"id":"ci_bf835cb1a67a0dde16af89c47c25550ab3fbae4a540023bdaca820c12f0ed80f","title":"Use Contextualize","path":"/lrsiem/7.25.0/use-contextualize","children":[]},{"id":"ci_5d2bd63307d9d1156663b3ddc77426037c943bf32646e68bea420c0758636929","title":"Configure Third-Party Contextualize Actions","path":"/lrsiem/7.25.0/configure-third-party-contextualize-actions","children":[]},{"id":"ci_4e1b2232bb45c9fd11f78209c4f341a1c8e476fef3f170439aaa34e71d409365","title":"Use SmartResponse","path":"/lrsiem/7.25.0/use-smartresponse","children":[]},{"id":"ci_7b2f292c2fb919dbdaffdd618197c24123b80e66c0bfd5db77ae4629fd414d28","title":"Use the AI Engine Rule Viewer","path":"/lrsiem/7.25.0/use-the-ai-engine-rule-viewer","children":[]},{"id":"ci_453b547589d5420ab1fc422359474cfe784a75d57cf0d99664ca18754cfd6eb7","title":"Use Threat Intelligence Service Integration","path":"/lrsiem/7.25.0/use-threat-intelligence-service-integration","children":[]}]}]},{"id":"ci_e2af6a43e998de633eb6766ab03268a8a45424cf0f8d59f1b483d8a0af1018ed","title":"Case Management","path":"/lrsiem/7.25.0/case-management","children":[{"id":"ci_cb344b8d9aa140c1968378e1ba989b036cad7852f8affb3a16e4c4b7817676de","title":"Case Cards","path":"/lrsiem/7.25.0/case-cards","children":[]},{"id":"ci_ba93c5481252e9d3c98f8f4196ea763e91dba55234041819c08ef9a519ce6b89","title":"Case History Widgets","path":"/lrsiem/7.25.0/case-history-widgets","children":[]},{"id":"ci_dab9ac3bb9afe0c106e0e3550f420f120d6eedecbb03e76b5ac58b7860949488","title":"Case List Widgets","path":"/lrsiem/7.25.0/case-list-widgets","children":[{"id":"ci_b0121796289511cd167564b18843eef524d298192c8f427b71891604d5ae1bbe","title":"Configure Case List Widget Settings","path":"/lrsiem/7.25.0/configure-case-list-widget-settings","children":[]}]},{"id":"ci_c8a0f58ca9550db61c42c0a2f97642840c472bb948862814a08e3ed303530538","title":"Case Owners vs. Collaborators","path":"/lrsiem/7.25.0/case-owners-vs-collaborators","children":[]},{"id":"ci_45fdfaeebe6fbdb04a4a1e01e1fb0bc2f8aedf16a051bccfbee87bd3182e5958","title":"Case Status and Workflow","path":"/lrsiem/7.25.0/case-status-and-workflow","children":[]},{"id":"ci_8c4b25896ef882fdeaa060aacca02d590ee2cf00f64669f3a197e4afb0ef0b76","title":"Case Trend Widgets","path":"/lrsiem/7.25.0/case-trend-widgets","children":[{"id":"ci_a9a93a768a8e2aed2ec87a9a5aea199aa5262848f4138864a4d94e2fee9a09d0","title":"Configure Case Trend Widget Settings","path":"/lrsiem/7.25.0/configure-case-trend-widget-settings","children":[]},{"id":"ci_3f4740e24876a56884fd403f3a47766a18511d27adddd96a2f9bb38df109f446","title":"Read Case Trend by Priority Charts","path":"/lrsiem/7.25.0/read-case-trend-by-priority-charts","children":[]},{"id":"ci_a24b87db6c85700894c02bf0b1356c5c53b482a99d23744031f7e89d5d76ca0c","title":"Read Case Trend by Status Charts","path":"/lrsiem/7.25.0/read-case-trend-by-status-charts","children":[]}]},{"id":"ci_734d420643869c12e8a165a4702c82980291ba6c913b86efdd9caf2f8608b8dc","title":"Open the Case Details View","path":"/lrsiem/7.25.0/open-the-case-details-view","children":[]},{"id":"ci_6459dd4716bc19b01c217019a3b41dfc8c902b1d4c59cb5145a4427e65ec3c52","title":"Separate Entities in Cases","path":"/lrsiem/7.25.0/separate-entities-in-cases","children":[]},{"id":"ci_73491ba21283fe6da2490d62b5d8051384f9f1e042e6a26b2ceaa9ba6245b0d9","title":"Work with Cases","path":"/lrsiem/7.25.0/work-with-cases","children":[{"id":"ci_019e532a7fd9bcba9e076b7e4e27a7bce9be460e6e2e00a6aa0a1fea439ceaa8","title":"Add Alarms to a Case","path":"/lrsiem/7.25.0/add-alarms-to-a-case","children":[{"id":"ci_4a290b5ac1047ad409fa545e17109d0bf9d6bd1a8768b9526c3774cfe78fcd94","title":"Update the Status of Alarms Associated with a Case","path":"/lrsiem/7.25.0/update-the-status-of-alarms-associated-with-a-case","children":[]}]},{"id":"ci_0f2d7baa0974562f6d9d9600eb23773f48f862e097a9f8e2ee14d8b76482fc24","title":"Add Files to a Case","path":"/lrsiem/7.25.0/add-files-to-a-case","children":[]},{"id":"ci_9ad02347c44eeaf1f46e74960bbfdab02f4494111ed8529f5f97a8138265c62f","title":"Add Logs to a Case","path":"/lrsiem/7.25.0/add-logs-to-a-case","children":[]},{"id":"ci_d927872b9c3796bced58fc04708331933dd8f9d61a98710f35b2261964667007","title":"Add Notes to a Case","path":"/lrsiem/7.25.0/add-notes-to-a-case","children":[]},{"id":"ci_5b5d39e20795c9bb5ea6b4dc8f7b9c53b34770ef94d60c02413f14f92cb5ec44","title":"Case Associations","path":"/lrsiem/7.25.0/case-associations","children":[{"id":"ci_56707e41ec2a142308b7fe37a041a398f6b0a0098719f1a67ea48fcdca89818b","title":"Add Case Associations","path":"/lrsiem/7.25.0/add-case-associations","children":[]},{"id":"ci_769685d05e670a5ff6ddb44c155e8dab607740703ef6e99e98e4fb8d77b70fad","title":"Remove Case Associations","path":"/lrsiem/7.25.0/remove-case-associations","children":[]}]},{"id":"ci_06616eb8edea6a3e11052274184b719bc740e0e2c7a529b52393b91bc59e6779","title":"Case Collaborators","path":"/lrsiem/7.25.0/case-collaborators","children":[{"id":"ci_6e4949aba3f90f6041cf95e4711898cbd753b34a387c5c9dbd26b6356048df79","title":"Assign Collaborators to a Case","path":"/lrsiem/7.25.0/assign-collaborators-to-a-case","children":[]},{"id":"ci_3325f34ab328dbd023412c45491e5c9086f716915bf74910f5b0e46e3ccb20fc","title":"Remove Collaborators from a Case","path":"/lrsiem/7.25.0/remove-collaborators-from-a-case","children":[]},{"id":"ci_cd9937e574497fd9f9fbb0fa02f145c19bba2515bd239f802dcea37977034928","title":"Transfer Case Ownership","path":"/lrsiem/7.25.0/transfer-case-ownership","children":[]}]},{"id":"ci_8dc0409c4ee0b260df597d1ab638f566cad5919ddc15e35b012880ac8b56ac18","title":"Case Tags","path":"/lrsiem/7.25.0/case-tags","children":[{"id":"ci_1ea4b64f283498a8b184a374b511261e14d6ed3405d00da1b14f49d4cde468a7","title":"Add Case Tags to a Case","path":"/lrsiem/7.25.0/add-case-tags-to-a-case","children":[]},{"id":"ci_486c1763db269b5115c913f8b37599794be88ca375f98d46d37435f4301fb29f","title":"Remove Case Tags from a Case","path":"/lrsiem/7.25.0/remove-case-tags-from-a-case","children":[]},{"id":"ci_91332c25a93a505b067cb76567122e57716e334029cbbf61bd43bd6ce5999345","title":"Use Case Tags to Filter Cases in Case Widgets","path":"/lrsiem/7.25.0/use-case-tags-to-filter-cases-in-case-widgets","children":[]},{"id":"ci_d85e86fff2aca9853623c3909aa019dcb830c7eadbdc9ea0ce91dfd5ec75e40a","title":"Use the Case Tag Library","path":"/lrsiem/7.25.0/use-the-case-tag-library","children":[]}]},{"id":"ci_2b927d4a2c04c5258845f8357c5cce8b16180170eb7f6be6880976e16234f7fc","title":"Close Cases","path":"/lrsiem/7.25.0/close-cases","children":[]},{"id":"ci_15d219bdea294193906dee2bfa4d7dd66ada31764f24a18b66ef260987675865","title":"Create New Cases","path":"/lrsiem/7.25.0/create-new-cases","children":[]},{"id":"ci_f8a22733bd56e2a9c64cc9126af3df451c3b75955fa36a8a1d37756ac1cffb0b","title":"Delete Logs, Alarms, and Files from Case Evidence","path":"/lrsiem/7.25.0/delete-logs-alarms-and-files-from-case-evidence","children":[]},{"id":"ci_fd2673d53e8a42f163a9262af1aaf5140bbd2824cc839530954b77c4654d09a9","title":"Edit and Delete Notes in Case Evidence","path":"/lrsiem/7.25.0/edit-and-delete-notes-in-case-evidence","children":[]},{"id":"ci_e4404a7fc7d4b27f6dd15175ff7b18846a26d4494bda94d89ddc7fe0cb651a06","title":"Edit Case Names, Priorities, Due Dates, and Summaries","path":"/lrsiem/7.25.0/edit-case-names-priorities-due-dates-and-summaries","children":[]},{"id":"ci_bd61e80bd98c1ddf5aab9ba2506620988fddacec42cb39be1e4be4ae7e688074","title":"Filter Cases","path":"/lrsiem/7.25.0/filter-cases","children":[]},{"id":"ci_38b1c76d0b1bdeef57bbd31897d8b437564f040f0e9dc36959b0724109cbeedf","title":"Pin Important Evidence","path":"/lrsiem/7.25.0/pin-important-evidence","children":[]},{"id":"ci_5d6d441b26912d4960707aaaae7217743c649c39f846a566791ee97f6455e7a1","title":"Reopen Cases","path":"/lrsiem/7.25.0/reopen-cases","children":[]},{"id":"ci_68b73ba54ea8d3403a0980c0481d2ce33f9a87668ade392cfa49d0c3e750fd12","title":"Unpin Evidence","path":"/lrsiem/7.25.0/unpin-evidence","children":[]}]},{"id":"ci_500d9a5b967321dbdd77cf85d07b73dbec58fc63ea235bfa7eaec516ebe1de3b","title":"Work with the Current Case Panel","path":"/lrsiem/7.25.0/work-with-the-current-case-panel","children":[]}]},{"id":"ci_2335e9f493c15592c4029ef9a4660ad369fd68e1d47f3a5d6bd58b00fd28a3e4","title":"Cloud to Cloud Log Collection","path":"/lrsiem/7.25.0/cloud-to-cloud-log-collection","children":[{"id":"ci_8cdc41d74a6cff00bcb7553b9c950a56f3016d91a876e42576afe7447045f045","title":"Configure an Open Collector Log Source","path":"/lrsiem/7.25.0/configure-an-open-collector-log-source","children":[]},{"id":"ci_355532092645daddd9e891093ffeebf475f858cda9d72ab1e722f9a1b8f32185","title":"Add a Log Source Configuration","path":"/lrsiem/7.25.0/add-a-log-source-configuration","children":[]},{"id":"ci_bcc948604d16d3a41751e50aab862a1fc7011bbaa367ed22d9972541485b0efb","title":"Use the Log Source Configuration Grid","path":"/lrsiem/7.25.0/use-the-log-source-configuration-grid","children":[]},{"id":"ci_c74a5ad309a2b15086f93a1d8ab31bd1f5ddfbdee7d1461d8b3eeef0d6dbfaca","title":"Edit a Log Source Configuration","path":"/lrsiem/7.25.0/edit-a-log-source-configuration","children":[]},{"id":"ci_408c20b36e97c463d1eb39122df980542e5201a41172ca57786b32db48154b8b","title":"Delete a Log Source Configuration","path":"/lrsiem/7.25.0/delete-a-log-source-configuration","children":[]}]},{"id":"ci_19378400223c0efec610e89cb45a8529b92adcacd7cbaae81613e4f02ab06123","title":"Dashboards","path":"/lrsiem/7.25.0/dashboards","children":[{"id":"ci_497ee18713c5e09d7d4660dc1bfa653039c8feb8a29e2121c92702f0a1424459","title":"Create New Dashboards","path":"/lrsiem/7.25.0/create-new-dashboards","children":[]},{"id":"ci_779a6795db687e635ebfc00f5256973b84f4dccb4201f0749148f19cfc3dfab8","title":"Clone Dashboards","path":"/lrsiem/7.25.0/clone-dashboards","children":[]},{"id":"ci_9529d5636880448e51273f196530d18377931d1d692c649bca19fe4bac244ac3","title":"Import and Export Dashboards","path":"/lrsiem/7.25.0/import-and-export-dashboards","children":[]},{"id":"ci_1c38273d58901730489c49f61b3ac6d1f30867571ee64752f3a3899647853d7a","title":"Change Dashboards","path":"/lrsiem/7.25.0/change-dashboards","children":[]},{"id":"ci_9bca287137fcf4d4a94383284d9c496dc74b5e4d5c78d7e0057b5df9517a6052","title":"Revert Changes","path":"/lrsiem/7.25.0/revert-changes","children":[]},{"id":"ci_e18019ce92170ebdf05cbb9d30b9d3df9d2c185b6b8b3062ac434c0615cb266a","title":"Print Dashboards","path":"/lrsiem/7.25.0/print-dashboards","children":[]},{"id":"ci_454d51e1658ab6592c3e40367d18dc78cfa0dec02c79c5ae82d53d00ec7ef75a","title":"Save Dashboard Changes","path":"/lrsiem/7.25.0/save-dashboard-changes","children":[]},{"id":"ci_e9b1f4f8a63f3933f06a873e12eb7b4c149cffb3af44f8f601d95366ba8fa5d3","title":"Filter Data with Lucene Searches","path":"/lrsiem/7.25.0/filter-data-with-lucene-searches","children":[{"id":"ci_c31e070c80076511d377a606463038c4b39a0e397be7578d135943f03eb250f0","title":"Lucene Search Syntax","path":"/lrsiem/7.25.0/lucene-search-syntax","children":[{"id":"ci_fe91840a5c48e06157dd893aa55130a14ff83844b76f2058f07123fab27284a6","title":"Basic Queries","path":"/lrsiem/7.25.0/basic-queries","children":[]},{"id":"ci_01c6b6bf75d3e8546abe5effabb4cc0e54e688b35bfffb27671880f2c86ca98d","title":"Complex Queries","path":"/lrsiem/7.25.0/complex-queries","children":[]},{"id":"ci_c4202f4a56029194b2622c575801b7cf0db94643cb9af1ad7d1a3aaeae0ea225","title":"Troubleshoot the Lucene Search","path":"/lrsiem/7.25.0/troubleshoot-the-lucene-search","children":[]},{"id":"ci_20fddbd4f8602fe007001dc1c180d4c13ff2881e9eb95fe1cb432022a01f0db2","title":"Wildcard Queries and Fuzzy Matches","path":"/lrsiem/7.25.0/wildcard-queries-and-fuzzy-matches","children":[]},{"id":"ci_3e12a91c6bcef937687987061b913f7a449113df209356b25b7ae83ed0fdba83","title":"Metadata Fields","path":"/lrsiem/7.25.0/metadata-fields","children":[{"id":"ci_1f645a4eca7d5c90d04d9597da34548f4f984401250cd7b0baf7c96ff8111014","title":"Applications","path":"/lrsiem/7.25.0/applications","children":[]},{"id":"ci_e675dfdbd4780a291a210ae4f9c3de16fc059747849edf7a5aa37e25c288759a","title":"Classification","path":"/lrsiem/7.25.0/classification","children":[]},{"id":"ci_b363bc9ee524f8dfdd75197a110901e501eaca1aeac06b551cbe76bb7b2894d4","title":"Identity","path":"/lrsiem/7.25.0/identity","children":[]},{"id":"ci_cc8b0ca8f6d90e2a207bcbd4ca8eab3bf987d6da6f97503f7b8765760bc0a915","title":"KBytes and Packets","path":"/lrsiem/7.25.0/kbytes-and-packets","children":[]},{"id":"ci_cfe4899e6d5cb377561773351f2ea0ce2e0d272f26d8136a23e783f371adc36d","title":"Location","path":"/lrsiem/7.25.0/location","children":[]},{"id":"ci_034ec37277561320985c4570d45850bb9e41071cd23b2e11e06039934d492b4f","title":"Log","path":"/lrsiem/7.25.0/log","children":[]},{"id":"ci_5e0f8d6231ed20ea75854a35f403ea84e1138661caa620b380485309d314facb","title":"Network","path":"/lrsiem/7.25.0/network","children":[]},{"id":"ci_31beac87d90db114838df7a7626844bb8ab02a883d0f4230d1e415a64998f770","title":"Host","path":"/lrsiem/7.25.0/host","children":[]}]}]},{"id":"ci_825da863ecef1e7646916596973839ac9d40abacba7b8f516f7f0c231809cdb6","title":"Supported Lucene Fields by Dashboard Type","path":"/lrsiem/7.25.0/supported-lucene-fields-by-dashboard-type","children":[]}]}]},{"id":"ci_35ea2bf96c7efcb99da1e87e7707de95920935c1f5f63bf6fae1ab61e4013aa8","title":"Data Indexer (DX) Dashboards","path":"/lrsiem/7.25.0/data-indexer-dx-dashboards","children":[]},{"id":"ci_21944ed3d78695ab3cb860bb3f9667fa74f42a61ad209ac3e85c15d2020c84a6","title":"Lists in Web Console","path":"/lrsiem/7.25.0/lists-in-web-console","children":[{"id":"ci_4c6075be9db2d448a564ccfa610c4f40a1210fae061a90704cc6283109082840","title":"Add List Items in the Web Console","path":"/lrsiem/7.25.0/add-list-items-in-the-web-console","children":[]},{"id":"ci_12ba4664368c53ffec126f707c437f1e4933d60683976905abbddf0b6f5e495a","title":"Add Related Lists","path":"/lrsiem/7.25.0/add-related-lists","children":[]},{"id":"ci_992737a20f927901b184552ac3cadcc7894ca7c3652f38386188ac28afc201d4","title":"Create a List in the Web Console","path":"/lrsiem/7.25.0/create-a-list-in-the-web-console","children":[]},{"id":"ci_efee38a1712901e303d6b8f8fcfb61b30f84879eaa13256b93326ee3f5230778","title":"Filter and Sort Lists","path":"/lrsiem/7.25.0/filter-and-sort-lists","children":[]},{"id":"ci_95ec4a22836861359d9094711e76b2fcd1462817c880c2d1863fe45da9ade164","title":"Remove List Items in the Web Console","path":"/lrsiem/7.25.0/remove-list-items-in-the-web-console","children":[]},{"id":"ci_92c5a8f38bf6a159bd75544ca4cd69e5b0e06a53309f57d64f737e5730727d90","title":"Select and View a List","path":"/lrsiem/7.25.0/select-and-view-a-list","children":[]},{"id":"ci_4055f771915d7dbfeadc710879b57c5b73b68e579eed05d74bdb43ab426f5bfc","title":"View Retired Lists","path":"/lrsiem/7.25.0/view-retired-lists","children":[]}]},{"id":"ci_5bf41af11172d3fe7796eaf99904063750e19c15b8d65b24e7eed0e9422bb6f5","title":"Log Collection in Web Console","path":"/lrsiem/7.25.0/log-collection-in-web-console","children":[{"id":"ci_3f3d9f7a99757b0c2afa8457aa5b2cf237966fb60ee9fabef0e5dcc91a5e80d8","title":"Agents Grid","path":"/lrsiem/7.25.0/agents-grid","children":[]},{"id":"ci_3db74da9f3d804cc59b9a860dd6ac3209f4af0eba4cdf574d92b553b85b835f1","title":"Beats Grid","path":"/lrsiem/7.25.0/beats-grid","children":[]},{"id":"ci_c48f1b257e6ba247d431b0733f0d1f0607dae2fcc109951fce739a26e1ddaf2a","title":"Log Sources Grid","path":"/lrsiem/7.25.0/log-sources-grid","children":[]},{"id":"ci_7410f388321405eaedf6c07e737946a54308429c7b9ba91a37d64350d511ca7e","title":"Open Collectors Grid","path":"/lrsiem/7.25.0/open-collectors-grid","children":[]},{"id":"ci_e8ab15a8ba0363f84681e8e9d2e424dbddb086d3073f4f797600587ede0bc6b3","title":"Add a New Beat in Web Console","path":"/lrsiem/7.25.0/add-a-new-beat-in-web-console","children":[]},{"id":"ci_73572a3f946c2d1518dd73c71b13be4c9b8a970c0dadcaf04a997c52f7e304fd","title":"Add a New Log Source in Web Console","path":"/lrsiem/7.25.0/add-a-new-log-source-in-web-console","children":[]},{"id":"ci_cdccb9ea22e4552bbaf7e3740fbf41298ec78887e4ad38b973560a93f81570d5","title":"Manage Pending Log Sources","path":"/lrsiem/7.25.0/manage-pending-log-sources","children":[]},{"id":"ci_df1f59d0b472b07eba5352e49e6fb1bf145abe75a70527080abac0ef0cb96ed6","title":"Retire Beats","path":"/lrsiem/7.25.0/retire-beats","children":[]},{"id":"ci_0b8085eb67c81c77894af797ef310153643d681c0301b5a78a965f63121ae277","title":"Retire Open Collectors","path":"/lrsiem/7.25.0/retire-open-collectors","children":[]}]},{"id":"ci_ce93de3fca1911a2d674231cbaaac4bd67385c4b87b07a2b603fb3d947f079fd","title":"Playbooks","path":"/lrsiem/7.25.0/playbooks","children":[{"id":"ci_63c15a0e697daf361068bc6baf86199b44e5aed8d010b23c56786ed467cb2546","title":"Create Playbooks","path":"/lrsiem/7.25.0/create-playbooks","children":[]},{"id":"ci_d0c369c990c06d12c6dbe6f7b39e29ae449e887f841936cbfecdeac6820ad7e8","title":"Import Playbooks","path":"/lrsiem/7.25.0/import-playbooks","children":[]},{"id":"ci_3a1a28d005bd15e54e8de14f12d35f53bc806cdd9edacf75839823731e7765e0","title":"Work with Playbooks","path":"/lrsiem/7.25.0/work-with-playbooks","children":[]},{"id":"ci_00eccf9543e36b73b8a62b214baaf8f06cb3f37c693dc79db0b912edaf931f20","title":"Add Playbooks to a Case","path":"/lrsiem/7.25.0/add-playbooks-to-a-case","children":[]},{"id":"ci_bb88df35687e535cd9c974deb89f35371e27bca05e04f842e52dcf38aa4e5497","title":"Work with Playbooks in a Case","path":"/lrsiem/7.25.0/work-with-playbooks-in-a-case","children":[]},{"id":"ci_ad4dfa7feb160f8e8afc86b19a18c3cff18bf841859fd31c63452a8cb873828d","title":"Procedures List Widget","path":"/lrsiem/7.25.0/procedures-list-widget","children":[]}]},{"id":"ci_8cbf0ed5f08adb5270f770d3a2643be420e3ee1a165842b23767df1f0d3311da","title":"Reports","path":"/lrsiem/7.25.0/reports","children":[{"id":"ci_a3d1f62286ea01f4150de3659f4e36b962204b0fb46f250f5493ec28f5b6701a","title":"Completed Reports Widget","path":"/lrsiem/7.25.0/completed-reports-widget","children":[{"id":"ci_54a8e3f3dfd352f1e3c414ce50dc721158e0291925a7cd6cf915da1e90aa1fc4","title":"Configure Completed Reports Widgets","path":"/lrsiem/7.25.0/configure-completed-reports-widgets","children":[]}]},{"id":"ci_aa0338a029de0cda3684b7478ec5f1f18bec29190587405a331316cccf79b170","title":"Download Reports from the Web Console","path":"/lrsiem/7.25.0/download-reports-from-the-web-console","children":[]},{"id":"ci_893c702cf42a2b46f64c558c1ec776338d63ec1d4c4d19346ce3be568a7391dc","title":"Filter Report Packages on the Reports Grid","path":"/lrsiem/7.25.0/filter-report-packages-on-the-reports-grid","children":[]},{"id":"ci_4066e200b46646e78409a2fc5d898c99fc7de3a3c0da1c7ef62a47aad2140591","title":"Pin and Resize Reports Grid Columns","path":"/lrsiem/7.25.0/pin-and-resize-reports-grid-columns","children":[]},{"id":"ci_95544bef49716ef2ba88429a5bc966a8565e1b2c525882f416f256f8cf46506c","title":"Run Searches from Report Filter Criteria","path":"/lrsiem/7.25.0/run-searches-from-report-filter-criteria","children":[]},{"id":"ci_4d351b0cede9a75aae15bfddfb118045cc63c413e1f1b539e49afc1ed2cde38f","title":"Sort Content on the Reports Grid","path":"/lrsiem/7.25.0/sort-content-on-the-reports-grid","children":[]},{"id":"ci_2c50892604c478c486c65aa1b2f85aaca6982e3b812b7994fe7bee0e6f8b4164","title":"View Package and Reports Details in the Inspector","path":"/lrsiem/7.25.0/view-package-and-reports-details-in-the-inspector","children":[]}]},{"id":"ci_e25039fb4d15be1ffce4e926c541b07ac0d70b8ee04b47ebd68ef20035a804b1","title":"SecondLook - Web Console","path":"/lrsiem/7.25.0/secondlook-web-console","children":[]},{"id":"ci_0a6bc02557f4ffa900b02f3e84911d66b46dc47db67d2f04c5b699f99bb0a37b","title":"Single Sign-On","path":"/lrsiem/7.25.0/single-sign-on","children":[{"id":"ci_f65acf6577b4af769bd6c54a70431bb6cf7e2d724ee0f1dc98efe3fc4db3115c","title":"SSO Known Issues and Recommendations","path":"/lrsiem/7.25.0/sso-known-issues-and-recommendations","children":[]},{"id":"ci_72bbbf33dc399a019dffd9bd6802076f0636f02bd613d0207ed92fd03805a44e","title":"SSO User Auto-Provisioning","path":"/lrsiem/7.25.0/sso-user-auto-provisioning","children":[]},{"id":"ci_df59f0f519963455de0099fa190235566a7ca16a7aea86c1e1f57144d15d3ad9","title":"SSO Configuration","path":"/lrsiem/7.25.0/sso-configuration","children":[{"id":"ci_80af209f1eaa83e6cc42d9f84e44434148fead4c1f9ac6b0ed43e180f51c873b","title":"Supported Identity Providers","path":"/lrsiem/7.25.0/supported-identity-providers","children":[{"id":"ci_6d558cb3eb419b961a6fab4d67aca76090f82fe9a473fef50de21cb8dbb07159","title":"Configure SSO with Okta","path":"/lrsiem/7.25.0/configure-sso-with-okta","children":[]},{"id":"ci_e2a4d6db58aab0063de28dab562975302405a46297f7d0fb09d9b41a141d6904","title":"Configure SSO with Azure AD","path":"/lrsiem/7.25.0/configure-sso-with-azure-ad","children":[]},{"id":"ci_df5dd9bce2042fa39b0606bd28a8942cc21b9b4d09c98bc08bfb9f638ee78a93","title":"Configure SSO with PingOne for Customers","path":"/lrsiem/7.25.0/configure-sso-with-pingone-for-customers","children":[]},{"id":"ci_98f9f5f24e52693d13e06425cf3cddec85462cdff2c7a79ae063a05b22790b4c","title":"Configure SSO with PingOne for Enterprise","path":"/lrsiem/7.25.0/configure-sso-with-pingone-for-enterprise","children":[]}]}]}]},{"id":"ci_1d7c0e7b6a897d083225a27757613c85e8fe6d3681008b63cd441ef8ab573c2e","title":"TrueIdentity","path":"/lrsiem/7.25.0/trueidentity","children":[{"id":"ci_6af9722d7e8986922ea37881258f83e18d2b11798b804d5776edc76dd1b2bf12","title":"Work with TrueIdentities","path":"/lrsiem/7.25.0/work-with-trueidentities","children":[]}]},{"id":"ci_6aa05c0e5841ea609a73c0427e6ddbf55c55b2f5593ee3902fb118de1052bdc3","title":"User Interface","path":"/lrsiem/7.25.0/user-interface","children":[{"id":"ci_6aecc752ea9217f70361b5cab6baa8e009c1322304129466f7595d1288bdcfd6","title":"Resource Center","path":"/lrsiem/7.25.0/resource-center","children":[]},{"id":"ci_e811e0feb0d013c28249201ede5807dae249c3acbcd88987af576b22d2c3617a","title":"Pages","path":"/lrsiem/7.25.0/pages","children":[{"id":"ci_c3ae429482b3b80220064264f0776a2777b6eb732194b7ec415edb5dcd132187","title":"Alarms Page","path":"/lrsiem/7.25.0/alarms-page","children":[]},{"id":"ci_0108094ccda997a13b3762f4dda28b1a10ebfb0dd11f3ea121f6568c61a23ae3","title":"Analyze Page","path":"/lrsiem/7.25.0/analyze-page","children":[]},{"id":"ci_7bee83f46325833328a340a665423362ea0c464c0b2bc93df9980890b462b12a","title":"Cases Page","path":"/lrsiem/7.25.0/cases-page","children":[]},{"id":"ci_814ee9838c8cb59ab666a07b6cac6fb534820e4ad325d8ff7949a3301c3baebe","title":"Dashboards Page","path":"/lrsiem/7.25.0/dashboards-page","children":[]},{"id":"ci_4ae50db762626dc7a1d9ca3da35903a96a16f0138c9578141526975e783ae26e","title":"Host/User Detail Page","path":"/lrsiem/7.25.0/host-user-detail-page","children":[]},{"id":"ci_818169545f37dd947d069e9e8b0a9304e0d26bf8ddcc649725b7b5dbfa74f8e8","title":"Lists Page","path":"/lrsiem/7.25.0/lists-page","children":[]},{"id":"ci_b162833bf7b4c8880fc961cb1e0953b22656c7bd2939bc7375900650f0b68faf","title":"Reports Page","path":"/lrsiem/7.25.0/reports-page","children":[]},{"id":"ci_740ece4be0bbc44d906bc2e70730c1a923cf21d14b566916f2b487c75d9ab79a","title":"Searches Page","path":"/lrsiem/7.25.0/searches-page","children":[]},{"id":"ci_00681bea5acd77781ad1a6d99edf4a6d915496ecbbcbd71e9abb67d748204a5b","title":"TrueIdentity Page","path":"/lrsiem/7.25.0/trueidentity-page","children":[]}]},{"id":"ci_391443e3575bfa7e73c8d19ff310d4c60db6820925344b66b11d0c4d22a5f34c","title":"Panels","path":"/lrsiem/7.25.0/panels","children":[{"id":"ci_4150211ab805e412a6c98f4ffa1adfa43676aeb66aca903b8d006bb11c6a7a29","title":"About the Analyzer Grid","path":"/lrsiem/7.25.0/about-the-analyzer-grid","children":[]},{"id":"ci_ba8fa504c5ba11adcb32db13553a90ad68234d992c4f77458749a025fed2be82","title":"Current Case Panel","path":"/lrsiem/7.25.0/current-case-panel","children":[]},{"id":"ci_b0fca1b2907114c176cf3595585ba84f2e5055a27935db710d06c835e9d3c099","title":"Inspector","path":"/lrsiem/7.25.0/inspector","children":[]}]},{"id":"ci_9e251ee9c20fa366a46bc97c728ac5cbc8a8c2f2b7b0feedd66ab807fb155678","title":"Tools","path":"/lrsiem/7.25.0/tools","children":[{"id":"ci_bb2829484fbd11f540913ddadad311a53f8da244a7d34f53fc21988687b1c773","title":"About Widgets","path":"/lrsiem/7.25.0/about-widgets","children":[]},{"id":"ci_783aabbe7aaf02b820cfa8cd599167e7061e35cd213187b8ae4381acf1fd60ea","title":"Breadcrumbs","path":"/lrsiem/7.25.0/breadcrumbs","children":[]},{"id":"ci_f353d9dcadab72f5329fec5f05f9072e7a3e4c9111208c6d3bb038d3e6e054b1","title":"Hotkeys","path":"/lrsiem/7.25.0/hotkeys","children":[]},{"id":"ci_5fbd182e993e4e79772feaaaec91a5460ecf4748fcedab1d5b3ef2a0df53a3d5","title":"Icons","path":"/lrsiem/7.25.0/icons","children":[]},{"id":"ci_0e84274db17ff96bba00bcfbe48caf784b656c953498223c7e830109c98f6d1e","title":"Search Tools","path":"/lrsiem/7.25.0/search-tools","children":[]},{"id":"ci_80e1e1bde7a30d239530d32f09e969930b0ae3f3ad670dbc3d419476bb76b66f","title":"Taskbar","path":"/lrsiem/7.25.0/taskbar","children":[]},{"id":"ci_924fa7c4d02d2500734de1c6937f5781e9df3ecb308eb837b572236cca360783","title":"Typeahead Filters","path":"/lrsiem/7.25.0/typeahead-filters","children":[]}]}]},{"id":"ci_259ab5b38c0465e230d049b52ba61dd75eb50833232f67e3d03020adf82bedfb","title":"User Settings","path":"/lrsiem/7.25.0/user-settings","children":[{"id":"ci_3bf9aac997c6c1ed5a1f4a7b00e8b0d922524c44d2d1880323e91b80dbaf1d13","title":"Access Web Console Help","path":"/lrsiem/7.25.0/access-web-console-help","children":[]},{"id":"ci_4a2da5da65e72967558a12438e7fa23e0f00cad8f9917251950516bcac88c1d8","title":"Change the Default Web Console Search Timeout Period","path":"/lrsiem/7.25.0/change-the-default-web-console-search-timeout-period","children":[]},{"id":"ci_80bc98671b1eeb7328669da52446930c80ce48d967153f353f54c76d23e0e841","title":"Change the Web Console NGINX Configuration to Modify Available Ciphers","path":"/lrsiem/7.25.0/change-the-web-console-nginx-configuration-to-modify-available-ciphers","children":[]},{"id":"ci_60882ecfddb5c76bf07788f45355bda5e0ee05419d2a2db2e5387642f8758b9a","title":"Change Web Console Password","path":"/lrsiem/7.25.0/change-web-console-password","children":[]},{"id":"ci_8aab9810df1b5b841e46add78be06b6948418d4a082dd81c815f3a8b7ca0102c","title":"Configure Navigation Warning","path":"/lrsiem/7.25.0/configure-navigation-warning","children":[]},{"id":"ci_6ea5272c55c1e414ea2ade4fce0aa7975f74385351d7c584ac019f55ec250983","title":"Configure Search Results","path":"/lrsiem/7.25.0/configure-search-results","children":[]},{"id":"ci_012771a75acd108b466b5aae356c4d1f7a165bb8b92664060b955f6b1efb3848","title":"Select Query Location","path":"/lrsiem/7.25.0/select-query-location","children":[]},{"id":"ci_c862583dd05c7063218edfbee5f62e181abc1f5a8dfa108cd1f9e2dae345165e","title":"Set the Date Time Format","path":"/lrsiem/7.25.0/set-the-date-time-format","children":[]},{"id":"ci_d2e8d738cb29655f99ac0f819d77d25897b4d8b7814d5d67405d1c158b9883ae","title":"Set Your Drilldown Preference","path":"/lrsiem/7.25.0/set-your-drilldown-preference","children":[]},{"id":"ci_31935cd48b2fcc0008c80253f2733a6a38f83e6edc47822ce82c2d5a7e656963","title":"Switch Between Day and Night Modes","path":"/lrsiem/7.25.0/switch-between-day-and-night-modes","children":[]}]},{"id":"ci_370244f7230551887558089a228b282dd5c9d4a3c5cfd33fc43310b9c7e0069d","title":"Search","path":"/lrsiem/7.25.0/search","children":[{"id":"ci_116cc403f7d9bf277566869e0eac5b6a3dc8604b2997a21bdeb052174aaca607","title":"Manage the Searches Page","path":"/lrsiem/7.25.0/manage-the-searches-page","children":[]},{"id":"ci_b9bd7fedcf3f2809e69d3803b56f8da0103fb5ea5c854b807710876012513f8f","title":"Run Searches from the Searches Page","path":"/lrsiem/7.25.0/run-searches-from-the-searches-page","children":[]},{"id":"ci_7c66738faad9ac8c44338230b0b965999c6b98987cdfa3e1a6dc7f3cf8def5bc","title":"Use Search","path":"/lrsiem/7.25.0/use-search","children":[]},{"id":"ci_64916b56eaf9cb06b30e914664505be7070681c83da38a87c0ca73a31df338e6","title":"Save Searches","path":"/lrsiem/7.25.0/save-searches","children":[]},{"id":"ci_61a8ae6904c5eab66e6c131fdf7ee7008fd8db6a25f12fafc456d864da839352","title":"Perform Details Searches (User/Host)","path":"/lrsiem/7.25.0/perform-details-searches-user-host","children":[]},{"id":"ci_77578990cae317a2fb4173181d50d007d9a72befc679e2adf1ca4e2067a89569","title":"Perform Pivot Searches","path":"/lrsiem/7.25.0/perform-pivot-searches","children":[]},{"id":"ci_9d1c64117cafc77fd38596f2899efa2997bd9ba102dbe7dfb4928a31822eca25","title":"Search Tiers (Hot/Ultra-Warm/Warm/Cold)","path":"/lrsiem/7.25.0/search-tiers-hot-ultra-warm-warm-cold","children":[]}]},{"id":"ci_cbaff661a909daf2fe07d914d0ee3065d7ccf681fc2ab85a701483899996d511","title":"Widgets","path":"/lrsiem/7.25.0/widgets","children":[{"id":"ci_f54dc21d26f17a017962ded31673cef60a50328987898d15ab3fe27e138eacd3","title":"Threat Activity Map","path":"/lrsiem/7.25.0/threat-activity-map","children":[{"id":"ci_172a1978020c15b3a02b7b30003c453d8f9bc24921c20c2982469dad36bf0968","title":"Configure Threat Activity Map Widget Settings","path":"/lrsiem/7.25.0/configure-threat-activity-map-widget-settings","children":[]},{"id":"ci_2cb35e7e28296092e3b8f632e22b34a366f4ed3cd2bda666d0dc64f556ceb395","title":"Drill into Threat Activity Map Node Data","path":"/lrsiem/7.25.0/drill-into-threat-activity-map-node-data","children":[]},{"id":"ci_bd8706a496dd8f4c0b17c853ebbebfc0ad47966009569de8567c97127b385afb","title":"Troubleshoot Threat Activity Map","path":"/lrsiem/7.25.0/troubleshoot-threat-activity-map","children":[]},{"id":"ci_b203a62e6033077c76a436f274b9c56db0326db271bbce3fd230351f286ab1c6","title":"Zoom In and Out on the Map","path":"/lrsiem/7.25.0/zoom-in-and-out-on-the-map","children":[]}]},{"id":"ci_0d680799b89c6f746a35fb6469d7b290a1c1da782b467e3294672f14a7143d75","title":"Customize Dashboard Widgets","path":"/lrsiem/7.25.0/customize-dashboard-widgets","children":[{"id":"ci_346a4180f7228f086a5e309fde3a1ff08f19a26790e2500cece5defdd5b58715","title":"Add Widgets","path":"/lrsiem/7.25.0/add-widgets","children":[]},{"id":"ci_d9f1733d32f9c8b6ab3434af4d0a44094d1d8c75458ec57976bfa4c0a17ecace","title":"Configure Widget Settings","path":"/lrsiem/7.25.0/configure-widget-settings","children":[]},{"id":"ci_459b40100b38b7d2be46303a6effdde7a0ff970a75224e3b18f529a6c2ce537b","title":"Copy Widgets","path":"/lrsiem/7.25.0/copy-widgets","children":[]},{"id":"ci_d6a071676a4dcd0126e37ac830c5fd68fb5f2949cdb772f0dfe6de8f8b9ed0d3","title":"Delete Widgets from a Dashboard Layout","path":"/lrsiem/7.25.0/delete-widgets-from-a-dashboard-layout","children":[]},{"id":"ci_2860a68f412032c36132f069d04c75f3949fb0513746943eab803fb3ac2ab42e","title":"Move Widgets","path":"/lrsiem/7.25.0/move-widgets","children":[]},{"id":"ci_2fe9292978079621da8c500abbfb65b2695f5ccdce3effdb055555ea2f480cbe","title":"Rename Widgets","path":"/lrsiem/7.25.0/rename-widgets","children":[]},{"id":"ci_c8a90e5a26c888b88ab3b5dbf1fe1cb11bc28acc35c3da9d41d81ffdb43b903a","title":"Resize Widgets","path":"/lrsiem/7.25.0/resize-widgets","children":[]}]},{"id":"ci_1936f6694632783ddfcbf751fbbd74655d53266f25135eef2a1d83e38c1864fc","title":"Component Status Widget","path":"/lrsiem/7.25.0/component-status-widget","children":[]},{"id":"ci_50bfc4785e6ef5da83589a20c2e7f9d814cdeef4c5b67f33b1146ec452c9b36c","title":"Current Processing Rate Widgets","path":"/lrsiem/7.25.0/current-processing-rate-widgets","children":[]},{"id":"ci_747f8b945aa08131f5c52ef2ee67234445be6b67ba2d886852b00abfbb6a1812","title":"Data Processing Trend Widgets","path":"/lrsiem/7.25.0/data-processing-trend-widgets","children":[]},{"id":"ci_b6a4c9ebe03a83599e0f150ae8d2e3e0797d809c34c529674a8cef885775f8ad","title":"Metric Widget","path":"/lrsiem/7.25.0/metric-widget","children":[{"id":"ci_5dce1880c3ca0ed3758c900be4482d4c946cffac2ac1beb0c0ef8d5906d30bfb","title":"Configure Metric Widget Settings","path":"/lrsiem/7.25.0/configure-metric-widget-settings","children":[]}]},{"id":"ci_ef2a4d4b0dde9a92f10f2067d2ce7dafb532d57e6e9fbc4bc682fb79ec3e70ef","title":"Node-Link Graph Widgets","path":"/lrsiem/7.25.0/node-link-graph-widgets","children":[]},{"id":"ci_81da295546c54aeadaa95d52b34377cba473b27bbd5b2095fcd4af992c65577a","title":"System Database Usage Widget","path":"/lrsiem/7.25.0/system-database-usage-widget","children":[]},{"id":"ci_1e20680a13442e350ebd8a4409b24382e0796b505cc852c432b740d1587c56f9","title":"Timeline Widget","path":"/lrsiem/7.25.0/timeline-widget","children":[]},{"id":"ci_e2a471b8c04af596b3b503ece85dbe64b6c415bb85c46b365ed9d6aaaeb64bf7","title":"TopX Widgets","path":"/lrsiem/7.25.0/topx-widgets","children":[{"id":"ci_556233ed587403782dcdd9111f36198684afb32e9f1e770d2a3387393ceb6de5","title":"Configure TopX Widget Data Settings","path":"/lrsiem/7.25.0/configure-topx-widget-data-settings","children":[]},{"id":"ci_98583c55e3b12a0f9e75baa8b9db0e95d271d502eb20c0c05670f7b657b78334","title":"Configure TopX Widget Graph & Options Settings","path":"/lrsiem/7.25.0/configure-topx-widget-graph-options-settings","children":[]},{"id":"ci_48a89924e89672b13e24bc5e62e538c8af2a9d3707afa7162b9ee686c1f3456c","title":"Drill into Chart Metadata from the Dashboards","path":"/lrsiem/7.25.0/drill-into-chart-metadata-from-the-dashboards","children":[]},{"id":"ci_8f78bad7187f18a746ca6688e868663765209c52c3da5d845c1c2dcd45a2f421","title":"Filter Data by Time Range on the Dashboards and Analyze Pages","path":"/lrsiem/7.25.0/filter-data-by-time-range-on-the-dashboards-and-analyze-pages","children":[]},{"id":"ci_5abfe21d9ff928566c45484974c3992c59c67430b09a62413b18cd07fac68e62","title":"Resize TopX Data Labels on Bar Charts","path":"/lrsiem/7.25.0/resize-topx-data-labels-on-bar-charts","children":[]}]}]}]},{"id":"ci_ae1b12aec8044542b2839f3d3a96d96a6f32f1a3a943184e6556ebc520e0a3c1","title":"LogRhythm Schema Dictionary and Guide","path":"/lrsiem/7.25.0/logrhythm-schema-dictionary-and-guide","children":[{"id":"ci_2a14c9981ff624fbcae2a9761e1fdec386a59c19a2e703e9993c217d0fa3fc1d","title":"Application Tab","path":"/lrsiem/7.25.0/application-tab","children":[{"id":"ci_c1d87156219c5325bc96a63d6a359c55dd595da7be28910d90118294753dce1e","title":"Action [7.2]","path":"/lrsiem/7.25.0/action-7-2","children":[]},{"id":"ci_8c74b3e14fe80f307f2ed5762a7d127e470e9e549dc12726a4ce658f087696f6","title":"Amount","path":"/lrsiem/7.25.0/amount","children":[]},{"id":"ci_be9f176beb076896a3fbf2b7f85ea7427a5a47d12d3c4e7289d2bbc6eb29a4b3","title":"Command","path":"/lrsiem/7.25.0/command","children":[]},{"id":"ci_ed107b88d377cb12591e79d3830e570534ed6185af32228ea99eb3468732c9e2","title":"Hash [7.2]","path":"/lrsiem/7.25.0/hash-7-2","children":[]},{"id":"ci_8577611b05dfd955444daa602523812e1769392057f65caab87c5fd4a5dc3a34","title":"IANA Protocol Name","path":"/lrsiem/7.25.0/iana-protocol-name","children":[]},{"id":"ci_660405554d21aea18b00e9e9db3091aea4171eb28fd5da0c4db5e6e372d6e59f","title":"IANA Protocol Number","path":"/lrsiem/7.25.0/iana-protocol-number","children":[]},{"id":"ci_b5fd0ada57ee4ba4bb50343ded87389c5ddd48b7a1fb3c750ffd38aa36c16dc4","title":"Object","path":"/lrsiem/7.25.0/object","children":[]},{"id":"ci_dbd39f7621d84f010786a40773af15e77863310199d412b4503fa0a1fd22c7f7","title":"Object Name","path":"/lrsiem/7.25.0/object-name","children":[]},{"id":"ci_2b02ee3300ab4897e987067bfd03171efc8cda79e0d1ae68e83be56ca0d9953d","title":"Object Type [7.2]","path":"/lrsiem/7.25.0/object-type-7-2","children":[]},{"id":"ci_50dffdaf8051202d3191cd821cc67bdc8757912b98a915d8788d9e0ad8d6a2d5","title":"Parent Process ID [7.2]","path":"/lrsiem/7.25.0/parent-process-id-7-2","children":[]},{"id":"ci_98dbd0970bbbe836036f9b0c8a1d10b7f0b0494db32cdba20161fa0dbf6cd322","title":"Parent Process Name [7.2]","path":"/lrsiem/7.25.0/parent-process-name-7-2","children":[]},{"id":"ci_39cdbcad33fe29a588041d0fe5fb1c48f8fe2596592fd270b92df08b237905c5","title":"Parent Process Path [7.2]","path":"/lrsiem/7.25.0/parent-process-path-7-2","children":[]},{"id":"ci_6ae995318020968ec4103f04620c4f8ddd1d4becfc0ae4301868a4a3c30d4e78","title":"Policy [7.2]","path":"/lrsiem/7.25.0/policy-7-2","children":[]},{"id":"ci_8684af8b09646169ecef02ed2996a462c7dba649c935f8a22d3ad09f4bca730e","title":"Process ID","path":"/lrsiem/7.25.0/process-id","children":[]},{"id":"ci_617c59bfe87e7ce17524f500566672a9edc927e4cd272a3e774b3438c630022c","title":"Process Name","path":"/lrsiem/7.25.0/process-name","children":[]},{"id":"ci_fed2e2936d1f3aa7a4f9cde213b8c105bec179cd67ffd09bab82a17b4cb2a34d","title":"Quantity","path":"/lrsiem/7.25.0/quantity","children":[]},{"id":"ci_6a4094bd22243320c3fadb64c5c1e789b8ed76a9758b62798b5c250d8355ba64","title":"Rate","path":"/lrsiem/7.25.0/rate","children":[]},{"id":"ci_3bdec30cb7bd7827c84e5a6699136bb77f0135da4733aa158a8356cd1d5f0b43","title":"Reason [7.2]","path":"/lrsiem/7.25.0/reason-7-2","children":[]},{"id":"ci_287b27a86e6eae0e871d503f1b64424dc7ebd9214dff2716e7567e5ab712bd29","title":"Response Code [7.2]","path":"/lrsiem/7.25.0/response-code-7-2","children":[]},{"id":"ci_6bc416cb15f10db2b2323b88217f00ec11be7dfff49d5c00286a69588a6cbb33","title":"Result [7.2]","path":"/lrsiem/7.25.0/result-7-2","children":[]},{"id":"ci_ab85ed6f4fdfe912ce944dcc42614e110b02e422aa0e0dcac51ddf5c8576a878","title":"Session","path":"/lrsiem/7.25.0/session","children":[]},{"id":"ci_763e82dae00bc01b9a9eb5ffbbf4a19bbba599aece729c25ee031df604224567","title":"Session Type [7.2]","path":"/lrsiem/7.25.0/session-type-7-2","children":[]},{"id":"ci_dfa5dce6617fbc8968f5c5dfbfc6d6317091963a29119806ce9c672ab9a9e4db","title":"Size","path":"/lrsiem/7.25.0/size","children":[]},{"id":"ci_f6099aa56561ee12b99056f72232f5f3681c2053f1bbf6cc44963e71ac0e476a","title":"Status [7.2]","path":"/lrsiem/7.25.0/status-7-2","children":[]},{"id":"ci_4bbc187d2f7ba88c1464c845cbb4503acd8d9d8ca2ea295a82a4f58764d70b27","title":"Subject","path":"/lrsiem/7.25.0/subject","children":[]},{"id":"ci_e22bc525e58a16cf3b0545bd45cd19c018e7570d47719ecb6fb163166f214ab0","title":"URL","path":"/lrsiem/7.25.0/url","children":[]},{"id":"ci_fe734832a06b0f1a22e6972434137550e7bbeaa18294e46aa6cbb030fc85908c","title":"User Agent [7.2]","path":"/lrsiem/7.25.0/user-agent-7-2","children":[]},{"id":"ci_43b6aefca6d3370799837265eadc0e132ab3dfd807a8e521c9b35edec0644eb8","title":"Version","path":"/lrsiem/7.25.0/version","children":[]}]},{"id":"ci_06a5559bbecf0bba5a8272d2279297244c7e0a04410d93b1dae96216a2f402b7","title":"Kbytes/Packets Tab","path":"/lrsiem/7.25.0/kbytes-packets-tab","children":[{"id":"ci_741bbeab6b8f2f723a2f311cae5d5633f973fb8b46765191cdadcdee181aa872","title":"[prefix] [Bits/Bytes] [blank/In/Out]","path":"/lrsiem/7.25.0/prefix-bits-bytes-blank-in-out","children":[]},{"id":"ci_e922f3a6deac1857eb531792bf59a2952599a80cdb4ff54d0d7b6f0f5773b729","title":"Packets [Total/In/Out]","path":"/lrsiem/7.25.0/packets-total-in-out","children":[]}]},{"id":"ci_5d4b21e4242b1a6088961329a1a2bfa0cf7f38493d04b158d3d5c93e92c32a64","title":"Classification Tab","path":"/lrsiem/7.25.0/classification-tab","children":[{"id":"ci_4dfdd524c1048db308ca92150ccd6f586ef09535219c9314f51f1dcb2501d8b8","title":"CVE [7.2]","path":"/lrsiem/7.25.0/cve-7-2","children":[]},{"id":"ci_f26f344aca1c690551b65d6cdf4a10e06c4052c0836c55910e05b5deb1ee987a","title":"Severity","path":"/lrsiem/7.25.0/severity","children":[]},{"id":"ci_c157237a6c24a642d8185b46cc60058a19fab7702dcc16eaed6c59e17034ed23","title":"Threat ID [7.2]","path":"/lrsiem/7.25.0/threat-id-7-2","children":[]},{"id":"ci_e0f437e200baad3c93b1a9441ef0af5578550f48b5b9e6720df56bba2227b02b","title":"Threat Name [7.2]","path":"/lrsiem/7.25.0/threat-name-7-2","children":[]},{"id":"ci_9da93d7e9b5620f8a4f54e6f0eea89ae4cab78cf135d3fdf4a4dfe1a5d741f55","title":"Vendor Info [7.2]","path":"/lrsiem/7.25.0/vendor-info-7-2","children":[]},{"id":"ci_5528fe88d00d0af7f3a90ec9f5e6531ec84a216275b2d0b714e5f94582c5a546","title":"Vendor Message ID","path":"/lrsiem/7.25.0/vendor-message-id","children":[]}]},{"id":"ci_39a22b9c5465ed16efdd90919d08379d9305c66733fbe3c04d40002ac897b447","title":"Host Tab","path":"/lrsiem/7.25.0/host-tab","children":[{"id":"ci_7d615ef902ce330b30eeff743a1c6427c73b5f58d21e3ceb2f20b3558d5134f2","title":"DIP/DestinationIP/Impacted IP","path":"/lrsiem/7.25.0/dip-destinationip-impacted-ip","children":[]},{"id":"ci_5a501550dbfab0a165ce1881df451953bc057fd956a0459730977ce29cadf60f","title":"DIPv4","path":"/lrsiem/7.25.0/dipv4","children":[]},{"id":"ci_62f605f396f5c17719f345f572ccd872e97d6192bb276e3255b18c83fdc0c363","title":"DIPv6","path":"/lrsiem/7.25.0/dipv6","children":[]},{"id":"ci_19fd40a71811517f174accb0362665a9d6c46008812d4a0b9b125a4ae050dc7e","title":"DIPv6E","path":"/lrsiem/7.25.0/dipv6e","children":[]},{"id":"ci_38ffe614b6019b39409ca229e71bee90c69cae731ef9f900f8f050e0dc82a975","title":"Impacted Hostname","path":"/lrsiem/7.25.0/impacted-hostname","children":[]},{"id":"ci_a932c67ec367b15ab19a5ddee5fe0f7299b94af45b28f34ed205bb04b1061c3e","title":"Impacted Hostname or IP","path":"/lrsiem/7.25.0/impacted-hostname-or-ip","children":[]},{"id":"ci_11d4c37de691794e2e82cfe17f43c8f7660486f3e909ee271ebdc148b210ea8e","title":"Impacted Interface","path":"/lrsiem/7.25.0/impacted-interface","children":[]},{"id":"ci_59ebb06745b45a6952260f51d7752c3dcdd0aaf38bddaff76f2d0e8dc775504d","title":"Impacted MAC Address","path":"/lrsiem/7.25.0/impacted-mac-address","children":[]},{"id":"ci_33afc4b1fce906c1074588af07c2a390b810cf43239afd81c281bf04d99e572e","title":"Impacted NAT IP","path":"/lrsiem/7.25.0/impacted-nat-ip","children":[]},{"id":"ci_8df85c6daf6a101a0ea7e4dd8065f4bba9c79ab4277f06400b726ce301f4b540","title":"IP Address (Origin)","path":"/lrsiem/7.25.0/ip-address-origin","children":[]},{"id":"ci_5d521543c7fce16d85f904d7ab6bacb14418e64ecfc7ecd4777082ee04dc4045","title":"Origin Hostname","path":"/lrsiem/7.25.0/origin-hostname","children":[]},{"id":"ci_8419abfc02c5bab8cdadeb4dd3140bc59acee1b0213a04e5bcaa539e6925ce5e","title":"Origin Hostname or IP","path":"/lrsiem/7.25.0/origin-hostname-or-ip","children":[]},{"id":"ci_00e417481271e523bbef7b43c96d4903197f262161fbc73129e8a5964812e994","title":"Origin Interface","path":"/lrsiem/7.25.0/origin-interface","children":[]},{"id":"ci_d18866af47542c34b3f46de80fe187e1d1fb82f8328e9ac5addd01f1f9f062d7","title":"Origin MAC Address","path":"/lrsiem/7.25.0/origin-mac-address","children":[]},{"id":"ci_8fb79927cfd04301fd0cf720522bbf5715eabf8579125f6144a8d945ddca3786","title":"Origin NAT IP","path":"/lrsiem/7.25.0/origin-nat-ip","children":[]},{"id":"ci_e55984fddfb845254d2d99614f0db9cd30bab91b766376778c8f6640c7f74e37","title":"Serial Number [7.2]","path":"/lrsiem/7.25.0/serial-number-7-2","children":[]},{"id":"ci_9438c8cf1547b34ad0cfdbec7b9ed740e740291647548478a280cd8ec93361a3","title":"SIPv4","path":"/lrsiem/7.25.0/sipv4","children":[]},{"id":"ci_db00d2d90ebcd2962532fe45d6d356fca7e75814991707b6b04906a525bc07f9","title":"SIPv6","path":"/lrsiem/7.25.0/sipv6","children":[]},{"id":"ci_f533c0de34b82105838aa787ad395e3a9c0473d6f8e198b9e8f22301eef739eb","title":"SIPv6E","path":"/lrsiem/7.25.0/sipv6e","children":[]}]},{"id":"ci_75ab7836d89848041164b1056c1778e2a07a9091290f303dd2f40d09676b3c7a","title":"Identity Tab","path":"/lrsiem/7.25.0/identity-tab","children":[{"id":"ci_22f0608c7eedcc5a26e1789707006f3e5293a9abaa5c98dd07b60aadfdda3e68","title":"Account > User (Impacted)","path":"/lrsiem/7.25.0/account-user-impacted","children":[]},{"id":"ci_f525032a29d56b32faa388a3e5652c19e73878fea191d6fb4d49a878e6718041","title":"Group","path":"/lrsiem/7.25.0/group","children":[]},{"id":"ci_1b252eda6d0b50203a7429728904253d086ec7ade770e4b3922b524bc2c6ef1f","title":"Login > User (Origin)","path":"/lrsiem/7.25.0/login-user-origin","children":[]},{"id":"ci_c2a959ec78cbf87320266ba0c34ad7b6888e3f17a43e8202dc564f73198e856b","title":"Recipient","path":"/lrsiem/7.25.0/recipient","children":[]},{"id":"ci_060cefe589fbd742a43638f6f25a6d1445a2deaa450bef21c4cc72339ce9c766","title":"Sender","path":"/lrsiem/7.25.0/sender","children":[]}]},{"id":"ci_5c95180bbb209f9e269f984c410a0487c71ebd455466b2024ce4ab77296e0009","title":"Location Tab","path":"/lrsiem/7.25.0/location-tab","children":[]},{"id":"ci_92dc41cea37336a6bccf79c67a4fded1874d0df45723523702dc5eb9df655422","title":"Log Tab","path":"/lrsiem/7.25.0/log-tab","children":[]},{"id":"ci_17b2add88fdffd49a00b69d19caaf8a21599407774434e01a32ef59db0f8fde3","title":"Network Tab","path":"/lrsiem/7.25.0/network-tab","children":[{"id":"ci_96791ab315d0113ab8242d1d28e83740dde2a147665d2e6e8a23c7d97fac2c19","title":"Domain (Origin) [7.4]","path":"/lrsiem/7.25.0/domain-origin-7-4","children":[]},{"id":"ci_a7ad249b2e209ebd06044f71a7e0916a142f500ffbb5edce2abcc17d31a411e4","title":"Domain [7.2] (Domain (Impacted))","path":"/lrsiem/7.25.0/domain-7-2-domain-impacted","children":[]},{"id":"ci_ecd39dc77cb3931fe6f4bb50fcc0429f9c91a36eccf77a81ca3cd28c9153a96f","title":"Impacted NAT Port","path":"/lrsiem/7.25.0/impacted-nat-port","children":[]},{"id":"ci_201ed2a12cb93f8813f076998b4091e3dc77f6ee51aac8144febe3c5f52fd1ce","title":"Impacted Port","path":"/lrsiem/7.25.0/impacted-port","children":[]},{"id":"ci_f52bf6f2da863a770cb5436818038ac3d88e9fe9ace9f18ac5b28a584834c6eb","title":"Origin NAT Port","path":"/lrsiem/7.25.0/origin-nat-port","children":[]},{"id":"ci_c042790ba5fa8cfa5af8b064868e804f84e8dd46885ed617c99abf7c466eddda","title":"Origin Port","path":"/lrsiem/7.25.0/origin-port","children":[]}]},{"id":"ci_a2b3650179ba0991cd4094f21b741af2a2a2beb007e1e70803bde1088304f57f","title":"Other MPE Fields","path":"/lrsiem/7.25.0/other-mpe-fields","children":[{"id":"ci_061fd2a32b4143cc73484291ce3afcff006d78fdd111fac3fe0225fba2d14d20","title":"[Tag1-Tag5]","path":"/lrsiem/7.25.0/tag1-tag5","children":[]},{"id":"ci_c890fc1f8914f5a4475a8d85f79ef7ccae334a25d567bf3b3b200d6b09b50d26","title":"Items In","path":"/lrsiem/7.25.0/items-in","children":[]},{"id":"ci_a465165a23bcc9ff5690f957b280373f8569a260a03053b97e085125d3a6280b","title":"Items Out","path":"/lrsiem/7.25.0/items-out","children":[]}]},{"id":"ci_37cd700e132b9cca8a24a8f3b8053d1857a71725ab757160e0f6276c604b7bc4","title":"Derived Data","path":"/lrsiem/7.25.0/derived-data","children":[{"id":"ci_f42c21279fd1c63202c9e79a79c1e8b1ef360382f8b5c535035b5de5cb6daa67","title":"Identity-Derived Data","path":"/lrsiem/7.25.0/identity-derived-data","children":[]},{"id":"ci_313f88a9d8a705cf8352e5b2b5a4e71914a7371c09c2e02fc5c4cad75853fbdd","title":"Log-Derived Data","path":"/lrsiem/7.25.0/log-derived-data","children":[]}]}]},{"id":"ci_cd43330f89b6586613125a07677c2b2715c7cb526cf6e7fab653a2d45e85a8bc","title":"Other LogRhythm Applications","path":"/lrsiem/7.25.0/other-logrhythm-applications","children":[{"id":"ci_3c2f9350b07f5cde09215daf3136f48aa68fd8757b8cdb45fbbbcf9c1b4f8bca","title":"LogRhythm Intelligence","path":"/lrsiem/7.25.0/logrhythm-intelligence","children":[{"id":"ci_a026cbf3f3ad63754fc61be05a0884f6d291b2ffb25977ec835ca3a6a5ba4db1","title":"LogRhythm Intelligence Threat Summary","path":"/lrsiem/7.25.0/logrhythm-intelligence-threat-summary","children":[]},{"id":"ci_266995b2deded87d50a60cc062d66748f39745df669a935a950fc93dc73d8664","title":"LogRhythm Intelligence Sync Service","path":"/lrsiem/7.25.0/logrhythm-intelligence-sync-service","children":[]},{"id":"ci_5f9608eb1d27b2604acd0c7fed6a87f25c06ab4ade690706df4a3014004cf25d","title":"LogRhythm Intelligence Cloud Data Security","path":"/lrsiem/7.25.0/logrhythm-intelligence-cloud-data-security","children":[]}]},{"id":"ci_32facce486474258e8d4a4600ba428804a9fed49cb497e72d42669907e2ce137","title":"LogRhythm Echo","path":"/lrsiem/7.25.0/logrhythm-echo","children":[{"id":"ci_2e67fd598fc1e00bc76cd0343060a65d28ab837b7ad41b653bb7201d5f2a62ce","title":"Install or Upgrade LogRhythm Echo","path":"/lrsiem/7.25.0/install-or-upgrade-logrhythm-echo","children":[]},{"id":"ci_e4a5a1ebb43bec1cf09402bef9febb4dad6e80c1f1e55aee9ef4af4d6ac105c9","title":"Configure LogRhythm Echo","path":"/lrsiem/7.25.0/configure-logrhythm-echo","children":[]},{"id":"ci_6576b4bd8b91a86f61d4cd365303aade0c9c04f6f4291491737ed0531dfe2996","title":"Manage LogRhythm Echo Use Cases","path":"/lrsiem/7.25.0/manage-logrhythm-echo-use-cases","children":[]},{"id":"ci_766ac6ec3546ed0c62b906873c47ad5926489698dd7350a4f90b56447c0c0c83","title":"Run LogRhythm Echo Use Cases","path":"/lrsiem/7.25.0/run-logrhythm-echo-use-cases","children":[]},{"id":"ci_9e19c2af85f376a643548adfb04152c690483a3c099bd9d01fe085abb2f02bc4","title":"Schedule LogRhythm Echo Use Cases","path":"/lrsiem/7.25.0/schedule-logrhythm-echo-use-cases","children":[]},{"id":"ci_4e4215ac4e1b5707c5eb6ed2719eb06bff4ea2d9bd0459015f34a1050e74a33c","title":"LogRhythm Echo API","path":"/lrsiem/7.25.0/logrhythm-echo-api","children":[]},{"id":"ci_179c8476cd80f6ffeb6123f03bc0cf96aac534365f6ea6911e45f35d8dfc2cdc","title":"LogRhythm Echo Troubleshooting","path":"/lrsiem/7.25.0/logrhythm-echo-troubleshooting","children":[]},{"id":"ci_5baac8f10d964e99ba2b0937a92b90d606383a44b52b324df2c2dfc67851f3ff","title":"LogRhythm Echo Use Case DB","path":"/lrsiem/7.25.0/logrhythm-echo-use-case-db","children":[]},{"id":"ci_8f5cd237d1e2a2a17a2697605f809775200abda36ab74cb36dcca153de7df06b","title":"LogRhythm Echo Use Cases and Their AIE Rules, Lists, and SmartResponses","path":"/lrsiem/7.25.0/logrhythm-echo-use-cases-and-their-aie-rules-lists-and-smartresponses","children":[]}]},{"id":"ci_fb65cd67ced4e097f42c25548500a7500c034ed4d5ac74dcc7ce613f0ab0d048","title":"Threat Intelligence Service","path":"/lrsiem/7.25.0/threat-intelligence-service","children":[{"id":"ci_5ef059c2d355404a85804d97c05a0f6f3fd90b5a93fae3fe6838b636eef69305","title":"Threat Intelligence Service Release Notes","path":"/lrsiem/7.25.0/threat-intelligence-service-release-notes","children":[]},{"id":"ci_2f5ef9dec121e68a467bc3e9254222703711baa0032e57f34a5ca5d046ac0bea","title":"Install and Deploy the Threat Intelligence Service","path":"/lrsiem/7.25.0/install-and-deploy-the-threat-intelligence-service","children":[{"id":"ci_5e4e4692198c7a67b673ce1f7716a0833593db956525c2d9d922166f2182a224","title":"Run the Threat Intelligence Service Installer","path":"/lrsiem/7.25.0/run-the-threat-intelligence-service-installer","children":[]},{"id":"ci_d9596ac454a3c6b7c30b648855d60907f0895ce7d597778b5bb74e09a23dcb03","title":"Modify, Repair, or Remove the Threat Intelligence Service","path":"/lrsiem/7.25.0/modify-repair-or-remove-the-threat-intelligence-service","children":[]},{"id":"ci_5df28d1d51d617a81b3c4c3234091790f815785ed91cb2acf36b08bccc362d55","title":"Enable and Import the Threat Intelligence Service Modules","path":"/lrsiem/7.25.0/enable-and-import-the-threat-intelligence-service-modules","children":[]},{"id":"ci_261c171725060491d8cc891405e46255cbae80edab33e6c35559f815b37d7d50","title":"Associate Vendor Lists with LogRhythm Lists","path":"/lrsiem/7.25.0/associate-vendor-lists-with-logrhythm-lists","children":[]},{"id":"ci_f535e66980e3cfbc73e86796c5d9395ab45c2b05ed98e9399434478f5c3d0f5e","title":"Enable Threat List AIE Rules","path":"/lrsiem/7.25.0/enable-threat-list-aie-rules","children":[]},{"id":"ci_1229a9eeb23993580c67648819c943f9e2a44cb69549e5ac5202ff5e09b265e0","title":"Start the LogRhythm Threat Intelligence Service","path":"/lrsiem/7.25.0/start-the-logrhythm-threat-intelligence-service","children":[]},{"id":"ci_f7b2dfb3d1b8b83abc10d3194558e084c7f03e60fda2c6f3b6859fa50add3181","title":"Vendor Lists","path":"/lrsiem/7.25.0/vendor-lists","children":[{"id":"ci_2519fa945b31182de570cd37fcc3b93ddc4cee0eeb8b22ac6d641a53f4307675","title":"BrightCloud","path":"/lrsiem/7.25.0/brightcloud","children":[]},{"id":"ci_11fdd6596d69e2dfce98f8d59e6a219a64e1d526309a1be2244f56e3d1a9a920","title":"CrowdStrike","path":"/lrsiem/7.25.0/crowdstrike","children":[]},{"id":"ci_90277da29cfc42c73d4475aa7414ac161279659d7f64972209e646d0fae7ab75","title":"Cisco AMP Threat Grid","path":"/lrsiem/7.25.0/cisco-amp-threat-grid","children":[]},{"id":"ci_a28cdc639295480285078f50fa0ba5a9f722abb8ceadf666941d929fc49cc559","title":"Symantec","path":"/lrsiem/7.25.0/symantec","children":[]},{"id":"ci_46a845657f3b20ff94d5484892550ff63e2da49060a18fa218523e6955c22dd2","title":"Open Source","path":"/lrsiem/7.25.0/open-source","children":[]},{"id":"ci_a511bb93d8342c8ae180209ccd08db579f40034915d1dcecad998916d2dfcec2","title":"Custom Providers","path":"/lrsiem/7.25.0/custom-providers","children":[]}]}]},{"id":"ci_3c1420b613db2cbcc2446942a987d630d0c52672390bdbd733fb3e5cb7c2634d","title":"Threat Intelligence Service User Guide","path":"/lrsiem/7.25.0/threat-intelligence-service-user-guide","children":[{"id":"ci_f2575cd747992a88f5f49773ac769db677520c6657242f17323fba14b9299485","title":"Launch the Service Manager","path":"/lrsiem/7.25.0/launch-the-service-manager","children":[]},{"id":"ci_d5bfd9b5b2dac9f8156a43a8ec525e590dcb18cec003f59c6acb94a4a255881b","title":"Configure the Connection to LogRhythm","path":"/lrsiem/7.25.0/configure-the-connection-to-logrhythm","children":[]},{"id":"ci_ffd45f5dc0ac1f5085f8da5a33f3a52ebce835b8f3651ba6d58032065a382293","title":"Configure Proxy Settings","path":"/lrsiem/7.25.0/configure-proxy-settings","children":[]},{"id":"ci_edba446b3e75b1a6a9781d7499550dcbd0cdccb5f5e93a6e30a5aa110af255bb","title":"Configure Vendor Threat Feeds","path":"/lrsiem/7.25.0/configure-vendor-threat-feeds","children":[]},{"id":"ci_92ae113011a6446ca33764af456ed9ff9189fe9e90ee69d8d8ab713ecd349dc2","title":"Add a Custom STIX/TAXII Provider","path":"/lrsiem/7.25.0/add-a-custom-stix-taxii-provider","children":[{"id":"ci_0028390694a68a97af024fa18d42a0a0a841b3ba48f5e921ddf367eed767fca7","title":"Add a STIX Feed in TIS","path":"/lrsiem/7.25.0/add-a-stix-feed-in-tis","children":[]},{"id":"ci_0fb20e427d1ab0fd7f02e3ca78789793528599f53b0f4c54f7487ccdd1f0a295","title":"Configure CustomObjectType in STIX/TAXII Feeds in TIS","path":"/lrsiem/7.25.0/configure-customobjecttype-in-stix-taxii-feeds-in-tis","children":[]}]},{"id":"ci_7e0734429c901c2d0be70a32143ddf9585ed96ffb96eed1b1e0c83c446c4571a","title":"Start and Stop the Service","path":"/lrsiem/7.25.0/start-and-stop-the-service","children":[]},{"id":"ci_96100a8365b2376a959da906e4469fa3622e1f1563617a5abb273e7b1e5e1977","title":"Configure the Threat Intelligence Service Whitelist","path":"/lrsiem/7.25.0/configure-the-threat-intelligence-service-whitelist","children":[]},{"id":"ci_b4aa7c584fe043c0efed8bdfc9908f605ee893238238e979767148fdd53781c3","title":"URL Normalization","path":"/lrsiem/7.25.0/url-normalization","children":[]},{"id":"ci_3244182ad4848debd4ea954d9964774394fba70b246ce7342fd804e3a176ca34","title":"Request Response Logging","path":"/lrsiem/7.25.0/request-response-logging","children":[]},{"id":"ci_e859bcd913b77f3b5bc52a5bdb8775d14dbc6cebb89ef7a780701361ef4a0f18","title":"View Log Files","path":"/lrsiem/7.25.0/view-log-files","children":[]},{"id":"ci_61336cc39ec3be6602bd6ff1c2dcdefa05551e1840f51e08ef8d9ab665c2a33b","title":"Troubleshoot the Threat Intelligence Service","path":"/lrsiem/7.25.0/troubleshoot-the-threat-intelligence-service","children":[{"id":"ci_d39728a9c7087fad119a85e424df59c89b207edd251ca237508976fd830f364c","title":"Firewall Blocking Open Source URLs in TIS","path":"/lrsiem/7.25.0/firewall-blocking-open-source-urls-in-tis","children":[]},{"id":"ci_6c2fa187e31872756f0f9639dc779ccad4fef4d480402bcd60157eca3f9eda13","title":"Log Files in TIS","path":"/lrsiem/7.25.0/log-files-in-tis","children":[]},{"id":"ci_c63d05765543722c972ac88eeadf7a9c023fb79b40db9d086795539dbea00448","title":"Resource Utilization in TIS","path":"/lrsiem/7.25.0/resource-utilization-in-tis","children":[]},{"id":"ci_06a7398b7f66963daa7414b1e16424f8a68db4f2a7c5ae5a8646ddcf2b14bd64","title":"Threat Intelligence Service Will Not Start","path":"/lrsiem/7.25.0/threat-intelligence-service-will-not-start","children":[]}]}]}]},{"id":"ci_5f0cfa3a0cb8e96161a6f8cc7df66a7072d759a93b55457550c79eef0e4a1541","title":"TrueIdentity Sync Client User Guide","path":"/lrsiem/7.25.0/trueidentity-sync-client-user-guide","children":[{"id":"ci_768bc0f3a9840f3205590c316136535539199fec1946c64716e6872b63f61966","title":"TrueIdentity Sync Client Release Notes","path":"/lrsiem/7.25.0/trueidentity-sync-client-release-notes","children":[]},{"id":"ci_8ba33e1ae679ac459341a13db65abd55f06a967b0283b7535ec69eb09d75c9eb","title":"Install the TrueIdentity Sync Client","path":"/lrsiem/7.25.0/install-the-trueidentity-sync-client","children":[]},{"id":"ci_149a748f86e9deb1d114ebdf5a91b176bcddac6f775f1681fae1a2e99ff31a3e","title":"Create Custom Certificates","path":"/lrsiem/7.25.0/create-custom-certificates","children":[]},{"id":"ci_accb0af457ce58520297ef2ae227f1971f064ae5783c9fc039ac9b901ff01f5b","title":"Generate LR API Token","path":"/lrsiem/7.25.0/generate-lr-api-token","children":[]},{"id":"ci_965f356283b09205864091de4e7d0534b16343d237610a3da1dc7cb0a13880f9","title":"Launch the TrueIdentity Sync Client","path":"/lrsiem/7.25.0/launch-the-trueidentity-sync-client","children":[]},{"id":"ci_0cfb9b5c7509ddcb97e2886bb426517db9825feef31749f6cb9fdb5cca851f0c","title":"Add a TrueIdentity Sync Job","path":"/lrsiem/7.25.0/add-a-trueidentity-sync-job","children":[]},{"id":"ci_fac35d674f968e87bdc0f84e26ad35707d4ea328ba1b1f25c4e395378ed8e9c7","title":"View Synchronized TrueIdentities","path":"/lrsiem/7.25.0/view-synchronized-trueidentities","children":[]},{"id":"ci_097711785ada792ad99141ce9afa605e31972ea3704f9f6ea72eb4aee5db7104","title":"Troubleshoot the TrueIdentity Sync Client","path":"/lrsiem/7.25.0/troubleshoot-the-trueidentity-sync-client","children":[]}]},{"id":"ci_8d164dd03dd1330d3795a31592e3c03ef08d03901f0ef4f386ea88d3618c0ffb","title":"LogRhythm Diagnostics Tool","path":"/lrsiem/7.25.0/logrhythm-diagnostics-tool","children":[{"id":"ci_8eba5877191e610ff1690158e5ca310fb898c1c1b08e691ed58440fcddcd7d83","title":"Install the Diagnostics Agent and Diagnostics Tool","path":"/lrsiem/7.25.0/install-the-diagnostics-agent-and-diagnostics-tool","children":[]},{"id":"ci_d6286cbc1d3f021adc0821fe323ebfbdc0fc5d7bc1aaa8661fb36bddf3491eed","title":"Tabs in the Diagnostic Tool","path":"/lrsiem/7.25.0/tabs-in-the-diagnostic-tool","children":[]},{"id":"ci_8f7be85750811259320e66529d97fec2043e0f2c9e8eada21c06e4fa3962ab69","title":"Log Files and Data Collected by the Diagnostic Tool","path":"/lrsiem/7.25.0/log-files-and-data-collected-by-the-diagnostic-tool","children":[]},{"id":"ci_bb97bbf162317721323c827cea4310006100299b1256d562b6d91718a803ea78","title":"Detailed Export File Contents From the Diagnostics Tool","path":"/lrsiem/7.25.0/detailed-export-file-contents-from-the-diagnostics-tool","children":[]}]},{"id":"ci_e5cfed28e24d9e634488c73c36618f997550aa355370d764abc6325146ec0fda","title":"Using Kibana with LogRhythm SIEM","path":"/lrsiem/7.25.0/using-kibana-with-logrhythm-siem","children":[]},{"id":"ci_c155ae4ee5a0850067a8f46c69a409fe7f9bc9033f0d3e2f7ac7fd3220005f58","title":"DX Upgrade Checker","path":"/lrsiem/7.25.0/dx-upgrade-checker","children":[]}]},{"id":"ci_4cb3245212f5f9fb75ee88a5ec1b2abec397f0102b76b32a1461dc4dc8bc4993","title":"Understand the LogRhythm Architecture","path":"/lrsiem/7.25.0/understand-the-logrhythm-architecture","children":[{"id":"ci_19fef020c218e68e02467a5d71ba9033cf623e91ec2eacbe9782e695ec317fc6","title":"Licensing","path":"/lrsiem/7.25.0/licensing","children":[]},{"id":"ci_03e36a1fddd5918de89577f0aa84c2c01db503c6b76d5cebb36f6c6a1bd9104d","title":"Log Processing","path":"/lrsiem/7.25.0/log-processing","children":[{"id":"ci_f3107bcfd170f12fba31dbfef5c5e0decdf6d7873c5771f64811cecbce4634df","title":"Audit Classifications","path":"/lrsiem/7.25.0/audit-classifications","children":[]},{"id":"ci_820c63c5e1720c81a16fb37ed241d47ca4e02fd30e3070001878c9d1d48a838f","title":"Configuration and Log Processing","path":"/lrsiem/7.25.0/configuration-and-log-processing","children":[]},{"id":"ci_ef833c6c48a163b8ddba5c2a6ebb6a919b1870bf994741caf1b63503a4b2eee7","title":"Operations Classifications","path":"/lrsiem/7.25.0/operations-classifications","children":[]},{"id":"ci_58fd00c247e0bd902f5551a0ce31907cade3b6be416206ec393dee34d2b7dd26","title":"Security Classifications","path":"/lrsiem/7.25.0/security-classifications","children":[]}]},{"id":"ci_6358104f277c67c2180a32e8df304e97a63a8cbf4896576b39211f393e99adb5","title":"Logs, Events, and Alarms","path":"/lrsiem/7.25.0/logs-events-and-alarms","children":[]},{"id":"ci_bb8ca0736b0d332c188d551e6d2c70e8a9d79b9a1563e1afb2f2fc4030003aef","title":"Networking and Communication","path":"/lrsiem/7.25.0/networking-and-communication","children":[]},{"id":"ci_f1510d3bbb0997c9b371c0431e2f00d35e55c410bc50e57100591bd241087a60","title":"LogRhythm SIEM Databases","path":"/lrsiem/7.25.0/logrhythm-siem-databases","children":[]},{"id":"ci_b008f18a3c966716df93bed1de374806794364345955b3c8f507d0c9c3fe3c18","title":"Component Reference","path":"/lrsiem/7.25.0/component-reference","children":[]}]},{"id":"ci_872fb750a58b665ec8b7167c97ac1a407debffdf57228418676f4011fabda268","title":"Find More Information","path":"/lrsiem/7.25.0/find-more-information","children":[{"id":"ci_8ba13b8e8ce035569f415071f403bfa2afa51a2682eb3b07ae77683a1d89ed32","title":"Customer Support Guide","path":"/lrsiem/7.25.0/customer-support-guide","children":[]},{"id":"ci_651c4190e37cc10f5539e36aabbec7502828973489201b4e4722cda6a522b92f","title":"Glossary of LogRhythm Products and Components","path":"/lrsiem/7.25.0/glossary-of-logrhythm-products-and-components","children":[]},{"id":"ci_9f40bfd8e15524d0abb617ba2323e72e46d89c508ba294854dd8e6a34baef8bd","title":"Open Source License Acknowledgements","path":"/lrsiem/7.25.0/open-source-license-acknowledgements","children":[]},{"id":"ci_a37340bbb571e650e0b1ab271da4805406c2148006256c2cbb922869fe08099a","title":"Upgrade FAQ and Determining the Correct Upgrade Path","path":"/lrsiem/7.25.0/upgrade-faq-and-determining-the-correct-upgrade-path","children":[]},{"id":"ci_bfd3dbc945e09049bc7430972ab255f5dc70bb8b9877dbef2625ac234edf2166","title":"End of Life Policies for Software and Hardware","path":"/lrsiem/7.25.0/end-of-life-policies-for-software-and-hardware","children":[]}]},{"id":"ci_050f3487723b26620783faf60d4e2654769209814382e91a2de400dbbad58d08","title":"Download PDFs","path":"/lrsiem/7.25.0/download-pdfs","children":[]}]