Skip to main content
Skip table of contents

Client Console Analyst Guide

The LogRhythm SIEM platform allows analysts to efficiently capture logs and use advanced analytics to surface known and unknown threats, all while automating manual tasks with embedded security orchestration, automation, and response (SOAR) capabilities.

Filters and Wizards Filtering is used in searches and configuration in many parts of the LogRhythm Client Console, including AI Engine Rules, Alarms, Investigations, Tails, and Reports.
General Console Features Some basic functionality of the Client Console is used in multiple tools and windows. This includes exporting data and generating crash reports.
Layouts Layouts consist of the look and feel for how widgets appear within the Personal Dashboard and Investigate.
Lists in the Client Console Lists provide a mechanism for organizing and saving common search criteria used within filters throughout the Client Console.
Message Processing Engine Rule Builder The MPE Rule Builder allows you to view, create, and edit new MPE base rules and sub-rules. New rules are needed to collect and process logs from any new log source type.
Monitor, Search, and Analysis

Monitoring, searching, and analyzing are done through a number of features in the Client Console. These include: Alarm Viewer, Investigator, Personal Dashboard, Quick Search Toolbar, Tail, and TopX Analysis.

My LogRhythm The My LogRhythm menu provides access to several tools that allow you to modify preferences, settings, and records in LogRhythm that are unique to you.
Report Center The Report Center includes predefined templates, reports, and Report Packages, which are sets of reports that pertain to a single topic such as security compliance standards, usage auditing, or LogRhythm diagnostics.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.