- Log in to the LogRhythm NDR UI.
- Click the System tab. In the drop-down menu, click Case Events.
The Indicators Of Attack (IOAs) Details page appears, displaying the list with today's IOAs in current time or an hour (or even two hours) before the existing time.
If the IOAs are in current time or an hour (or even two hours) before the current time, the IOAs are being generated.