Skip to main content
Skip table of contents

Using LogRhythm UEBA

CloudAI is now named LogRhythm UEBA.

However, both names are referenced in our documentation. While the product name is now LogRhythm UEBA, the user interface (UI) continues to reference CloudAI.

LogRhythm UEBA (CloudAI) functions as a log source type in the LogRhythm SIEM so you can create Event Dashboards, Analyze Dashboards, AIE Rules and integrate with Alarms, Cases and SmartResponses.

The LogRhythm SIEM processes the UEBA anomaly detection outputs and parses information from the raw log (Logsourcetype: "LogRhythm CloudAI") into the applicable metadata.

Example of a dashboard using "LogRhythm CloudAI" events in the LogRhythm SIEM:


Example of an alarm triggered by an AIE rule that uses "LogRhythm CloudAI" logs:



JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.