Discussões de LogRhythm SIEM

How do you edit a template after it was created and saved? I'm sure if it is possible, but I hope it is

Wondering how do I create the MPE rule in LogRhythm? LogRhythm has a lot of support and conferences available in the community. I would recommend it to whoever is considering the SIEM platform.LogRhythm has a lot of support and conferences available in the community. I would recommend it to... Leia mais

FYI... I have experience only on ArcSigh and ELK I am unsure about how it works but I guess are architecture would be same and terminology may differs, may be i am not the correct person to review it :)

The results only give 5000 logs, wanted to know if there is a way to get more than that.

i wanted to create a use case that looks for common event.But faced difficulties to understand how it behave.

I have tried to integrate with Tenable.sc but doesn't seem to work. In the scsm.log file, there is no error logs. Would appreciate LogRhythm expert able to assists on this matter.