How-to

Parser for Cohesity

Download the ready-made parser for Cohesity.

How to Monitor and Maintain Logmanager Health

Learn how to maintain peak Logmanager performance.

Global Filter for Different Groups of Windows Sources

Configure all your Windows Agents with a single action.

Contextual Alert to Identify Firewall Brute Force Attack Sources

Download the contextual alert template.

Parser for Wallix PAM (Bastion)

Download the ready-made parser for Wallix PAM (Bastion).

How to Configure Logmanager Backups on an SMB Server

In this guide, you prepare a Samba share on Ubuntu and then point Logmanager to that location for automated archiving.

How to Connect a FortiGate Firewall to Logmanager

Connecting FortiGate to Logmanager is useful because it centralizes traffic events, security logs, and operational activity from the firewall in one searchable platform.

How to Create a FortiGate Configuration Change Alert in Logmanager

Alerting on firewall configuration changes matters for both operations and security. Learn how to create FortiGate configuration change alert in Logmanager

Benefits of Integrating Logmanager with Flowmon

Gain better insight into network behavior and security events.

How to Investigate a Suspicious Office 365 Login

Learn how to pivot from an Office 365 alert into broader activity.

How to Investigate Suspicious Switch Login

Use this workflow for network investigations.

How to Perform Quick Triage on a Suspicious IP Address

A single IP address can still serve as a good investigation pivot.

How to Use Sankey Graphs

Sankey graphs turn complex flows into something immediately understandable. Learn how to use them in Logmanager to enhance your observability.

How to Work with Dashboards

Learn how to build your own custom dashboards.

Indexing Strategy in Logmanager 4

We've moved from large daily indexes to parser-based ones.