Log Search

Topic	Replies	Views	Activity
Share your LEQL query tips and tricks! queries Within InsightIDR, you can use LEQL queries to search through your logs, create custom alerts, and power your dashboards. With so many different uses for LEQL, the Rapid7 team is looking into how we can make LEQL easier …	2	1112	November 2, 2022
About the Log Search category	0	560	June 5, 2020
Question on log search	20	2776	December 18, 2024
Creating Dashboards For Firewall Logs InsightIDR	2	52	December 16, 2024
Log maturity and visibility	1	34	November 11, 2024
Log Sets Missing From Custom Parsing Tool InsightIDR	3	45	October 14, 2024
Local Admin Group Changes	2	135	October 10, 2024
Search for User Tags (Disabled in LDAP, Removed, Watch List) InsightIDR	5	81	September 23, 2024
Groupby source log	2	31	September 18, 2024
IDR - Log Search for Email InsightIDR	2	84	September 13, 2024
Find devices with local admin account InsightVM , InsightIDR , workflow-building , vulnerability-management , queries	1	159	August 8, 2024
Log Search to list all investigations created	1	55	August 7, 2024
Filter logs containing a field of SQL code to show only those where that code will change the DB or permissions InsightIDR , sql	0	22	August 5, 2024
Log Search with Steve: Some helpful FIM Dashboards to help	5	509	August 4, 2024
Dashboard Line Chart Visualizations with Group By Clauses	2	203	May 3, 2024
Correlating 2 Logs for Detection Rule InsightIDR	2	201	April 30, 2024
Key Value Pair Variables in InsightIDR InsightIDR	7	416	April 24, 2024
Process Start Events not showing PowerShell cmdlets	6	362	April 2, 2024
New Detection Rule InsightIDR	10	499	March 1, 2024
Looking to georefference an ip found in a legacy log query	0	207	January 17, 2024
InsightIDR query InsightIDR	3	526	January 9, 2024
Querying a log set for counts of events per log, including those with 0 in the output	0	289	December 22, 2023
File Modification Activity Not Showing in Log Search InsightIDR	6	694	December 21, 2023
IDR Query - regex AND\AND NOT	1	359	November 10, 2023
Assistance Cleaning Up an LEQL Query	2	368	September 14, 2023
Time stamp for disable account InsightIDR	4	766	September 5, 2023
Virtual machine	1	352	August 31, 2023
Find who created a local user InsightIDR	1	295	August 31, 2023
Threshold on custom alert	9	740	July 17, 2023
Query by timerange with groupby InsightIDR	4	329	June 4, 2023

Share your LEQL query tips and tricks!

queries

Within InsightIDR, you can use LEQL queries to search through your logs, create custom alerts, and power your dashboards. With so many different uses for LEQL, the Rapid7 team is looking into how we can make LEQL easier …