Log Search

Topic	Replies	Views	Activity
Share your LEQL query tips and tricks! queries Within InsightIDR, you can use LEQL queries to search through your logs, create custom alerts, and power your dashboards. With so many different uses for LEQL, the Rapid7 team is looking into how we can make LEQL easier …	2	1160	November 2, 2022
About the Log Search category	0	568	June 5, 2020
Selection of queries for working with DNS data	2	838	August 1, 2025
Log search query InsightIDR	1	12	August 1, 2025
Log searching across multiple, disparate log sets using field qualifiers	3	33	July 9, 2025
IDR logs query help	1	71	May 28, 2025
Compare 2 values InsightIDR	5	57	May 19, 2025
IDR query to match on part of a string	4	43	April 3, 2025
Log search to look for sign in and sign out events InsightIDR	2	67	February 6, 2025
Find devices with local admin account InsightVM , InsightIDR , workflow-building , vulnerability-management , queries	2	332	February 4, 2025
Delete saved InsightIDR queries	2	61	January 24, 2025
Calculate difference between dates	0	43	January 23, 2025
Search for User Tags (Disabled in LDAP, Removed, Watch List) InsightIDR	8	132	January 15, 2025
Question on log search	21	2839	December 30, 2024
Creating Dashboards For Firewall Logs InsightIDR	2	78	December 16, 2024
Log maturity and visibility	1	44	November 11, 2024
Log Sets Missing From Custom Parsing Tool InsightIDR	3	67	October 14, 2024
Local Admin Group Changes	2	203	October 10, 2024
Groupby source log	2	105	September 18, 2024
IDR - Log Search for Email InsightIDR	2	110	September 13, 2024
Log Search to list all investigations created	1	73	August 7, 2024
Filter logs containing a field of SQL code to show only those where that code will change the DB or permissions InsightIDR , sql	0	32	August 5, 2024
Log Search with Steve: Some helpful FIM Dashboards to help	5	515	August 4, 2024
Dashboard Line Chart Visualizations with Group By Clauses	2	233	May 3, 2024
Correlating 2 Logs for Detection Rule InsightIDR	2	212	April 30, 2024
Key Value Pair Variables in InsightIDR InsightIDR	7	476	April 24, 2024
Process Start Events not showing PowerShell cmdlets	6	416	April 2, 2024
New Detection Rule InsightIDR	10	535	March 1, 2024
Looking to georefference an ip found in a legacy log query	0	208	January 17, 2024
InsightIDR query InsightIDR	3	536	January 9, 2024

Share your LEQL query tips and tricks!

queries

Within InsightIDR, you can use LEQL queries to search through your logs, create custom alerts, and power your dashboards. With so many different uses for LEQL, the Rapid7 team is looking into how we can make LEQL easier …