Log Search

Topic	Replies	Views	Activity
Share your LEQL query tips and tricks! queries Within InsightIDR, you can use LEQL queries to search through your logs, create custom alerts, and power your dashboards. With so many different uses for LEQL, the Rapid7 team is looking into how we can make LEQL easier …	2	1110	November 2, 2022
About the Log Search category	0	560	June 5, 2020
Log maturity and visibility	1	34	November 11, 2024
Log Sets Missing From Custom Parsing Tool InsightIDR	3	44	October 14, 2024
Local Admin Group Changes	2	132	October 10, 2024
Search for User Tags (Disabled in LDAP, Removed, Watch List) InsightIDR	5	79	September 23, 2024
Groupby source log	2	27	September 18, 2024
IDR - Log Search for Email InsightIDR	2	83	September 13, 2024
Find devices with local admin account InsightVM , InsightIDR , workflow-building , vulnerability-management , queries	1	154	August 8, 2024
Log Search to list all investigations created	1	55	August 7, 2024
Filter logs containing a field of SQL code to show only those where that code will change the DB or permissions InsightIDR , sql	0	22	August 5, 2024
Log Search with Steve: Some helpful FIM Dashboards to help	5	508	August 4, 2024
Dashboard Line Chart Visualizations with Group By Clauses	2	203	May 3, 2024
Correlating 2 Logs for Detection Rule InsightIDR	2	198	April 30, 2024
Key Value Pair Variables in InsightIDR InsightIDR	7	412	April 24, 2024
Process Start Events not showing PowerShell cmdlets	6	361	April 2, 2024
New Detection Rule InsightIDR	10	494	March 1, 2024
Looking to georefference an ip found in a legacy log query	0	207	January 17, 2024
InsightIDR query InsightIDR	3	525	January 9, 2024
Querying a log set for counts of events per log, including those with 0 in the output	0	289	December 22, 2023
File Modification Activity Not Showing in Log Search InsightIDR	6	691	December 21, 2023
IDR Query - regex AND\AND NOT	1	359	November 10, 2023
Assistance Cleaning Up an LEQL Query	2	368	September 14, 2023
Time stamp for disable account InsightIDR	4	752	September 5, 2023
Virtual machine	1	352	August 31, 2023
Find who created a local user InsightIDR	1	295	August 31, 2023
Threshold on custom alert	9	739	July 17, 2023
Query by timerange with groupby InsightIDR	4	328	June 4, 2023
Question on log search	19	2758	May 30, 2023
Does anyone know what event source collets windows event logs?	1	710	May 24, 2023

Share your LEQL query tips and tricks!

queries

Within InsightIDR, you can use LEQL queries to search through your logs, create custom alerts, and power your dashboards. With so many different uses for LEQL, the Rapid7 team is looking into how we can make LEQL easier …