Log Search

Topic	Replies	Views	Activity
Share your LEQL query tips and tricks! queries Within InsightIDR, you can use LEQL queries to search through your logs, create custom alerts, and power your dashboards. With so many different uses for LEQL, the Rapid7 team is looking into how we can make LEQL easier …	2	1141	November 2, 2022
About the Log Search category	0	567	June 5, 2020
IDR query to match on part of a string	4	36	April 3, 2025
Log search to look for sign in and sign out events InsightIDR	2	48	February 6, 2025
Find devices with local admin account InsightVM , InsightIDR , workflow-building , vulnerability-management , queries	2	296	February 4, 2025
Delete saved InsightIDR queries	2	52	January 24, 2025
Calculate difference between dates	0	40	January 23, 2025
Search for User Tags (Disabled in LDAP, Removed, Watch List) InsightIDR	8	121	January 15, 2025
Question on log search	21	2831	December 30, 2024
Creating Dashboards For Firewall Logs InsightIDR	2	72	December 16, 2024
Log maturity and visibility	1	40	November 11, 2024
Log Sets Missing From Custom Parsing Tool InsightIDR	3	62	October 14, 2024
Local Admin Group Changes	2	181	October 10, 2024
Groupby source log	2	86	September 18, 2024
IDR - Log Search for Email InsightIDR	2	102	September 13, 2024
Log Search to list all investigations created	1	67	August 7, 2024
Filter logs containing a field of SQL code to show only those where that code will change the DB or permissions InsightIDR , sql	0	29	August 5, 2024
Log Search with Steve: Some helpful FIM Dashboards to help	5	513	August 4, 2024
Dashboard Line Chart Visualizations with Group By Clauses	2	216	May 3, 2024
Correlating 2 Logs for Detection Rule InsightIDR	2	211	April 30, 2024
Key Value Pair Variables in InsightIDR InsightIDR	7	455	April 24, 2024
Process Start Events not showing PowerShell cmdlets	6	395	April 2, 2024
New Detection Rule InsightIDR	10	519	March 1, 2024
Looking to georefference an ip found in a legacy log query	0	208	January 17, 2024
InsightIDR query InsightIDR	3	533	January 9, 2024
Querying a log set for counts of events per log, including those with 0 in the output	0	297	December 22, 2023
File Modification Activity Not Showing in Log Search InsightIDR	6	749	December 21, 2023
IDR Query - regex AND\AND NOT	1	370	November 10, 2023
Assistance Cleaning Up an LEQL Query	2	374	September 14, 2023
Time stamp for disable account InsightIDR	4	860	September 5, 2023

Share your LEQL query tips and tricks!

queries

Within InsightIDR, you can use LEQL queries to search through your logs, create custom alerts, and power your dashboards. With so many different uses for LEQL, the Rapid7 team is looking into how we can make LEQL easier …