Log Search

Topic	Replies	Views	Activity
Share your LEQL query tips and tricks! queries Within InsightIDR, you can use LEQL queries to search through your logs, create custom alerts, and power your dashboards. With so many different uses for LEQL, the Rapid7 team is looking into how we can make LEQL easier …	2	1084	November 2, 2022
About the Log Search category	0	557	June 5, 2020
IDR - Log Search for Email InsightIDR	2	45	September 13, 2024
Search for User Tags (Disabled in LDAP, Removed, Watch List) InsightIDR	4	53	September 6, 2024
Find devices with local admin account InsightVM , InsightIDR , workflow-building , vulnerability-management , queries	1	101	August 8, 2024
Log Search to list all investigations created	1	36	August 7, 2024
Filter logs containing a field of SQL code to show only those where that code will change the DB or permissions InsightIDR , sql	0	15	August 5, 2024
Log Search with Steve: Some helpful FIM Dashboards to help	5	491	August 4, 2024
Dashboard Line Chart Visualizations with Group By Clauses	2	190	May 3, 2024
Correlating 2 Logs for Detection Rule InsightIDR	2	183	April 30, 2024
Key Value Pair Variables in InsightIDR InsightIDR	7	379	April 24, 2024
Process Start Events not showing PowerShell cmdlets	6	344	April 2, 2024
New Detection Rule InsightIDR	10	467	March 1, 2024
Looking to georefference an ip found in a legacy log query	0	204	January 17, 2024
InsightIDR query InsightIDR	3	521	January 9, 2024
Querying a log set for counts of events per log, including those with 0 in the output	0	284	December 22, 2023
File Modification Activity Not Showing in Log Search InsightIDR	6	610	December 21, 2023
IDR Query - regex AND\AND NOT	1	354	November 10, 2023
Assistance Cleaning Up an LEQL Query	2	358	September 14, 2023
Time stamp for disable account InsightIDR	4	640	September 5, 2023
Virtual machine	1	352	August 31, 2023
Find who created a local user InsightIDR	1	289	August 31, 2023
Threshold on custom alert	9	731	July 17, 2023
Query by timerange with groupby InsightIDR	4	326	June 4, 2023
Question on log search	19	2737	May 30, 2023
Does anyone know what event source collets windows event logs?	1	579	May 24, 2023
Query to generate multiple countries authentication data InsightIDR	1	491	May 15, 2023
Cisco WLC 5520	1	428	May 10, 2023
Watchlist leql query?	2	361	April 10, 2023
Searching array without using Index	5	652	March 20, 2023

Share your LEQL query tips and tricks!

queries

Within InsightIDR, you can use LEQL queries to search through your logs, create custom alerts, and power your dashboards. With so many different uses for LEQL, the Rapid7 team is looking into how we can make LEQL easier …