LogRhythm (v2.0.30)
LogRhythm security intelligence.
- Author
- Cortex XSOAR
- Support
- xsoar
- URL
- https://www.paloaltonetworks.com/cortex
- Categories
- Analytics & SIEM
Incident fields (7)
- LogRhythm Associated Cases
- LogRhythm Case Collaborators
- LogRhythm Case Priority
- LogRhythm Case Updated User
- LogRhythm Entity
- LogRhythm Status
- LogRhythm Ticket Due Date
Integrations (2)
- LogRhythmRest
- LogRhythmRest v2
Layouts (2)
- LogRhythm Alarm Incident
- LogRhythm Case Incident
Playbooks (3)
- LogRhythmRestV2 - Search query
- Logrhythm - Search query
- Logrhythm Alarm Handling
README
The LogRhythm pack provides security operations to deliver comprehensive and actionable information into your enterprise IT environment.
What does this pack do?
- Execute queries on logs.
- Retrieve case summaries, create new cases, or update the properties of a case.
- Get host information, add new hosts and update host status, and query and update alarms.
- Fetch cases and alarms as incidents.
- Retrieve, update, and remove tags.
- Get list details, add or remove items from lists.
This pack includes the following playbooks:
- Logrhythm Alarm Handling playbook that is triggered when fetching a LogRhythm alarm incident.
- LogRhythmRestV2 - Search query playbook that retrieves query results.