---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# View drill down events

# View LogRhythm drill down events {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

View the related raw or base events for a LogRhythm alarm in the
security incident.

## Before you begin

Role required: sn_si.admin

## About this task

As a security analyst you can view the related raw or base events for a LogRhythm alarm without having to go back to the LogRhythm console. You can do this by going to a related list that
contains all the drill-down events on the SIR
incident.

## Procedure

Navigate to AllLogRhythm IntegrationLogRhythm Drilldown Events.

*[\>]: and then