View LogRhythm drill down events

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read
  • View the related raw or base events for a LogRhythm alarm in the security incident.

    Before you begin

    Role required: sn_si.admin

    About this task

    As a security analyst you can view the related raw or base events for a LogRhythm alarm without having to go back to the LogRhythm console. You can do this by going to a related list that contains all the drill-down events on the SIR incident.

    Procedure

    Navigate to All > LogRhythm Integration > LogRhythm Drilldown Events.