A new experience for configuring flat files for log collection is available in the Alert Logic® console for Managed Detection & Response customers. This update is designed to eliminate the user experience issues that were common in the previous configuration workflow by streamlining the configuration of flat files, consolidating data and configuration to a single place in the Alert Logic console, and removing the need to maintain collection schedules and host credentials.
Note: This new experience is currently available for all new Managed Detection & Response customers and all Managed Detection and Response customers who do not currently have application logs configured.
Flat File Configuration Console
Flat file configuration is found in the Alert Logic console within the navigation menu () at Configure > Deployments > a deployment > Application Logs. Here, you have access to a list of application log types that may have already been configured. You can turn collection on and off and preview the application log's metadata, as well as duplicate, view rules for, and edit the log here.
Add a new application log by selecting the Add Application Log + icon. Here, you can configure new flat file attributes.
For more information, see the Application Logs for Flat File Configuration documentation.