Following on from the recent enhancement of adding External Assets to the Assets UI, LevelBlue's Alert Logic has enhanced the Alert Logic console for Managed Detection & Response (MDR) customers by providing additional context for Collectors, such as Cloud Trail and O365.
Among these enhancements is a new tabular view of configured Collectors, enabling you to easily obtain additional metadata and perform actions such as search for logs from a given collector or add a new one.
These improvements can be accessed within the Assets Console by selecting Investigate > Assets > Collectors.
Background
A Collector is typically an API-based integration with SaaS applications, initially configured within the Application Registry. It will also include a CloudTrail collector, which automatically gets created as part of the AWS deployments that you configure.
The Application Registry offers an intuitive and efficient method to integrate multiple third-party applications capable of generating logs. It serves as a repository of platform integrations within your Configuration group in the Alert Logic console. Integration with third-party applications enhances both administrative and security value for your organization. It is available exclusively to Professional and Enterprise Managed Detection and Response customers.
To create a Collector in the Application Registry, please navigate to Configure > Application Registry.
Asset Console Improvements
The list of enhancements includes:
- Collectors now has a dedicated tab within the Assets UI
- A new tabular view of Collectors featuring columns with metadata
- The capability to view, filter or add Collectors within a single location
- The ability to easily determine the log volume per collector over the last 24 hours
- The Collector table can be exports to a CSV file
- Each Collector includes a summary and details page, providing additional information about the Collector
- The option to search for logs from a given Collector
- The ability to add Health Notifications to a Collector
These enhancements are designed to offer a more intuitive and user-friendly interface, thereby improving the overall experience of managing and monitoring logs received from your infrastructure.
Additional Resources
See the following documentation to learn more about Collectors:
Comments
0 comments
Please sign in to leave a comment.