Matt Sayler

1. Frequently Asked Questions
2. Log Management
3. When should I use a scheduled search or create a correlation alert?

An alternate form of this query can be used to aggregate results over a short period and collect results as a matching set. Queries like this will alert in near real-time only general a fixed numb...

• View comment
• Matt Sayler
• July 21, 2021 21:39
• Edited
• 0 votes

1. Community
2. Discussions
3. ALCLI

This is the product owner for the CLI tools — please let me know if you have any thoughts or feedback. I'm glad the CLI tools are helping you. We use them extensively inside Alert Logic and will co...

• View comment
• Matt Sayler
• February 23, 2021 19:02
• 0 votes

1. Community
2. Discussions
3. How are you managing Alert Logic and AWS Guard Duty Integration?

It sounds like you're interested in a few different workflows: 1. Being able to reflect GuardDuty archival status in Alert Logic: when you archive a finding, the associated incident in the Alert Lo...

• View comment
• Matt Sayler
• May 03, 2019 13:00
• 0 votes

1. Community
2. Discussions
3. How are you managing Alert Logic and AWS Guard Duty Integration?

Hi James — I have questions! What kind of sync functionality would help you here? For instance, do you archive GuardDuty findings in the AWS GuardDuty console to manage your workflow there? If so, ...

• View comment
• Matt Sayler
• April 30, 2019 16:19
• 0 votes