Hi All, we have upgraded the version to 11.5 , by checking in
Investigate --> Events --> custom date is not there . Please guide me on
this and how to get the logs for defined time period.
Hi all, We integrated AWS S3 bucket logs to SIEM using S3universal
plugins. If servers logs are pushed to S3 , we can get Linux servers
logs to on -premises SIEM ? If it is which parser it will Match . Please
someone guide me on this...