Skip to content

Data Engineering overview

Everything about the logs that feed your detections: volume, arrival delay, normalisation and uptime. Start here to see which logs need attention.

Ingest a day, logs healthy, average arrival delay, hosts reporting, percent normalised and parse warnings, with events by log, arrival delay and 48 hour uptime.
Ingest a day, logs healthy, average arrival delay, hosts reporting, percent normalised and parse warnings, with events by log, arrival delay and 48 hour uptime.
Healthy Arriving on time, at a normal volume, with the fields rules need
Degraded Arriving, but late, low, high, or with missing fields
Silent Nothing arrived for longer than its silent limit, 24 hours by default