Search across all raw log sources · 0 events indexed
Active investigation
Query syntaxSearch plain text or use field:value with AND and OR. AND binds first. Quote a field value for exact equality, for example host:"SECINTEL-WS042". Time filters use UTC. Unsupported fields and syntax keep the previous results.
SIEM