How can chronicle SIEM be used for storing data of multiple tenants?
We are looking to provide an MSSP type of service and build an XDR service, currently looking to explore how d...
•
in SIEM Forum
• Activity in Chronicle Forums
How to - Chronicle feature request - SIEM? SOAR?
Is there a Chronicle feature request form? Or a Chronicle feature request forum with voting?I searched in the ...
•
in SOAR Forum
• 
Multiple playbooks cannot be opened simultaneously
Hi.I have a collection of playbooks that I want to initiate whenever a new case is opened.One playbook utilize...
•
in SOAR Forum
• 
Get Hostname from IP address
Hi,I am trying to get the internal hostname from an internal IP address in SOAR.Is there any action which can ...
•
in SOAR Forum
• 
MS Teams to see Case creation & closure
I'm working on a playbook that will utilize our MS Teams integration to post in a specific channel (Send Messa...
•
in SOAR Forum
• 
Problem with outcome aggregation (array) for a multiple-event rule
Hello,I struggle with the outcome section for a rule i'm working on at the moment. I looked in the documentati...
What events Does the `Unix system` parser actually parse?
I have a situation where I need to advise some clients and users that the default `Unix System` parser will pa...
•
in SIEM Forum
• 
how to develop the parser
Hi All,I am very much looking forward to learning more about parsers, but we do not understand how to develop ...
•
in SIEM Forum
• 
Executed CLI commands and NGINX logs to Chronicle
Hi,I want to ingest 2 different types of logs from GCP to Chronicle SIEM.1) executed commands on GCP projects ...
•
in SIEM Forum
• 
Chronicle Forwarder data recovery
In the event a forwarder crashed, let's say 24-48 hours of downtime.How can we recover the events that were me...
•
in SIEM Forum
• 
