Aggregate functions in metrics
I am reaching out in relation to the following metrics post:https://www.googlecloudcommunity.com/gc/Community-...
•
in SIEM Forum
• Activity in Chronicle
metrics - data is being bucketed on a daily basis across a window of 30 days.
I am reaching out in relation to:https://www.googlecloudcommunity.com/gc/Community-Blog/New-to-Google-SecOps-U...
•
in SIEM Forum
• 
Kubernetes textPayload Split
HiWithin the Kubernetes Node parser, I am trying to split the textPayload into separate fields. The textPayloa...
•
in SIEM Forum
• 
SOAR connectors not ingesting data.
Can someone help with this? We have removed the old connector as its been deprecated, but the newconnector isn...
•
in SOAR Forum
• 
Which field exactly should the Dynamic List be matching against in a connector?
Hello, I have two connectors where they are not honoring my whitelist entries in the Dynamic List settings. I ...
•
in SOAR Forum
• 
Parse Nested Json
Hi,Would like to ask for your help on how can I parse this nested json in a udm{"type": "POTENTIAL_RISKY_ACTIV...
•
in SIEM Forum
• 
Array string
Hi,In my playbook (working with blocks) I am doing a check of known technologies so:In Input I have the string...
ingestion labels for cloudflare & zscaler internet access logs
what is the correct log type OR ingestion label to use in the chronicle forwarder configuration for the follow...
•
in SIEM Forum
• 
Exact Time Frame of Dashboard and Reports in SOAR
Is there any exactly Explanations or documentations about 'last 24hours','last month', 'Last Year' in SOAR Chr...
•
in SOAR Forum
• 
merge in parser extension overwrites the value instead of merging
I am writing parser extension and want to update security_result.description field.if [@computed][message] != ...
•
in SIEM Forum
• 
