Execution Logs¶

The system records key information each time a SIEM detection rule is executed, including execution time, status, duration, the executed DQL statement, the number of bytes scanned, and the number of lines, etc., which are ultimately presented uniformly through the execution log explorer.

List¶

On the execution logs list page, you can view all execution log records.

You can manage via the following actions:

• Filter by detection rule name, ID, or execution duration;
• Search and locate via log name.

Details¶

By clicking on a log entry, the corresponding details page will slide out. You can view the basic information and extended attributes of that execution log entry.