Get Started with the Alert Logic Console

The Alert Logic console provides a universal navigation experience for all Alert Logic customers, regardless of subscription level. The Alert Logic console displays only the tabs and pages appropriate to your subscription level. This topic describes all possible tabs and pages, but specifies the subscriptions that generate the tabs and pages.

Navigation menu

The navigation menu is located on the left side of the page under a menu icon (), and the options are nested.

To navigate between pages:

1. Click the menu icon () to see the navigation menu.
2. Click on a navigation group (for example, Respond) to expand the options under that group.
3. Click on a navigation item (for example, Incidents) that you want to explore further.
4. Click the menu icon () again to collapse the menu and view the page.

Respond

Incidents

The Incidents page displays information about:

• Incidents generated from multiple sources, like Network IDS, Log Management, and Amazon GuardDuty
• How to use that information to manage and close incidents
• How to secure your environments

This page requires an Alert Logic MDR Professional or an Alert Logic MDR Enterprise Enterprise subscription. For more information about subscriptions and add-ons, see Get Started with Alert Logic Subscriptions and Add-ons.

Exposures

The Exposures page provides you with the information you need to analyze and address exposures in your environment. Alert Logic lists exposures found in your deployments; provides detail about the exposure, evidence, and affected assets; and lists remediations to resolve an exposure or a group of exposures.

Health

Ensure that your deployments are correctly configured from the Health page, which provides this information:

• Summary of your environment
• Detailed health information regarding your networks, appliances, and agents with suggested configuration remediations
• Option to subscribe to health summary alerts

Investigate

Search

The Search tab allows you to search for:

• Search—requires a Professional or an Enterprise subscription
• Events—requires a Professional or an Enterprise subscription

Topology

The Topology page displays an interactive diagram that uses color-coded icons to display the distribution of exposures and threats across your network assets. For more information, see Topology.

Vulnerability Library

Alert Logic lists all of the scan content that Alert Logic scanners can check for in the Vulnerability Library. You can easily search for and view information on a specified vulnerability that Alert Logic scanned for, and see whether it impacts assets in your environment.

Validate

Reports

The Reports tab provides access to data related to exposures and incidents Alert Logic found within your deployments. Report data is cached and refreshed every 30 minutes. As a result, reports can take up to 30 minutes to reflect the latest data seen in the console.

Depending on your Alert Logic subscriptions, you will see some or all of the following report types:

• Risk Reports—Provide convenient access to analysis, statistics, assessments, and trending data related to your security and health posture, threat risk index, and enterprise risks. Each report provides interactive filtering options, visual representations of the data, and informative tooltips. All subscriptions see this content.
• Threats Reports—Provide convenient access to analysis, statistics, assessments, and trending data related to threats and incidents detected from your subscribed products and services. Each report provides interactive filtering options, visual representations of the data, and informative tooltips. This content requires a Professional or Enterprise subscription.
• Vulnerabilities Reports—Provide convenient access to analysis, statistics, assessments, and trending data related to vulnerabilities discovered in your environment based on scanning outcomes. Each report provides interactive filtering options, visual representations of the data, and informative tooltips. All subscriptions see this content.
• Remediations Reports—Provide convenient access to analysis, statistics, assessments, and trending data related to configuration issues and security exposures from your subscribed products and services. Each report provides interactive filtering options, visual representations of the data, and informative tooltips. All subscriptions see this content.
• Compliance Reports—Provide convenient access to analysis, statistics, and trending data related to compliance assessment status and audit preparedness from your subscribed products and services. Each report provides interactive filtering options, visual representations of the data, and informative tooltips. All subscriptions see this content.
• Service Reports—Provide convenient access to data related to entitlements, capability usage, users and security content for your subscribed products and services. Each report provides interactive filtering options, visual representations of the data, and informative tooltips. This content requires a Professional or Enterprise subscription.
• WAF Reports —Provide convenient access to activity and policy information for the Alert Logic Managed Web Application Firewall (WAF) service. This content requires WAF purchased as an add-on.

PCI Scan Disputes

File a dispute in the PCI Scan Disputes page if a PCI scan reported findings that you want to dispute, such as if a scan identifies a false positive vulnerability.

Configure

Deployments

Configure Deployments for AWS, Azure, Google Cloud Platform, and Data Center protected environments. All subscriptions see this content.

Log Management

The Log Management page has configuration settings for Log Management policies and Log Management Policies. This content requires a Professional or an Enterprise subscription.

Certificate and Keys

Set up Certificates and Keys for your assets. This content requires a Professionalor an Enterprise subscription.

WAF

Set up Alert Logic Managed Web Application Firewall (WAF). This content requires an Enterprise subscription or a Professional subscription with WAF purchased as an add-on.

Application Registry

The Application Registry provides an intuitive and efficient way to integrate multiple third-party applications that can generate logs. Application Registry is a repository of platform integrations in your Configuration group in the Alert Logic console. Integration with third-party applications adds administrative and security value to your organization. Application Registry is only available for Professional and EnterpriseManaged Detection and Response customers.

Endpoints

The Endpoint Protection page provides access to Extended Endpoint Protection functionality, which helps you control threats and manage incidents from employee workstations, points of sale, servers, and more.

PCI Scanning

Use the Payment card industry (PCI) scanning page to schedule PCI compliance scans, view the results of those scans, and then work to resolve vulnerabilities and prove compliance to auditors.

Connections

Connections is a convenient feature that allows Alert Logic to send real-time data directly to a third-party application. You can configure templated connections in the Alert Logic console to send alert notifications to any public-facing HTTP endpoint.

Manage

Integrations

Users

The User settings page allows you to manage user account settings, such as your name, contact information, and password. User accounts with the administrator role can manage the details for other users in their organization.

Notifications

Configure Notifications to get an email about threats, changes, and scheduled events in your environment so you can respond quickly.

Service Status

The Service Status page allows customers to monitor the status of their subscribed region and product capabilities. Alert Logic provides updates for incidents in progress, including the overall status of Alert Logic regions and products, statuses for individual product capabilities, and details about past incidents.