Chronicle Best Practices

Discussion List

• 
  How the grouping of alerts happening if am using arcsight SIEM ?

  I know the grouping based on the entities and the time frame. to be more precise which time will …

  Answered ✓ sankarakumar R 31 views 3 comments 0 points Most recent by ShakedTal May 2021Chronicle Best Practices
• 
  How to Use Output from a Block as Input for Another Block

  Someone asked this in the Siemplify Community Slack, so I thought it might be helpful to document i…

  Cyrus Robinson 22 views 6 comments 1 point Most recent by Cyrus Robinson April 2021Chronicle Best Practices