Add a tag to log sources

You can add tags to organize your log sources for future searches.

Folgende Ressourcen werden benötigt:

  • A full Data Explorer license.

    For more information, see Data Explorer license options.

  • Administrator permissions for the Arctic Wolf Unified Portal.

    You must be a primary or secondary contact. If you require this level of access, submit your request to a primary or secondary contact in your organization.

  1. Melden Sie sich bei Arctic Wolf Unified Portal an.
  2. Klicken Sie im Navigationsmenü auf Datenerkundung > Rohprotokollquellen.
  3. Optional: To limit the list of log sources, in the Filter field, enter the keyword or the name of a tag.

    See Log source tags for more information.

  4. Select the log sources that you want to tag.
  5. Click the Add or remove a custom tag field, and then enter the name of a new custom tag or select an existing custom tag.
    Note: You cannot manually add a system-assigned tag to a log source. If a log source is missing firewall or Active Directory log sources and it does not have the related firewall or active directory tags, contact your CST at security@arcticwolf.com.
  6. Click Add Tag.

    The custom tag appears in the Assigned Tags column for the log sources that you selected.