home home
Other Sites
  • ArcticWolf.com
  • Unified Portal
  • Arctic Circle Community
  • Technical Support Knowledge Base
Request a Demo Internal Documentation
  • Aurora Endpoint Security
  • Managed Detection and Response (MDR)
  • Managed Risk
  • Managed Security Awareness (MA)
  • Incident Readiness and Response
  • Arctic Wolf Unified Portal
  • MSP Portal
  • Authentication
  • Sensors, Scanners, and Log Collectors
  • Arctic Wolf Agent
  • Onboarding Portal
  • Active Response, Log Forwarding, and Security Monitoring
  • Active Directory
  • Cloud Security Posture Management (CSPM)
  • IT Service Management (ITSM)
  • Developer and OEM
  • Product Updates
  • Additional Information about Products and Services
  • Legacy Risk Dashboard
  • Legacy Analytics
  • English
  • 日本語
  • Deutsch
  • Français
Sign In
  • Aurora Endpoint Security
  • Managed Detection and Response (MDR)
  • Managed Risk
  • Managed Security Awareness (MA)
  • Incident Readiness and Response
  • Arctic Wolf Unified Portal
  • MSP Portal
  • Authentication
  • Sensors, Scanners, and Log Collectors
  • Arctic Wolf Agent
  • Onboarding Portal
  • Active Response, Log Forwarding, and Security Monitoring
  • Active Directory
  • Cloud Security Posture Management (CSPM)
  • IT Service Management (ITSM)
  • Developer and OEM
  • Product Updates
  • Additional Information about Products and Services
  • Legacy Risk Dashboard
  • Legacy Analytics
  • English
  • 日本語
  • Deutsch
  • Français
Sign In

Arctic Wolf Unified Portal

This guide describes how to use Raw Log Search.

Arctic Wolf Unified Portal
  • Unified Portal
    • Getting Started Video
    • Requirements
    • Unified Portal Access
    • Access to Other Portals
    • Display Settings
    • Tasks
      • View tasks
      • Complete a task
    • Aurora Security Assistant
    • Security Posture
      • View Your Coverage Score
      • View Suspicious Logins
      • View Top Login Failures
      • View Your Observation Pipeline
      • View Telemetry Health
      • View Your Risk Score
      • Risk Score Calculation
      • View IR Planner Details
      • Enroll in the Security Operations Warranty
    • Tickets and Alerts
      • Create a Unified Portal Ticket
      • Create an ITSM Ticket
      • Send a Malicious File to Arctic Wolf for Review
      • View Tickets
        • View Ticket Details
        • View Additional Context
        • View Related Tickets
        • Ticket Types
      • Tickets Table Filters
      • Reply to a Ticket
      • Reassign a Ticket
      • Close a Ticket
      • Custom Alerts
      • Security Investigations
    • Reporting
      • Dashboards
        • View Dashboards
        • Create a Dashboard
        • Duplicate a Dashboard
        • Edit a Dashboard
        • Create a Widget
        • Copy a Widget
        • Query Builder
        • Data Visualization Settings
        • Delete a Dashboard
      • View Report Schedules
      • View Report History
    • Security Journey
      • View a Security Focus
      • View SPiDR Details
      • Bookmark a SPiDR
      • Cyber Resilience Assessment
        • Getting Started Video
        • Methodology and Results
          • Value Calculation
          • Cyber Resilience Index
          • Progress Tracker
        • Create
        • Update
          • View Framework Groups
          • View Security Products
          • Update Framework Elements
        • Duplicate
        • Download Cyber Resilience Guide
        • View an Assessment Summary
        • Estimate Insurability
        • Download Assessment Details
          • Assessment Report
          • Insurability Rating Review
          • Change Logs
        • Collaborators
          • Invite a Collaborator
          • Edit Permissions
          • Reset Credentials
          • Download History
          • Delete a Collaborator
        • Manage Files
          • Add a File
          • Create a Folder
          • Download a File
          • Remove a File
    • Observation Pipeline
    • Data Explorer
      • Getting Started Video
      • License Options
      • Search Analyzed Logs
        • Run an Analyzed Log Search
        • Query Builder
        • Data Explorer Fields
        • View Analyzed Log Data
        • Manage Search Results
      • Saved Queries and Custom Alerts
        • Save a Query
        • View Saved Queries
        • Edit a Query
        • Delete a Query
      • Raw Log Search
    • Traffic Flow Data
    • Threat Intelligence
      • View Threat Intelligence
      • Threat Intelligence Feed
      • Download IoC Lists
    • Incident Response
      • Report an Incident
      • IR Planner
        • Create a Plan
        • Export a Plan
        • IR Planner Components
      • View Case Coverage
      • Readiness Touchpoints
        • Request Readiness Touchpoint
      • View Retainer Options
      • Download Runbooks
        • Download an Incident Response Runbook
        • Incident Response Runbook phases
      • View Security Breach Timeline
      • File Repository
        • Upload a File
        • Download a File
        • Delete a File
    • Managed Risk
      • View Risk Metrics
      • View Risks
        • Risks Table
        • Risk States
        • Risk Statuses
        • Risk Filters
          • Overview
          • Add a Filter
          • Remove all Filters
          • View Filter Sets
          • Save a Filter Set
          • Apply a Filter Set
          • Edit a Filter Set
          • Delete a Filter Set
        • Hide, Show, or Rearrange Table Columns
        • Change Table Row Spacing
      • View Risk Details
      • View Risk Group Details
      • View Risk Evidence
      • View Assets Impacted by Remediation
      • Create an ITSM Ticket for Risks
      • Edit Risks
        • Edit a Risk
        • Edit the Risk State
        • Assign a Due Date
        • Assign a Risk to a User
      • Export Risk Data
      • Export Remediation Data
      • Routine Tasks
      • FAQs
      • Feature Differences from the Risk Dashboard
      • Features Not Migrated from the Risk Dashboard
    • Data Collection
      • Health Statuses
      • Sensor Telemetry
        • Request a Physical Sensor
        • View Health
        • Filters
        • View Sensors
        • Upgrades
          • View Upgrade Schedule
          • Reschedule an Upgrade
          • Upgrade a Sensor Immediately
      • Scanner Telemetry
        • Request a Physical Scanner
        • View Health
        • Filters
        • View Scanners
        • View Scanner Information
        • View a Scanning Schedule
        • View Queued Scans
        • Configure Host Identification
        • Configure Vulnerability Scanning
        • Configure CGI Scanning
        • Configure Brute Force Scanning
        • Configure Scan Exclusions
        • Configure Ping Only Discovery
        • Configure Self-Scanning
        • Configure Credentialed Scanning
          • VMware ESXi
          • Linux
          • Windows
        • Add Host Identification DNS Server
        • Verify Scanning Health
        • Edit a Scanning Schedule
        • Remove Host Identification DNS Server
        • Remove a Scanning Schedule
        • Upgrades
          • View Upgrade Schedule
          • Reschedule an Upgrade
          • Upgrade a Scanner Immediately
      • Scan Schedules
        • View Scan Schedules
          • Scan Schedule Table
          • Scan Schedule Filters
          • Hide, Show, or Rearrange Table Columns
          • Change Table Row Spacing
        • View Scan Schedule Details
        • Create a Scan Schedule
        • Edit a Scan Schedule
        • Enable or Disable a Scan Schedule
        • Export Scan Schedule Targets
        • Force a Scheduled Scan to Rescan
        • Stop a Scheduled Scan
        • Remove a Scheduled Scan
      • Agent Telemetry
        • View Health
        • View Filters
        • View Agents
        • View Agent Details
        • View Agent Settings
        • Create an Agent Group
        • Delete an Agent Group
        • Assign Agent to a Different Agent Group
        • Edit Agent Group Settings
        • Export Agent Details
        • Download Agent
      • Cloud Sensor Telemetry
        • View Health
        • Filters
        • View Cloud Sensors
        • View Cloud Sensor Details
        • Add a Cloud Sensor
        • Update Cloud Sensor Credentials
        • Remove a Cloud Sensor
      • Cloud Scanner Telemetry
        • View Cloud Scanners
          • Cloud Scanners Table
          • Cloud Scanner Filters
          • Hide, Show, or Rearrange Table Columns
          • Change Table Row Spacing
        • View Cloud Scanner Details
        • Add a Cloud Scanner
        • Update Cloud Scanner Credentials
        • Remove a Cloud Scanner
      • Assets
        • View Assets
          • Assets Table
          • Asset Filters
            • Add a Filter
            • Remove all Filters
            • View Filter Sets
            • Save a Filter Set
            • Apply a Filter Set
            • Edit a Filter Set
            • Delete a Filter Set
          • Hide, Show, or Rearrange Table Columns
          • Change Table Row Spacing
        • View an Asset Profile
        • Apply a Tag
        • Edit the Name
        • Edit Asset Criticality
        • Edit the Category
        • Remove a Tag
        • Rescan an Asset
        • Export Asset Data
        • Delete Assets
      • Log Sources
    • Allowlist Requirements
    • Downloads
    • Organization Profile
      • Onboarding and Setup Tasks
      • Integrations
        • Active Response Integration
          • View Health
          • Filters
          • View Integrations
          • View Integration Details
          • Add Integration
          • Edit Integration
          • Enable or Disable Integration
          • Uninstall Integration
        • ITSM Integration
          • Integrate Your ITSM With the Unified Portal
          • View Integration Details
          • Edit Integration
          • Disable Synchronization
          • Remove Tenant Organization
          • Remove Integration
      • Alert Configuration Rules
        • View an Alert Configuration Rule
        • Manage Alert Configurations
          • Restricted Country User Allowlist
          • Denied Login Locations
          • Approved Login Locations
        • Request a New Rule
        • Request a Rule Update
        • Custom Alert Rules
          • Add a Custom Alert Rule
          • View a Custom Alert Rule
          • Enable or Disable a Custom Alert Rule
          • Edit a Custom Alert Rule
          • Delete a Custom Alert Rule
      • Notification Preferences
      • Tag Management
        • View Tags
        • Create a Tag
        • Edit a Tag
        • Delete a Tag
      • Contacts
        • Add a Contact
        • Edit a Contact
        • Export All Contacts
        • Remove a Contact
      • Escalations
        • View Your Escalation Policy
        • Update Your Escalation Policy
      • Federated Authentication
        • View Configurations
        • Configure
        • Update Credentials
        • Delete a Configuration
      • Aurora Endpoint Security Tenants
        • Add a Tenant
        • Edit Services for a Tenant
        • Access the Aurora Endpoint Defense Console
      • Sites Directory
        • Add a Site
        • Clone a Site
        • Edit a Site
        • Export All Sites
        • Remove a Site
    • Raw Log Search
      • User Guide
        • Run a Search
        • Search Results
        • Refine Search Results
        • View Past Search Results
        • Export Search Results
        • View Log Sources
        • Log Tags
        • Add a Tag to Log Sources
        • Remove a Tag from Log Sources
        • Query Syntax
      • Troubleshoot
Home ▸ Arctic Wolf Unified Portal ▸ Unified Portal ▸ Raw Log Search
Share this page
  • LinkedIn
  • X
  • Facebook
  • Email
Print page

Raw Log Search User Guide

This guide describes how to use Raw Log Search.

Target
  • Arctic Wolf Unified Portal
  • Query Syntax
  • Troubleshoot
Arctic Wolf Unified Portal Raw Log Search Managed Detection and Response (MDR) User Guide Public

Last updated: April 2, 2026

Previous Raw Log Search Next Run a Search
Related Links
  • Arctic Wolf Unified Portal
  • Query Syntax
  • Troubleshoot

Explore Topics

Aurora Endpoint Security Managed Detection and Response (MDR) Managed Risk Managed Security Awareness (MA) Incident Readiness and Response Arctic Wolf Unified Portal MSP Portal Authentication Sensors, Scanners, and Log Collectors Arctic Wolf Agent Onboarding Portal Active Response, Log Forwarding, and Security Monitoring Active Directory Cloud Security Posture Management (CSPM) IT Service Management (ITSM) Developer and OEM Product Updates Additional Information about Products and Services Legacy Risk Dashboard Legacy Analytics
Arctic Wolf Help Documentation
Privacy Policy
Terms of Use
Cookie Policy
Accessibility Statement
Information Security
Sustainability Statement
© 2026 Arctic Wolf Networks Inc. All Rights Reserved.