Log source tags

Tags are a convenient way to organize your log sources for future searches. You can create custom tags to group log sources. For example, you can group log sources by these tags:

  • The role of the server or the type of device. For example, database server, web server, switch, router, access point.
  • Location. For example, country, city, or site.
  • Cluster name or high availability pair.
  • Environment. For example, development, test, or production.
  • Cost center, business unit, or department.

There are also system-assigned tags that you use to refine your search. These tags are automatically assigned to your log sources based on the parser configured in the Arctic Wolf system.

Tags are listed in the Assigned Tags column.

Note:
  • If the tag is a custom tag, you can click X to remove the tag from a log source.
  • If the tag is system-assigned, you cannot remove or duplicate it.
  • You cannot manually add a system-assigned tag to a log source. If a log source is missing firewall or Active Directory log sources and it does not have the related firewall or active directory tags, contact your CST at security@arcticwolf.com.