Custom alert/escalation based on SIEM queries | Voters

Custom alert/escalation based on SIEM queries

Daniel Burrows

I want to create a custom alert/escalation based on SIEM queries, e.g, using SIEM queries to create an alert/escalation when specific accounts are logged into, without using the scheduled reports

March 4, 2026

Rylan Hutchins

I would also like to create custom alerts for non-intrusion related items. One of our clients requested alerting off of some syslog data we've been seeing, and sadly we're unable to assist until a change like this occurs.