Hi all, I am pretty new to SIEM and have only staged a few SolarWind LEM in my lab.
I have also went through the available reporting templates in Report Application Console.
May I know what are the keys things/recommended daily reports for the reporting application in LEM? (At least 3)
As far as i know:
1) Administrator/Local account logon failure attempts.
2) ?
3) ?
It would be much appreciated If you can provide recommendation more than just DAILY recommendation for reporting
Weekly and Monthly as well.