LogRhythm SIEM 7.20: Expanded Dashboard Visibility and Enhanced Data Ingestion

To maintain an effective self-hosted security strategy, security operations centers (SOCs) must invest in advanced tools that provide deep visibility, seamless data integration, and real-time insights.

As part of our latest quarterly product release, LogRhythm SIEM 7.20 delivers on these needs with exciting new updates that empower security teams to detect threats faster, analyze larger datasets, and seamlessly integrate data sources.

Let’s explore the key features in LogRhythm SIEM 7.20 and how they help security teams optimize their operations.

Increased Security Insights With Unrestricted Dashboard Visualizations

Security teams rely on dashboard visualizations to quickly assess risks and trends. Previously, LogRhythm SIEM dashboards had cache limitations that restricted users to querying only a subset of data. With LogRhythm SIEM 7.20, those barriers are gone. Dashboards can now visualize 80 times more data, ensuring unrestricted insights across logs.

Widgets in the new version now query the entire log store, enabling users to analyze large datasets over extended timeframes. This enhancement allows security teams to uncover unusual patterns and long-term trends with greater clarity and precision.

Additionally, the ability to switch between the old and new dashboard experiences ensures a seamless transition without requiring teams to rebuild their existing dashboards overnight.

Expanded JSON Listener for Seamless Data Ingestion

As security environments grow increasingly complex, integrating diverse data sources into your security information and event management (SIEM) solution is a must. LogRhythm SIEM 7.20 introduces an expanded JSON listener, allowing organizations to ingest data seamlessly from SaaS tools and other security pipelines.

With this enhanced capability, organizations can unify their security ecosystem, ensuring that critical log data from various sources is readily available for correlation and analysis. This streamlined integration reduces complexity and minimizes the time spent on data onboarding, allowing security teams to focus on threat detection and response. With richer data available from diverse platforms, dashboards are now more comprehensive, offering deeper insights for faster and more effective decision making.

Beat Addition & Improvements – Microsoft Azure and SentinelOne

For security teams using Microsoft Defender, LogRhythm SIEM 7.20 introduces tighter integration with Microsoft’s Graph API. A new and improved Beat ensures better log ingestion and normalization, making it easier to detect, report, and respond to threats coming from Microsoft Defender’s security solutions. Additionally, by leveraging the latest APIs from SentinelOne, customers can get deeper insight on EDR activity to better protect endpoints and users.

Improving MS Graph collection and normalization will enable security teams to properly monitor Microsoft services within LogRhythm SIEM, ensuring higher-fidelity detections and more effective visualizations for rapid response. These improvements also improve alerting within Defender-powered environments, strengthening your organization’s overall cybersecurity posture.

NetMon Expansion to 5,000 Applications with DPI

Understanding network traffic is critical for identifying potential threats and ensuring a secure infrastructure. Available as a virtual appliance or an add-on to a New-Scale or LogRhythm SIEM deployment, NetMon now delivers deeper visibility than ever, automatically identifying and categorizing traffic from nearly 5,000 applications using advanced classification methods and deep packet inspection (DPI). With over 1,000 new protocols supported, security teams can detect anomalies with greater accuracy and proactively respond to threats before they escalate.

With these expanded NetMon capabilities, security teams can achieve deeper network traffic visibility across their LogRhythm or New-Scale Security Operations Platform deployments. The advanced application-level analysis ensures greater accuracy in anomaly and threat detection, allowing organizations to proactively identify and mitigate risks. Additionally, real-time insights across both network and application layers enable teams to optimize security responses efficiently and stay ahead of evolving threats.

Why LogRhythm SIEM 7.20 Matters for Security Teams

With these latest innovations, organizations can stay ahead of evolving threats while simplifying security management. LogRhythm SIEM 7.20 delivers critical enhancements that empower security teams to:

• Analyze broader datasets with unrestricted dashboards.
• Integrate security data effortlessly with expanded JSON ingestion.
• Improve log normalization to ensure powerful and effective visualizations and alerting.
• Detect threats with greater accuracy using NetMon’s expanded DPI capabilities.

Ready to enhance your security operations? Download LogRhythm SIEM 7.20

Explore the new features of LogRhythm SIEM 7.20 and unlock next-level security enhancements today.

Existing customers can download LogRhythm SIEM 7.20 from Community. Information and documentation on all the latest enhancements are available in the LogRhythm SIEM Release Notes.