Show & Tell

Ability to Modify Alert Disposition After ClosureCurrently, if an alert is mistakenly closed as “True Positive” instead of “False Positive,” there is no option available to revert or modify the disposition after closure.Request:It would be very helpful if Securonix could provide an option to edit/change the alert disposition after closure, especially for analyst operational errors or review corrections.

Hello, We have recently onboarded Cloudflare audit logs and was instructed by a technician that we could also bring in Cloudflare WAF logs on the same data source. It has been enabled on the application, but we are not seeing the WAF logs. Has anyone else ever had this issue? Thank you,

We noticed a log source searchable period has been showing "16hr in future - 91 days ago" for the past 4-5days. How do we fix this?

Following from our announcement re DPM Flex Consumption, our mechanism to all our customers to optimize their data ingestion for effectiveness, efficiency and efficacy - here’s a sneak preview of the billing dashboard that is expected to ship in the December platform update.  You’ll be able to see both total consumption in absolute GB/d, and also billed consumption in terms of the weighted “cost” of each pipeline, giving you visibility of how your DPM effectiveness changes over time and plenty of warning if you are approaching your committed limit.  More information to come and always happy to answer questions.   

For all our customers who participated in the Search Agent Early Access that ends Dec 31 2025 -  I’d like to extend my sincere thanks for your participation in the Search Agent Early Adopter Program over the past ten months. Your engagement and thoughtful feedback have been instrumental in shaping this capability - helping us deliver three progressive releases, the most recent in September R1 2025.Your input has driven tangible improvements in accuracy, performance, and user experience, transforming the original concept into a robust and intuitive feature.As we prepare to close the Early Adopter phase in December 2025 and transition Search Agent to general availability, we’d greatly value your final feedback to help us fine-tune the GA experience.Please take a few minutes to share your perspective by answering the brief questions below - we are happy to talk through your experience if you’d rather discuss: Does your team

Almost all Securonix SIEM customers are now enabled for Security Alert Center, and with it (as long as you have approved AI components) the Response Agent - have you tried it yet? Any feedback welcome. We estimate it averages about 20min time saved per violation - do you agree?