Getting Started

Everything needed to go from nothing to a working deployment with data flowing, a search that returns results, and a detection that raises a ticket.

Start here

• Quickstart: the first hour: sign in, connect a source, confirm data is arriving, search it, see a detection, and set up a notification.
• Key Concepts: the vocabulary of the platform, defined before you meet it in the interface.

Then

• Fluency Web Interface: accessing the interface, signing in, and finding your way around the navigation.
• How Data Gets In: the ingestion methods available, and how to plan which to use for each log source.

Where to go next

Once data is arriving, Data Collection and Integrations cover connecting the rest of your sources, Platform covers shaping the data in flight, and Search and Detections cover working with it.