7 docs tagged with "enrichment-rules"

Enrich logs with AWS EC2 instance tags using AWS resource enrichment, with setup for OpenTelemetry, Fluent Bit, and AWS Lambda.

A mining-pool domain curated into Coralogix Unified Threat Intelligence the day it was published became two confirmed cryptominer true positives at two customers, each found and reported the same day.

Add business, operational, or security context to logs with Custom Enrichment, mapping field values to data from an uploaded CSV file.

Append contextual fields to your logs automatically during ingestion or dynamically at query time using Coralogix Data Enrichment.

Use Geo Enrichment to add IP-based geographic fields such as country, city, ASN, and geo_point to your logs for querying and visualization.

Coralogix enables you to enrich and filter your logs using additional context from a lookup table. For example, enrich user activity logs with the user’s department and then retrieve logs of all users in the Finance department. A lookup table, also known as a reference table, is a specific type of data structure used to simplify data lookup operations. It's a table that contains a set of values or information that can be used to quickly find corresponding values in another dataset. Lookup tables are especially useful when you want to map one value to another, such as converting a code to a meaningful description.

Unified Threat Intelligence enriches streamed logs with indicators of compromise from validated threat feeds, with sources, indicator types, and use cases.