SIEM Basics: 1.2 Guided Exercise

I opened up the date field to include more than the time frame it says to use and there’s still no level 5 issues:

I just ran though the lab and it works as expected.

In this part of the lab you are no longer looking at old data. First you run a script an let it complete. You then set the date to “Last 15 minutes” where you will find both level 5 an level 10 alerts because we just generated them with the attack script.

Please follow all lab instructions and you should have success in completing the questions :slight_smile: