Recently Viewed Topics
This document describes the LCE Web Query Client version 4.8 that is available for the Tenable Log Correlation Engine.
A working knowledge of Secure Shell (SSH), Log Correlation Engine (LCE), and SecurityCenter Continuous View (SecurityCenter CV) operation and architecture is assumed. Familiarity with general log formats from various operating systems, network devices, and applications as well as a basic understanding of Linux/Unix is also assumed.
The LCE Web Query Client is used to request event data from RESTful web services. The logs returned from queries are stored and normalized in LCE. Finally, the information may be searched in SecurityCenter CV and can be reviewed. The process to setup and configure the LCE Web Query Client begins with the configuration of the RESTful API instances that are to be queried.
Currently, the LCE Web Query Client supports: