Introduction

From the Field Effect MDR SIEM you can view data on your network sensors, at a deeper level of detail than the MDR Portal. While this data is more granular, these dashboards are read-only. The Dashboard can be access from all sensor types:

• Virtual MDR SIEM - hostd by Field Effect 

• Physical MDR SIEM: installed into your organization's infrastructure while deploying Field Effect MDR.

• Virtual MDR SIEM - hosted within your organization's virtual environment.

Logging into the MDR SIEM (Appliance Dashboard)

Field Effect-Hosted Virtual Sensor

For this sensor type, you must:

1. be connected to the same network as your sensor and 
2. have an endpoint agent for the appropriate organization installed on the device.

The MDR Dashboard can be accessed from within the MDR Portal. Once logged in, navigate to the Status page and click on the MDR SIEM link:

(For Partners) Field Effect-Hosted Virtual Sensor

If you are a Field Effect partner, you can access each end client Dashboard from the Clients page. Select a client in the table to open the details pane and click on the sensor name:

Physical Appliance

To log in, you must be connected to the same network as your sensor, either on-site or through a VPN connection. Once on the correct network, navigate to the MDR SIEM's IP address in your internet browser. If you are unsure of your appliance’s IP address, contact support@fieldeffect.com.

You'll be taken to the MDR SIEM’s login page (shown above), where you can log in using your MDR Portal credentials.

Self-Hosted Virtual Sensor

This follows the same procedure as the physical sensor: navigate to the MDR SIEM's IP address in your internet browser and log in using your MDR Portal credentials. Also, like the physical sensor, you must be connected to the same network as your sensor.