Data Explorer license options

Data Explorer is a licensed Managed Detection and Response (MDR) add-on that lets you search analyzed log data. Each license option controls what data is available and whether you can access additional reporting features.

The Arctic Wolf® Unified Portal includes several reporting features that are based on analyzed logs. These logs are generated as part of the Arctic Wolf MDR service. In Data Explorer, you can search all analyzed logs over a specific time period. Data availability is based on your current license.

Note:
  • Your Data Explorer license affects Unified Portal features outside of Data Explorer. For example, the time range options that appear in home page widgets and dashboards.
  • If you are an MSP user, your access to Data Exploration is granted in the MSP Portal by an MSP administrator.

A full Data Explorer license provides 14, 30, or 90 days of data availability. Data Explorer Lite provides access to the last three days of data.

Feature Feature description Data Explorer Lite 14-day license 30-day license 90-day license

Data Explorer

Search analyzed logs generated by the Arctic Wolf MDR service.

3 days of analyzed logs

14 days

30 days

90 days

Custom dashboards

Create custom dashboards with widgets that visualize the data that matters to you.

Can view, create, and edit custom dashboards

Can view, create, and edit custom dashboards

Can view, create, and edit custom dashboards

Can view, create, and edit custom dashboards

Custom alerts

Configure custom alerts for the data you want to monitor. To enable custom alerts, set a recurring schedule for a saved Data Explorer query.

Limit of 50

Included

Included

Included

Self-service reports

Create self-service report schedules to snapshot live dashboards at regular intervals.

Daily schedule; 3-day data window

Included

Included

Included

Raw Log Search access

Search raw logs ingested by Arctic Wolf for security monitoring.

Not included

Included

Included

Included

Arctic Wolf Query Language (AQL)

Write advanced queries using AQL, a pipe-based syntax for filtering, aggregating, and transforming analyzed log data.

Included

Included

Included

Included

AI Mode

Automatically generates a summary with a narrative and data visualizations when you run a search.

Not included

Included

Included

Included