Data Explorer

You can use データエクスプローラ to gather information about recent system and network events and user activities.

With データエクスプローラ, you can search through analyzed logs, which are generated as part of the Arctic Wolf® Managed Detection and Response（MDR） service. Analyzed logs are parsed, normalized, and enriched logs from the Arctic Wolf observation pipeline.

Note: Analyzed logs are made available in the Unified Portal after Arctic Wolf has reviewed the logs and completed any necessary follow-up actions. As a result, some of the most recent data might not be visible in データエクスプローラ right away.

How far back you can search depends on your データエクスプローラ license. For more information, see データエクスプローラ license options.

You can search analyzed logs using the Query Builder interface to build queries with guided operators, or using the , a pipe-based syntax for advanced queries. If your organization has access to AI Mode, you can also run natural language searches. For more information, see /ja-jp/arctic-wolf-unified-portal/unified-portal/data-explorer/search-analyzed-logs/aql-reference.

When using AI Mode, your search results automatically include a Summary Card with a formatted narrative highlighting key domains, IP addresses, and timeframes, as well as automatically generated pie or line charts based on the data. When using the Query Builder or , you can click Summarize to generate a narrative summary, visualizations, and recommended actions. For more information, see Summarize search results with Aurora Security Assistant.