Hello everyone,

It's contest time! We're excited to announce our first ever contest on this forum, the "Log360 product pro" challenge.

Over the last several weeks, we collected the questions that you all frequently asked us, and answered them right here in our community. You can find all of the posts (linked below) on our EventLog Analyzer forum.  So if you were paying attention, it's time to prove what a pro you are, and stand a chance to be one of our three lucky winners who win a $25 Amazon gift card.

The rules are pretty simple:

And that's it! The first person to get all three questions right wins an assured gift card of $25. We'll also select two other winners randomly for the $25 gift cards. Multiple replies will not be counted. The contest closes on 30th June, and winners will be announced on 1st July.

Here are the contest questions:

1. What is the name of the page where you can enable/disable correlation rules?

a. Enable/Disable Rules

b. Manage Rules

c. Control Rules

2. Which of the below STIX/TAXII threat feeds does the product process?

a. AlienVault OTX

b. Hail a TAXII

c. Both (a) and (b)

3. You can forward incident information to the following external help desk software:

a. ServiceDesk Plus, ServiceNow, Jira Service Desk, Zendesk, Kayako, BMC Remedy Service Desk

b. ServiceDesk Plus, ServiceNow, Kayako, BMC Remedy Service Desk, TeamSupport

c. Jira Service Desk, Zendesk, Kayako, Vision Helpdesk, BMC Remedy Service Desk

If you haven't been following our weekly feature closely, it doesn't matter. You can access all the topics right here:

TWTQ: Correlation field-based conditions

TWTQ: Applying rule to select users

TWTQ: Selecting and enabling correlation rules for your business

TWTQ: Correlation threshold limit

TWTQ: About the STIX/TAXII feed processor

TWTQ: Accessing threat feed alerts

TWTQ: Correlation rules vs. alert profiles

TWTQ: The correlation dashboard

TWTQ: Automatic ticket assignment

TWTQ: Customizing correlation reports

TWTQ: Enable and disable correlation rules, alerts, and reports

TWTQ: Conducting forensic investigations with correlation reports

TWTQ: Integrating with external help desk software

TWTQ: In-built ticketing console views

TWTQ: Importing log files to EventLog Analyzer

TWTQ: Scheduling log file imports

TWTQ: Custom log parsing

Do some of these features look new to you? You may be using an older version of the product.

Now, go ahead and post your answers by replying to this post!