View LogRhythm drill down events

---
title: View LogRhythm drill down events
description: View the related raw or base events for a LogRhythm alarm in the security incident.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/drilldown-events.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Additional configurations for the LogRhythm integration, LogRhythm Overview, Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# View LogRhythm drill down events

View the related raw or base events for a LogRhythm alarm in the security incident.

## Before you begin

Role required: sn\_si.admin

## About this task

As a security analyst you can view the related raw or base events for a LogRhythm alarm without having to go back to the LogRhythm console. You can do this by going to a related list that contains all the drill-down events on the SIR incident.

## Procedure

1.  Navigate to **All** > **LogRhythm Integration** > **LogRhythm Drilldown Events**.


**Parent Topic:**[Additional configurations for the LogRhythm integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/configure-system-and-troubleshooting-properties.md)