When are my SIEM rules running?

When looking at SIEM > Rules & Detections > Rules Editor, I can see when I created a rule or updated it.  

When looking to see when it last ran or when it will run next all I can find is this somewhat disappointing chart (image) which purports to show  "Matches," "Rule Runs" and "Run Errors."

Chris_B_0-1733958125850.png

In the image above there's no hover - tool-tip or other info I can see to show me a timestamp of the rule run. 

What is a definitive way to find the history of my runs per rule and when the rule is next scheduled to run?

 

thanks

 

Solved Solved
0 10 424
1 ACCEPTED SOLUTION

Chris, I recommend you check the Detection API for what you want. The GetDetection method returns this information for you:

 
 




View solution in original post

10 REPLIES 10