Verifying Asset Manager Log Activity on qRadar Server
To confirm that qRadar is capturing activity from Asset Manager Asset Manager . . .
- Log in to the qRadar server.
- Click Log Activity.
- Click Add Filter
- Quick Filter: Log Source (indexed)
- Value: Asset Manager Asset Manager
- Select an option under View to view the events coming from Asset Manager Command Center.
- At the bottom of the screen you will see the CEF Events generated from Asset Manager Command Center.
- Double click on any one of the events to see more details: