Verifying Asset Manager Log Activity on qRadar Server


To confirm that qRadar is capturing activity from Asset Manager Asset Manager . . .

  1. Log in to the qRadar server.
  2. Click Log Activity.
  3. Click Add Filter
    1. Quick Filter: Log Source (indexed)
    2. Value: Asset Manager Asset Manager
  4. Select an option under View to view the events coming from Asset Manager Command Center.
  5. At the bottom of the screen you will see the CEF Events generated from Asset Manager Command Center.

  6. Double click on any one of the events to see more details: