Step 4. Verify That AWS (CloudTrail) Collection Is Working

Document created by RSA Information Design and Development on May 9, 2016Last modified by RSA Information Design and Development on May 4, 2017
Version 6Show Document
  • View in full screen mode
  

This topic tells you what to check in Security Analytics to verify that you have configured AWS (CloudTrail) Collection correctly.

Return to Procedures

If the AWS Collection is not configured correctly, it will not work. In order to ensure the collection working, you can verify it in the Health & Wellness view.

Procedure

The following figure illustrates how you can verify that AWS (CloudTrail) collection is working from the Administration > Health & Wellness > Event Source Monitoring tab.

AWSESVerify.png

Access the Event Source Monitoring tab from the Administration > Health & Wellness view.
Find rsa_security_analytics_aws_log_collector in the Event Source Type column.
Look for activity in the Count column to verify that AWS (CloudTrail) collection is accepting events.

You are here
Table of Contents > AWS (CloudTrail) Collection Configuration Guide > Procedures > Step 4. Verify That AWS (CloudTrail) Collection Is Working

Attachments

    Outcomes