Step 4. Verify That AWS (CloudTrail) Collection Is Working

Document created by RSA Information Design and Development on Jul 23, 2016Last modified by RSA Information Design and Development on Sep 14, 2016
Version 4Show Document
  • View in full screen mode
 

This topic tells you what to check in Security Analytics to verify that you have configured AWS (CloudTrail) Collection correctly.

Return to Procedures

If the AWS Collection is not configured correctly, it will not work. In order to ensure the collection working, you can verify it in the Health & Wellness view.

Procedure

The following figure illustrates how you can verify that AWS (CloudTrail) collection is working from the Administration > Health & Wellness > Event Source Monitoring tab.

AWSESVerify.png

Access the Event Source Monitoring tab from the Administration > Health & Wellness view.
Find rsa_security_analytics_aws_log_collector in the Event Source Type column.
Look for activity in the Count column to verify that AWS (CloudTrail) collection is accepting events.

You are here: AWS (CloudTrail) Collection Configuration Guide > Procedures > Step 4. Verify That AWS (CloudTrail) Collection Is Working

Attachments

    Outcomes