This topic tells you what to check in Security Analytics to verify that you have configured AWS (CloudTrail) Collection correctly.
If the AWS Collection is not configured correctly, it will not work. In order to ensure the collection working, you can verify it in the Health & Wellness view.
- Access the Event Source Monitoring tab from the Administration >Health & Wellness view.
- Find rsa_security_analytics_aws_log_collector in the EventSource Type column.
- Look for activity in the Count column to verify that AWS (CloudTrail) collection is accepting events.