Log Collection AWS: Step 4: Verify That AWS (CloudTrail) Collection Is Working

Document created by RSA Information Design and Development on Jul 29, 2016
Version 1Show Document
  • View in full screen mode
 

This topic tells you what to check in Security Analytics to verify that you have configured AWS (CloudTrail) Collection correctly.

Return toProcedures

If the AWS Collection is not configured correctly, it will not work. In order to ensure the collection working, you can verify it in the Health & Wellness view.

Procedure

To verify that AWS (CloudTrail) collection is working from the Administration > Health & Wellness > Event Source Monitoring tab:
AWSESVerify.png

  1. Access the Event Source Monitoring tab from the Administration >Health & Wellness view.
  2. Find rsa_security_analytics_aws_log_collector in the EventSource Type column.
  3. Look for activity in the Count column to verify that AWS (CloudTrail) collection is accepting events.
You are here: AWS (CloudTrail) Collection Configuration Guide > Procedures > Step 4: Verify That AWS (CloudTrail) Collection Is Working

Attachments

    Outcomes