This topic tells you what to check in Security Analytics to verify that you have configured AWS (CloudTrail) Collection correctly.
Return to Procedures
If the AWS Collection is not configured correctly, it will not work. In order to ensure the collection working, you can verify it in the Health & Wellness view.
The following figure illustrates how you can verify that AWS (CloudTrail) collection is working from the Administration > Health & Wellness > Event Source Monitoring tab.
Access the Event Source Monitoring tab from the Administration > Health & Wellness view.
Find rsa_security_analytics_aws_log_collector in the Event Source Type column.
Look for activity in the Count column to verify that AWS (CloudTrail) collection is accepting events.