I hope you can help me out.
I would like to find out which and how many of the different applications are currently connected to our SIEM and deliver log events. I would also like to receive the IP addresses of the different applications.
I would also like to find out whether the applications deliver their log events to our SIEM or whether they are picked up by the SIEM.
Do you have any idea how I could solve this? Can I output all of this in one report?