Managing network monitoring tools

You can manage network monitoring tools for the IBM® QRadar® User Behavior Analytics (UBA) app.

About this task

If you want to monitor the use of network capture, monitoring or analysis program usage, make sure the programs are listed in the UBA : Network Capture, Monitoring and Analysis Program Filenames reference set. You must then enable the UBA : Network Capture, Monitoring and Analysis Program Filenames rule.

1. On the navigation menu ( ), click Admin.
2. In the System Configuration section, click Reference Set Management.
3. On the Reference Set Management window, select the UBA : Network Capture, Monitoring and Analysis Program Filenames reference set.
4. Click View Contents.
5. To add an application to manage, click Add and enter the values in the box.
6. To remove an application, select an application and click Delete.

What to do next

Enable the UBA : Network Capture, Monitoring and Analysis Program Filenames rule.