Displaying log sources

A log source is any external device, system, or cloud service that is configured to either send events to your IBM QRadar system or to be collected by your QRadar system. You can display the log sources that are automatically discovered.

Procedure

  1. Click Admin.
  2. On the navigation menu, click Data Sources.
  3. Click the Log Sources icon.

Results

Use the IBM QRadar Use Case Manager app to visualize log source type coverage per rule. You can also use the app to identify gaps in rule coverage from content extensions.

Download the app at the IBM® Security App Exchange (https://exchange.xforce.ibmcloud.com/hub).