Configuring rule event count setup in QRadar Risk Manager

You can set up rule count to monitor rule interactions and generate rule reports.

Before you begin

Download the most recent adapter bundle from FixCentral, and install it on your IBM QRadar managed host.

Procedure

  1. Configure OPSEC applications in the Check Point SmartDashboard.
  2. Create a log source in QRadar.
  3. Configure Configuration Monitor in QRadar Risk Manager. Discover and backup devices in Configuration Monitor.
  4. Complete the configurations to view rule counting.

What to do next

Configuring OPSEC applications in the SmartDashboard