Adding log sources to the trusted log source group

If you do not want the IBM® QRadar® User Entity Behavior Analytics (UEBA) app to monitor and report certain log sources, you can add them to the UBA : Trusted Log Source Group. Adding log sources to the group stops the UBA app from monitoring them.

Procedure

  1. On the navigation menu ( Navigation menu icon ), click Admin.
  2. Click the Log Sources icon.
  3. Click Add.
  4. Configure the common parameters for your log source.
  5. Configure the protocol-specific parameters for your log source.
  6. Select the UBA : Trusted Log Source Group checkbox.
  7. Click Save.
  8. On the Admin tab, click Deploy Changes.