Viewing user activity

You can view user activity for IBM QRadar Risk Manager users.

1. Click the Log Activity tab. If you previously saved a search as the default, the results for that saved search is displayed.
2. Click Search > New Search to create a search.
3. In the Time Range pane, select an option for the time range you want to capture for this search.
4. In the Search Parameters pane, define your search criteria:
   1. From the first list, select Category.
   2. From the High Level Category drop-down list, select Risk Manager Audit.
   3. To refine your search, select a category from the Low Level Category drop-down list.
5. Click Add Filter.
6. Click Filter to search for QRadar Risk Manager events.