Finding the S3 bucket that contains the data that you want to collect
You must find and note the region for S3 bucket that contains the data that you want to collect.
- Log in to the AWS Management Console as an administrator.
- Click Services, and then go to S3.
- From the AWS Region column in the Buckets list, note the region where the bucket that you want to collect data from is located. You need the region for the Region Name parameter value when you add a log source in IBM® Security QRadar® Log Insights.
- Enable the check box beside the bucket name, and then from the panel that opens to the right, click Copy Bucket ARN to copy the value to the clipboard. Save this value or leave it on the clipboard. You need this value when you set up SQS queue permissions.
Creating the SQS queue that is used to receive ObjectCreated notifications.