Hmm, this is a tricky one. I'm not too familiar with QRadar's log sources, but I think the audit events should be coming from the SIM Audit-2 log source.
upvoted 0 times
...
Log in to Pass4Success
Sign in:
Report Comment
Is the comment made by USERNAME spam or abusive?
Commenting
In order to participate in the comments you need to be logged-in.
You can sign-up or
login
Tasia
11 days agoYuriko
13 days agoStephaine
14 days agoJesusa
15 days agoLoren
17 days agoEvangelina
19 days ago