How can you configure a log source to provide events to different domains?

Question

Options

• ACreate a saved search on the Network Activity tab to view events in specific domains.
• BUse the Assistant app to update the domain information for the log source.
• CUse custom properties to assign events from a single log source to different domains.
• DUse the Use Case Manager app to update building blocks to support multi domain events.

• A
  3% (1)
• B
  7% (2)
• C
  76% (22)
• D
  14% (4)

Explanation

To configure a log source in IBM QRadar SIEM V7.5 to provide events to different domains, administrators can use custom properties. Here's how it works: Custom Properties: Create and configure custom properties to tag events with specific domain Assigning Events: When events are ingested from a log source, these custom properties can be used to dynamically assign events to different domains based on predefined criteria. Domain Management: This approach allows flexibility in managing and segregating data from a single log source across multiple domains, ensuring that each domain receives the relevant

No community discussion yet for this question.