Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
You have used the SmartEvent GUI to create a custom Event policy. What is the best way to display the correlated Events generated by SmartEvent Policies?
A.
Open SmartView Monitor and select the SmartEvent Window from the main menu.
B.
In the SmartConsole / Logs & Monitor --> open the Logs View and use type:Correlated as query filter.
C.
In the SmartConsole / Logs & Monitor -> open a new Tab and select External Apps / SmartEvent.
D.
Select the Events tab in the SmartEvent GUI or use the Events tab in the SmartView web interface.
Viewing and Removing SAM Rules
Any SAM rule whether created from SmartConsole. SmartEvent. SmartView
Monitor. Command Line. or from an external application, can be viewed and
removed using the SmartView Monitor client application. To go to this tool-
• In the 'Logs & Monitor' view, click on the new tab'+' sign
• At the bottom of the left pane. under· External App'. click on 'Tunnel & User
Monitoring'
• The SmartView Monitor application will be launched
• In the menu of SVM. click on 'Tools /Suspicious Activity Rules'
So i think the correct answer is C
Correct is C
you need to enter the smartevent to create an event policy
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
[Removed]
Highly Voted 1 year, 4 months agoShahrouz
Most Recent 9 months, 3 weeks agorabbirobert
10 months, 1 week agonobuhide
11 months agogperes
1 year agoruank
1 year, 1 month agoGab_agl
1 year, 2 months agoGerdelmos79
1 year, 3 months ago