You have used the SmartEvent GUI to create a custom Event policy. What is the best way to display the correlated Events generated by SmartEvent Policies?
You have used the SmartEvent GUI to create a custom Event policy. What is the best way to display the correlated Events generated by SmartEvent Policies?
The best way to display the correlated Events generated by SmartEvent Policies is to open the Logs View in the SmartConsole under Logs & Monitor and use the query filter type:Correlated. This allows you to directly access and view events that have been correlated by the system.
Correct answer is B
Correct answer is B - https://community.checkpoint.com/t5/Management/Question-about-Log-type-Correlated/m-p/86709
B is correct
I guess B is right (viewing the correlated events) As C is only for creating the event policies, not for viewing the results in real time.
Correct Answer is B
The correct is B, it doesn't exist a smartview option
Viewing and Removing SAM Rules Any SAM rule whether created from SmartConsole. SmartEvent. SmartView Monitor. Command Line. or from an external application, can be viewed and removed using the SmartView Monitor client application. To go to this tool- • In the 'Logs & Monitor' view, click on the new tab'+' sign • At the bottom of the left pane. under· External App'. click on 'Tunnel & User Monitoring' • The SmartView Monitor application will be launched • In the menu of SVM. click on 'Tools /Suspicious Activity Rules' So i think the correct answer is C
Correct is C you need to enter the smartevent to create an event policy