23.0 Viewing Change Guardian Events

You can extend Sentinel’s threat monitoring capability by integrating Sentinel with NetIQ Change Guardian. Change Guardian gives you the security intelligence you need to rapidly identify and respond to privileged-user activities that could signal a security breach or result in compliance gaps. It helps security teams detect and respond to potential threats in real-time through intelligent alerting of authorized and unauthorized access and changes to critical files, systems, and applications.

To receive Change Guardian events, the Change Guardian administrator must configure the Change Guardian server to send events to Sentinel. For more information, see Managing Event Destinations in the Change Guardian User Guide.

For information about viewing Change Guardian events, see Viewing Compliance to Configuration Policies in the NetIQ Sentinel User Guide.

You can also view Change Guardian reports, by importing reports from Change Guardian. For more information, see Creating Reports in the NetIQ Sentinel User Guide.