16.2 Viewing Assessment Events in Sentinel

For information about settings required to enable Sentinel to receive assessment events from Secure Configuration Manager, see Receiving Compliance Details from Secure Configuration Manager in the Sentinel Administration Guide.

  1. Open a browser to the Sentinel URL.

    The URL must be in the format https://<Sentinel IP Address>:<Port>. For example, 162.99.123.245:1234.

    NOTE:This is the destination server specified in the Destination Server field for the integration configuration. For more information, see Configuring the Basic Settings for SIEM Integration.

  2. Log in to Sentinel using valid Sentinel user credentials.

    You can also use the credentials that you specified for Destination Server Credentials in the Core Services Configuration Utility. However, these credentials have administration privileges to enable configuration, and you do not need such privileges to view assessment events in Sentinel. Instead, you should create separate user accounts for Secure Configuration Manager users who only need to view events.

For more information about viewing Secure Configuration Manager events in Sentinel, see Viewing Secure Configuration Manager Events and Compliance Details in the Sentinel User Guide.