17.2 Viewing Assessment Events in Sentinel

Secure Configuration ManagerFor information about settings required to enable Sentinel to receive assessment events from , see Receiving Compliance Details from Secure Configuration Manager in the Sentinel Administration Guide.

  1. Open a browser to the Sentinel URL.

    The URL must be in the format https://<Sentinel IP Address>:<Port>. For example, 162.99.123.245:1234.

    NOTE:This is the destination server specified in the Destination Server field for the integration configuration. For more information, see Configuring the Basic Settings for SIEM Integration.

  2. Log in to Sentinel using valid Sentinel user credentials.

    You can also use the credentials that you specified for Destination Server CredentialsSecure Configuration Manager in the Core Services Configuration Utility. However, these credentials have administration privileges to enable configuration, and you do not need such privileges to view assessment events in Sentinel. Instead, you should create separate user accounts for users who only need to view events.

Secure Configuration ManagerFor more information about viewing events in Sentinel, see Viewing Secure Configuration Manager Events and Compliance Details in the Sentinel User Guide.