Which log source should be used to filter QRadar audit events?
A QRadar deployment professional was asked to plan a system migration from an on-premises, appliance-based environment to an AWS environment. As part of this transition, the Ariel data must be moved to the new logical appliances and must be searchable by using the existing mechanisms (for example, to filter by log source).Which approach can the deployment professional use to migrate the configuration after the VM is built (and before the Ariel data is restored)?
