InTrust - Filtering Events Forwarded to SIEM (4373268)

InTrust - Filtering Events Forwarded to SIEM

In this video, the presenter demonstrates how to use pre-built filters in the Quest InTrust software to forward only high-value security data to a security information and event management (SIEM) system. They explain that not every log needs to be sent through the SIEM, and by storing long-term data in InTrust and using event forwarding filters, organizations can save on licensing costs. The presenter walks through the process of enabling event forwarding and applying the filters in the InTrust software.