QRadar Experience Center
When considering user experience in QRadar, we have to mention the QRadar Experience Center app. This application is developed for customers who are very new to QRadar to help them understand how QRadar works and is best suited for test environments. It provides automated simulations to help us understand how attacks are designed, what exactly happens when attacks occur, and how we can respond.
There are multiple other items imported when you install the QRadar Experience Center app. The current version of the app, there are about 50 custom event properties (CEPs), 36 custom rules, 16 log sources, and 11 saved searches. All this data is then used by the app to simulate attacks.
After installing QRadar Experience Center, logging in to IBM QRadar, and then going to the Log Activity tab, you will see the following screen:
Figure 10.8 – Launch QRadar Experience Center
In the preceding figure, we can see the option to launch...