Search data using the OneView integration with Google Chronicle SIEM

In order to narrow down the detection data sent from OneView, you can utilize the search parameters available in Google Chronicle SIEM. This allows you to precisely filter and access the required information.

To search for OneView data in the Google Chronicle SIEM platform:

1. Go to Investigation > SIEM Search.
2. Enter the following string into the search field:

   metadata.vendor_name = "Malwarebytes" and metadata.log_type = "MALWAREBYTES_EDR"

3. Select the desired date parameter.
4. Click Run Search.
5. Click on the Events tab.
6. The data ingested from OneView is displayed using a Unified Data Model in Google Chronicle SIEM.

Return to the OneView integration with Google Chronicle SIEM section.