• The first step is to find out the Event Collector ID.

1. Use SSH to log in to the Console as root user.
2. To obtain the Managed Host ID of the target Event Collector edit and run the following command on the console:

   psql -U qradar -c "SELECT id,ip FROM managedhost WHERE ip='$<YOUR EVENT COLLECTOR IP>';"

   For example:
   [root@861522024-0520-158798NETSOLmuhamednoufmJSA742VM ~]# psql -U qradar -c "SELECT id,ip FROM managedhost WHERE ip='10.219.86.152';"
    id |      ip
   ----+---------------
    53 | 10.219.86.152
   (1 row)
   
   Note down the Managed Host ID.  In this example, the id is 53
   
   
   

• Navigate to Log activity > Click on Add Filter > select the parameter as Event Collector ID  and value as 53 as per the below screenshot

Check and confirm if the logs are coming in to the system.