Installation
The Lookout Mobile Threat Defense Extension can be downloaded from IBM’s Security App Exchange. Search for "Lookout Mobile Threat Defense" and follow the IBM guide for installing the extension.
Monitoring and Troubleshooting
The monitoring section provides several options to view QRadar data:
Download Log Files: This triggers a download of a zip archive containing all logs associated with the integration.
The Total Events Fetched: This is a read only field that displays the total number of events retrieved since the integration was first configured.
Last Updated: This is a read only field which displays the timestamp of the last time the event runner checked for (and found none) or retrieved events from the Mobile Risk API. Last Updated should increase every 30 seconds. You can click the "Refresh Configuration" link to get the most recent event totals. Total events fetched will update when events come in, so it may remain constant if no events are being generated.
