Comparing Content 1.0 to 2.0 reports/tables?

[ScottPause]

What is avaialble to compare the fields used in reports for the two version of content formats?

I have discovered that the "IDS - Recent Threats" dashboard report only looks at "Intrusion Detection System" devices, which is not a Content 2.0 table (Intrusion)

Trying to build a replacement, I find that a field appears to have simply disappeared - AlarmLevel.  How do I know what field this is now called in Content 2.0?

Having a standard process for folks to follow would be useful IMHO.

Thanks,

Scott

[RSAAdmin]

Scott,

There is not a one to one mapping from old variables to new variables, some old variables in the tables simply disappeared or many of them were collapsed in one new variable. RSA provides a documentation for the content 2.0 tables where every there is a definition for every variable in the table.

Regards

Ahmed 

[ScottPause]

I found that it is now just named alert. Where is the documentation you mention?

[RSAAdmin]

It is in RSA enVison Help itself, you can run a search for "Intrusion variables" to get the table documentation

[ScottPause]

I have seen those tables before.    I should have thought to check there.

But RSA should be releasing conversion tables to help users understand the changes.  I'm guessing that AlarmLevel to Level is a fairly noticable change since it is likely used in many tables.