RSA Admin

Another question on Message Variables

Discussion created by RSA Admin Employee on Sep 22, 2008
Latest reply on Sep 22, 2008 by RSA Admin
Is there a way I can display a message variable (like username or IP Address) in the "Message Text" defined in a correlation rule? I have built the correlation rule and it is firing as desired, but the user would like to have the username displayed in the Message Text that is generated from the correlation rule and displayed in the view, rather that having to drill down into the see the alert(s) that cause the rule to fire. Newbie here, so hope this makes sense.

Outcomes