RSA Admin

How to query a specific string in 'unknown devices' at Analysis / Query / Create new query ?

Discussion created by RSA Admin Employee on Apr 17, 2012
Latest reply on Apr 26, 2012 by RSA Admin
Hello, I would like to query all the unrecognized (Device type: unknown) messages text for a specific string (one word). May I ask some help about that at Analysis / Query / Create new query page what I should I choose as "Select table to access", and which row / field (deviceaddress, etc) am I need to fill with this string ? Thank you !

Outcomes