I intend to create an alert in ESA in which the statement condition is based on action meta.
what I'm looking for is to get this alert triggered for this event:
Given a specific device type and whenever a user initiate an action statement like:
action meta: select * from tablespace
given that action key is by default of type array.
How can I achieve this condition in ESA given if I use the reporting engine I also cannot rely on contains for this statement.
your counsel is highly appreciated.