RSA Admin

Additional output action fields

Discussion created by RSA Admin Employee on May 5, 2011
Latest reply on Jan 4, 2012 by RSA Admin

Can RSA please add more fields to the output action templates.  The current templates and are very "Network" centric.  We utilise envision alerts for alot of windows hosts and it would be good to see some windows fields like username, object type etc included into the templates. 

 

Why cant we just create our own and pick the fields that are in specific tables ??  seems simple enough to me and other SIEM products can do it.

Outcomes