Can RSA please add more fields to the output action templates. The current templates and are very "Network" centric. We utilise envision alerts for alot of windows hosts and it would be good to see some windows fields like username, object type etc included into the templates.
Why cant we just create our own and pick the fields that are in specific tables ?? seems simple enough to me and other SIEM products can do it.