Which field is mandatory when you use the DSM Editor to map an event to a OID?
When using the DSM (Device Support Module) Editor in IBM QRadar to map an event to an OID (Object Identifier), the Event ID field is mandatory. The Event ID uniquely identifies the event within QRadar and is essential for ensuring that the correct event data is associated with the appropriate OID. This mapping process allows QRadar to properly categorize and handle events based on their unique identifiers.
Reference QRadar SIEM V7.5 Administration Guide - Chapter on DSM Editor and Event Mapping
Nikita
10 months agoClay
10 months agoMinna
9 months agoKimi
10 months agoLucy
10 months agoAdaline
10 months agoShenika
9 months agoLeanora
9 months agoLorenza
9 months agoJoni
9 months agoHelene
11 months agoBreana
11 months agoCarey
11 months agoBreana
11 months agoBoris
11 months agoOrville
10 months agoAmie
10 months agoTamesha
10 months agoKaran
10 months agoRex
11 months agoAdelina
11 months agoWilda
11 months ago