Which field is mandatory when you use the DSM Editor to map an event to a OID?
When using the DSM (Device Support Module) Editor in IBM QRadar to map an event to an OID (Object Identifier), the Event ID field is mandatory. The Event ID uniquely identifies the event within QRadar and is essential for ensuring that the correct event data is associated with the appropriate OID. This mapping process allows QRadar to properly categorize and handle events based on their unique identifiers.
Reference QRadar SIEM V7.5 Administration Guide - Chapter on DSM Editor and Event Mapping
Nikita
10 months agoClay
10 months agoMinna
9 months agoKimi
9 months agoLucy
9 months agoAdaline
10 months agoShenika
9 months agoLeanora
9 months agoLorenza
9 months agoJoni
9 months agoHelene
10 months agoBreana
10 months agoCarey
11 months agoBreana
11 months agoBoris
11 months agoOrville
9 months agoAmie
10 months agoTamesha
10 months agoKaran
10 months agoRex
11 months agoAdelina
10 months agoWilda
10 months ago