IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Using DSM Editor for overriding unknown events in standard DSMs to something meaningful based on custom properties

  • 1.  Using DSM Editor for overriding unknown events in standard DSMs to something meaningful based on custom properties

    Posted Wed March 22, 2023 03:37 PM
      |   view attached

    this step by step instruction helps to achieve results in minutes without affecting standard event IDs



    ------------------------------
    [Karl] [Jaeger] [Business Partner]
    [QRadar Specialist]
    [pro4bizz]
    [Karlsruhe] [Germany]
    [4972190981722]
    ------------------------------

    Attachment(s)

    pdf
    P4B 2023-03-22 SIEM PAN Mapping unknown events.pdf   3.52 MB 1 version