cancel
Showing results for 
Search instead for 
Did you mean: 
layer0
Level 7
Report Inappropriate Content
Message 1 of 1

DEM Database rule map fields

Hello

I have the following situation, we have integrated a DEM device in our SIEM platform, so we see transaction to the databases and our customer is really interested in a transaction of this kind.

BEGIN query( '123456 , '-52' , '6' , '987654' , 'TEST_VALUE' ); END;         

So i want to map the field '123456' in a custom field, in order to make correlation or report with this field. Is that possible? Can i identify the inner fields of the query?

Thanks