Showing results for 
Show  only  | Search instead for 
Did you mean: 
Level 7
Report Inappropriate Content
Message 1 of 2

Include fields in policy

Hello friends,

I hope you are well.

I'm trying to add two fields to the SIEM Dashboard.

Screen Shot 2020-07-27 at 6.19.54 PM.png

The log is from the Web Gateway.

I imported the McAfee rule set for Web Gateway. I used the standard rule used to register allowed accesses. When saving the changed rule, a new one is created. This created rule is enabled.

I created the regular expressions and associated them with fields.

When verifying user access, the two fields are not displayed.

What is missing?

Can someone help me?

Thank You.

1 Reply
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Include fields in policy

Dear Customer,

Have you mentioned the respective expressions like 21:1 & 22:1 in the expression field of the Field Assignment tab of the ASP rule as displayed in the attached screenshot?

If you have not entered the expressions in the Field Assignment tab, please enter the values & click on apply. You will have to roll out the policy as well.

If it is still not being resolved, you may need to check with McAfee Professional services team for assistance as this is a Custom rule.


Prashanth B Pillai

McAfee Technical Support

Customer Success Group

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community