cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Is there any method for Data Enrichment be case insensitive?

Hello,

I have an issue with Data Enrichment based on LDAP queries against the Active Directory functionality since McAfee ESM is case sensitive - is there any way to resolve this issue?

Thanks

 

1 Reply
lhud64
Level 7
Report Inappropriate Content
Message 2 of 2

Re: Is there any method for Data Enrichment be case insensitive?

I am trying to use a LDAP query from an AD server with makes all hostnames in uppercase, but the events in the siem  as lowercase. Is there any way to create a watchlist and have a case insensitive button or something like when using Dashboards.

I have seen this being asked many timesfor over 5 yrs in the forums but have seen no response to add this as an improvement.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator