3 Replies Latest reply on Jul 31, 2017 4:46 PM by sssyyy

    How I can change a value?

    santintel10

      Hi,

       

      I need change a value of an event. I want to explain you, I've a raw event and this has a value type "2020" (itis a code) I know that this value "2020" is a referer as "system configuration". If I set on the event "2020" it is "system configuration".

       

      Now I would change the value "2020" for "system configuration" on new advanced syslog parser rule.

       

      The code "2020" isn't only that code, I have several codes with theses description type:

       

      - 2020 is system configuration

      - 2021 is auth ok

      - 2022 is auth error

      ------ serveral codes

       

      My question is, can I put the description on the asp rule???? type mapping????

       

      I hope that you can help me, please.

       

      Thx