0 Replies Latest reply on Jul 10, 2015 10:32 AM by layer0

    DEM Database rule map fields

    layer0

      Hello

       

       

      I have the following situation, we have integrated a DEM device in our SIEM platform, so we see transaction to the databases and our customer is really interested in a transaction of this kind.

       

       

      BEGIN query( '123456 , '-52' , '6' , '987654' , 'TEST_VALUE' ); END;         

       

       

      So i want to map the field '123456' in a custom field, in order to make correlation or report with this field. Is that possible? Can i identify the inner fields of the query?

       

       

      Thanks