0 Replies Latest reply on Jul 10, 2015 10:32 AM by layer0

    DEM Database rule map fields





      I have the following situation, we have integrated a DEM device in our SIEM platform, so we see transaction to the databases and our customer is really interested in a transaction of this kind.



      BEGIN query( '123456 , '-52' , '6' , '987654' , 'TEST_VALUE' ); END;         



      So i want to map the field '123456' in a custom field, in order to make correlation or report with this field. Is that possible? Can i identify the inner fields of the query?