4 Replies Latest reply on May 3, 2016 2:32 PM by yassinezeroual

    How to change values in Watchlist




      I have the following situation I want to create a rule from a watchlist that have machines names like "pcexample$" or "pczzyy$" this list is populated with events in Active Directory. I want to correlate this watchlist with events that i see in another data source, but in this data source the machine names are like "PCEXAMPLE" or "PCZZYY". How can i transform the data in a watchlist from "pcexample$" to "PCEXAMPLE"?