Novell SENTINEL 6.1 SP2 - 02-2010 User Manual page 264

_EXIST_ : This is a special Map Column that exists in every map. If this Map Column is

selected, a "1" will be put in the event tag if the key is in the map data. If the key is not in
the map data, a "0" will be put in the event tag.
All other choices: Names of active columns within the map definition that are not set as

a key (for example, CustomerId column in Asset or NormalizedAttackId column in
AttackNormalization)
6 In the Key Configuration, for each row in the table select the event tag in the Event Tag column
that will be matched against the map key column specified in the corresponding Map Key Field
column. The rows in the Key Configuration table will depend on the Map Name selected.
NOTE: A key is a unique identifier for the row of data in the map data.
7 Click Apply.
NOTE: Clicking Apply saves the changes you made for the currently selected event column in
a temporary buffer. If you don't click Apply, when you select a different event column the
changes you made to the previously selected event column are lost. Changes won't be saved to
the server until you click Save.
8 If you want to edit the Event Mapping of another Event column, repeat the steps above.
Remember to click Apply after editing the Event Mapping of each Event column.
9 Click Save.
NOTE: Clicking Save will save your changes to the server. The save function saves all
changes stored in the temporary buffer (when you clicked Apply).
264 Sentinel 6.1 User Guide