Table of Contents
Advertisement
11.9.2 Renaming Tags
The Event Configuration window also allows you to assign names to existing event tag labels. For
example, you can rename the label for event tag Ct2 to City. Doing this will result in the event tag
that formally appeared in Sentinel Control Center as "Ct2" to now appear as "City". Some places
where event tags appear in Sentinel Control Center are filters, correlation rules, and Active Views.
Renaming tags does not change the name of the variable in Collector scripts or in internal Sentinel
representations of the tag, however. For example, even if the event tag labeled Ct2 is renamed to
City, the variable that must be used in a Collector script to reference this meta-tag will still be
s_CT2. Any references to this variable in correlation or filters will still work, even if they were
originally written using Ct2.
Below is a before and after illustration of this feature in an Active View.
Active View window-Before illustration
Figure 11-19
Active View window-After illustration
Figure 11-20
To rename an event column:
1 Click Event Configuration in the navigation pane or click the Event Configuration button.
NOTE: The original Event Column name displays above the Label field. In addition, the
description of the event column is provided.
2 Highlight an event column entry.
3 Specify a new value for your Event Column in the Label field.
4 Click Apply.
Administration 265
Advertisement
Table of Contents
