Novell SENTINEL RAPID DEPLOYMENT 6.1 - 12-2009 User Manual page 252

Select one of the available default maps or select a map you have created.
5 Click the Map Column field down-arrow and select a Map Column name. Depending on your
Map Name choice in the previous step, these values vary.
_EXIST_ : This is a special map column that exists in every map. If this map column is
selected, a "1" is placed in the event tag if the key is in the map data. If the key is not in
the map data, a "0" is placed in the event tag.
All other choices: Names of active columns within the map definition that are not set as
a key (for example, the CustomerId column in Asset or the NormalizedAttackId column in
AttackNormalization)
6 In the key configuration, select the event tag for each row in the table in the Event Tag column
that will be matched against the map key column specified in the corresponding Map Key Field
column. The rows in the Key Configuration table depend on the Map Name selected.
A key is a unique identifier for the row of data in the map data.
7 Click Apply.
252 Sentinel 6.1 Rapid Deployment User Guide