Remove From Dynamic List - Novell SENTINEL 6.1 SP2 - 02-2010 User Manual

3.6.3 Remove from Dynamic List

Removing from Dynamic List
Figure 3-4
NOTE: This type of action can only be used in Correlation deployments
This action type can be used to add a constant value or the value of an event attribute (such as Target
IP or Initiator User Name) from an existing Dynamic List. The various parameters available are:
Parameters
Table 3-5
Option
Element Values
Dynamic List Name
Attribute Names
Function
Specify a constant value to remove from the list.
Select an existing Dynamic List from the dropdown menu.
For every event that is part of a correlated event, the value or values of
the selected event attribute are deleted from the Dynamic List.
Correlation Tab 89