4.6.3 Removing a Value from a Dynamic List
Removing a Value from a Dynamic List
Figure 4-4
NOTE: This type of action can only be used in Correlation deployments
This action type can be used to add a constant value or the value of an event attribute (such as Target
IP or Initiator User Name) from an existing dynamic list. The various parameters available are:
Parameters
Table 4-6
Option
Element Values
Dynamic List Name
Attribute Names
Function
Specify a constant value to remove from the list.
Select an existing dynamic list from the drop-down menu.
For every event that is part of a correlated event, the value or values of
the selected event attribute are deleted from the dynamic list.
Correlation Tab 105