Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - CONFIGURING DSMS REV 1 Manual page 211

In the Tests and Filters area:
Step 8
From the first drop-down list box, select the Device attribute.
a
From the second drop-down list box, select the Equals modifier to use for the
b
search.
From the Device Group drop-down list box, select Other group.
c
From the Device drop-down list box, select the new Universal DSM device.
d
Click Add Filter.
e
Note: If you wish, you can also specify a certain time frame you wish to isolate for
incoming events.
Click Filter.
Step 9
The search results appear with the events listed with an Event Name of Unknown
Universal Event as well as an Unknown category.
To focus on a single class of events, double-click one of the unknown event
Step 10
entries.
To map the unknown event to a specific category, click Map Event.
Step 11
The Device Event window appears.
Map the event to a specific category.
Step 12
For more information on mapping an event, see the STRM Users Guide.
Click OK.
Step 13
Configuring the Universal DSM within STRM
Configuring DSMs Guide
205