I am facing challenge while understanding how device event category is assigned to an event by the connector in Arcsight and can we customize it or does it get auto-assigned? Besides how do we define custom strings for an evemt at connector level? Can som


I need to understand 2 things :

1> How device event category is assigned? Can we customize it? Or is it auto assigned? What role does it play ?

2> How we define custom strings in Arcsight for an event? Do we define them at connector level?

Can someone please assist