Adding more customer fields to Event schema for customized mapping

Idea ID 2765872

Adding more customer fields to Event schema for customized mapping

Many customers are complaining about existing Arcsight Fields.  It is not sufficient to map the available data fields from various log sources. There are a lot of fields are coming as blank due to the “provided field name”. Customers cannot map the data items. During data mapping, data items to FlexString 1 and Flexstring 2 has already mapped still, there are many data items of string type is pending, which cannot be mapped to ESM. The customer was complaining about other competitor products where they can create own customized field to map the data fields, but in ESM there is no such feature available.

There should be a solution available to add new fields to ESM.

1 Comment
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor
Status changed to: Waiting for Votes
 
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.