Security & the Enterprise
Much secured. So patch!

Incident Review - Table Attributes ES

lindrsc
New Member

Is there a way to put 2 field names in the Incident Review Table attributes so that it looks at 2 different fields to populate 1 field?  For example  Label=FW Action  Field = action and fw_action.  We have events that use both field names but don't want to have 2 separate columns.

0 Karma