How to identify what are the fields that are capturing in description of notables?

[avinasa]

Hi All,

Actually i need a help how to identify what are the fields that are capturing in description of notables. Since i have given $filename$ to my one of the PA UC but it is not capturing the value in description. Actual field is filename only in logs.

Please help me how to solve this.

[richgalloway]

The fields available to the Description field are those produced by the correlation search.