7.10 Renaming Event Fields

The Event Configuration window allows you to rename the event field. When you do this, the event names are changed in the Sentinel Control Center and the Sentinel Web interface.

Renaming event fields does not change the event ID in Collector scripts or in internal Sentinel representations of the event. For example, if you rename the event name BeginTime to StartTime, the ID will still remain as bgnt. Any references to this ID in Correlation or Filters still work, even if they were originally written using bgnt.

To rename an event field:

  1. Access the Configuration tab in the Sentinel Control Center.

    For more information, see Section 1.2.1, Accessing the Sentinel Control Center.

  2. Click Event Configuration in the navigation pane.

    or

    In the menu bar, click Configuration > Event Configuration.

  3. Select an entry in the Event Fields column.

  4. Specify a new value for the event name in the Name field.

  5. Click Apply, then click Save.

  6. Close and launch Sentinel Control Center for the changes to be visible.