7.0 Mapping Events
Sentinel provides the ability to use mapping to inject additional information into events. This increases Sentinel’s ability to analyze events, execute correlation rules, or provide detailed reports.
-
Section 7.1, Overview
-
Section 7.2, Default Maps
-
Section 7.3, Accessing Map Definitions
-
Section 7.4, Adding Map Definitions
-
Section 7.5, Adding a Number Range Map Definition
-
Section 7.6, Editing Map Definitions
-
Section 7.7, Deleting Map Definitions
-
Section 7.8, Updating Map Data
-
Section 7.9, Using Maps for Event Configuration
-
Section 7.10, Renaming Event Fields