- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
12-09-2024 12:23 AM
I get the hard time to mapped the domain_id under the Label section coming from Qradar data.
The mentioned fields not parsed at the first place, luckily the domain_id is found in the Qradar_instance and mapped by creating the new incident field.
Issue: The new incident field for domain_id not being updated in the past incident, need support to reflect the same in past incident which become handy to filter out the different domains.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!