Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Modifying a Custom Property

    You can modify a custom property.

    You can use the Custom Event Properties or Custom Flow Properties window to modify a custom property.

    You can use the Custom Event Properties window to modify a custom property.

    The custom properties are described in the following table.

    Table 1: Custom Properties Window Columns

    Column

    Description

    Property Name

    Specifies a unique name for this custom property.

    Type

    Specifies the type for this custom property.

    Property Description

    Specifies a description for this custom property.

    Log Source Type

    Specifies the name of the log source type to which this custom property applies.

    This column is only displayed on the Custom Event Properties window.

    Log Source

    Specifies the log source to which this custom property applies.

    If there are multiple log sources that are associated with this event or flow, this field specifies the term Multiple and the number of log sources.

    If there are multiple log sources that are associated with this event, this field specifies the term Multiple and the number of log sources.

    This column is only displayed on the Custom Event Properties window.

    Expression

    Specifies the expression for this custom property. The expression depends on the custom property type:

    For a regex-based custom property, this parameter specifies the regular expression that you want to use for extracting the data from the payload.

    For a calculation-based custom property, this parameter specifies the calculation that you want to use to create the custom property value.

    Username

    Specifies the name of the user who created this custom property.

    Enabled

    Specifies whether this custom property is enabled. This field specifies either True or False.

    Creation Date

    Specifies the date this custom property was created.

    Modification Date

    Specifies the last time this custom property was modified.

    The Custom Event Property and Custom Flow Property toolbars provide the following functions:

    Table 2: Custom Property Toolbar Options

    Option

    Description

    Add

    Click Add to add a new custom property.

    Edit

    Click Edit to edit the selected custom property.

    Copy

    Click Copy to copy selected custom properties.

    Delete

    Click Delete to delete selected custom properties.

    Enable/Disable

    Click Enable/Disable to enable or disable the selected custom properties for parsing and viewing in the search filters or column lists.

    1. Choose one of the following:
      • Click the Log Activity tab.

      • Click the Network Activity tab.

    2. Click the Log Activity tab.
    3. From the Search list box, select Edit Search.
    4. Click Manage Custom Properties.
    5. Select the custom property that you want to edit and click Edit.
    6. Edit the necessary parameters.
    7. Optional. If you edited the regular expression, click Test to test the regular expression against the payload.
    8. Click Save.

    Modified: 2017-09-13