New Features and Enhancements in JSA 7.4.1
The following new features and enhancements make it easier for administrators to manage their JSA 7.4.1 deployment.
To view a list of all new features in this release, see What’s New Guide.
Parsing Status in the DSM Editor
In the Log Activity Preview of the DSM Editor, you can track the status of event properties. The Parsing Status column indicates whether your event properties are successfully parsing and mapping to a QID record.
The following figure shows how the parsing status is displayed.
Support for Multiline Event Payloads in the DSM Editor
In the DSM Editor, you can specify a custom delimiter that makes it easier for JSA 7.4.1 to ingest multiline events. To ensure that your event is kept intact as a single multiline event, select the Override event delimiter checkbox to separate the individual events based on another character or sequence of characters. For example, if your configuration is ingesting multiline events, you can add a special character to the end of each distinct event in the Workspace, and then identify this special character as the event delimiter.
The following figures show how you can use the Override event delimiter checkbox to specify double exclamation marks as the custom delimiter for a payload.
Event ID and Event Category fields copied to Event Mapping
In JSA 7.4.1, you can select the unmapped Event ID and Event Category fields of your previewed events to copy them into the corresponding event mapping fields. Now you can map your events to QID records faster than in previous versions, where you had to manually enter your event ID and event category combinations to create your event mappings. On the Event Mappings tab, go to the Unknown Event Mappings section of the Create a New Event Mapping window. Click on a row to copy the event ID and the event category into the corresponding fields, and then click Create.
The following figure shows how you can create new event mappings in the Event Mappings tab of the DSM Editor.