How to add new criteria field available in Event Query Wizard?
Is it possible to expand set of criteria used to build custom event query by Query Wizard?
Currently not all fields are available, for example:
- Firewall Source Interface Name (event from Cisco PIX collector)
- Firewall Destination Interface Name (event from Cisco PIX collector)
- Home Domain (event from Cisco PIX collector)
- Event Count (event from Juniper NetScreen collector)
This issue is important when custom query should be based on custom or product-specific event fields e.g derived from a custom event collector.
Maybe anyone tried to do this?