Questions about SSIM
I'm a newbie on SSIM and are more or less than 3 months that I'm trying to move inside features and capabilities that this product offers.
The first task I want to accomplish is made integration between SSIM and the package that my company uses for managing ICT incidents.
The simple way I have found in order to do this, is to send an opportunely formatted mail message to a mailbox.
On this mailbox, an email parser is used for interpreting informations contained into each message generated and posted by SSIM correlation rules.
Fields extracted and forwarded by SSIM are used to automatically populate our incidents database.
I know that this may appear a very stupid issue but let me say that I'm encountering not few problems in extracting the reference ID related to each SSIM incident.
To be more clear, I'm not able to put the reference ID, field I can see in clear text using the SSIM console, also into body of the message I send via mail.
I'm tried with the "Unique Event ID" field but it contains data that are like the following : "7f71:20130114164212:698d96", datas that nothing seem to have in common with what mentioned before.
Can someone help me ?
Thanks in advance and sorry for the disturb.