You can open the DSM Editor from the Log activity tab, or if you
are an administrator, you can open it from the Admin tab. For example, if
events that are sent to the system are not handled properly, you can select the event data from the
Log Activity tab and send it to the DSM Editor. For events that are not yet
sent to the system, you must be an administrator and access the DSM Editor from the
Admin tab.
Procedure
-
To open the DSM Editor from the Admin tab, follow these steps:
-
On
the navigation menu (
), click
Admin.
-
In the Data Sources section, click DSM
Editor.
-
To open the DSM Editor from the Log Activity tab, follow these
steps:
-
Click the Log Activity tab.
-
Pause the incoming results and then highlight one or more events.
Important: If more than one event from two or more log sources are selected, you are
prompted to select which log source type you want to operate on. You can select only a single log
source type, and only the events from log activity that match the selected log source type are
automatically added to the workspace.
-
On the navigation menu, select