Troubleshooting
Problem
When an administrator attempts to create a reference data collection, the system defaults to creating a map of maps.
Cause
keyNameType parameter value is missing.
Environment
QRadar SIEM systems at 7.2 MR1 or above.
Resolving The Problem
If you do not provide keyNameType parameter values, the data collection defaults to the "map of maps" collection type when the reference table is created in the API. For reference table collections, you can add data to a reference table by using an innerKey that was not defined when the table was created. However, you cannot use this arbitrary data in the rules test and rules responses in the product.
The data collection defaults to the "map of maps" collection type when the reference table is created in the API
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21671598