Change Field panel

The Change Event Subtype panel allows you to modify the properties of an existing Event Field.

How to Get There

Enter 2=Change for an entry in the Work with Fields panel.

Field Descriptions

Event Source

An Event Source is a location from which IBM i events are extracted. Currently, journals and message queues are supported as Event Sources. Common event sources are QAUDJRN (journal) and QSYSOPR (message queue). You may define your own journals and message queues as Event Sources.

Name

The name you use to refer to this Event Description within Powertech SIEM Agent. For events that originate in a journal, this name must be comprised of the Journal Code and Entry Type of the journal entry. For message queue events, this name must be a message ID.

Command Keys

F3=Exit

Exit the program.

F5=Refresh

Discards changes and remains on this panel.

F12=Cancel

Discards changes and returns to the prior panel.