Event mapping
In the DSM Editor, the event mapping shows all the event ID and category combinations that are in the system.
An event mapping represents an association between an event ID and category combination and a QID
record (referred to as event categorization). Event ID and category values are extracted by DSMs
from events and are then used to look up the mapped event categorization or QID. Event
categorizations store extra metadata for the event that might not exist verbatim in the raw event
data, such as a human-readable name and description, a severity value, or a low level category
assignment. Low-level categorization and severity are useful for search and rule definitions.
Warning: For multi-tenant environments, any user-defined mapping or event categorization
information that is defined in the DSM Editor becomes visible across all tenants. You must ensure
that no tenant-specific data is put in any event categorization names or descriptions.