When creating a data model rule, the field _event_type is automatically mapped from the dataset to the data model. This ensures events are categorized correctly in alignment with the Cortex XSIAM Data Model (XDM).
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit