Configuring Searchable Fields in the ECS(4.2)

 

If you want to search for UDRs with specific values on certain fields, you can configure these fields in the Searchable Fields dialog. Searchable Fields will be part of the search criteria when performing a search for UDRs by the ECS Inspector. You can refer to Searching the ECS(4.2) for more information about how you can use fields to search for particular erroneous UDRs.

Note!

These configurations have to be made before UDRs are sent to the ECS by the ECS forwarding agent.


To configure searchable fields:


  1. In the Labels tab, click on the Add  button.


  2. Enter a name for the label in the Label field and click on the Add button. The labels will be mapped to a UDR field.

    The new label is added in the Defined Field Labels list.
     

  3. Repeat the previous step for all the labels you want to add, and then click on the Close button to close the dialog.

    Note!

    The maximum number of labels you can add is ten.

  4. Click on the Mappings tab to map UDR fields to the different labels.
     

  5. Click on the Add button to open the UDR Browser.
     

  6. Select the UDR type you want to add and click OK.

    The UDR type is added in the UDR Types field.
     

  7. Repeat the previous step for all the UDR types you want to add.
     

  8. Select a UDR type in the UDR Types field, and double click on the UDR Field column for a label you want to associate a UDR field with.


  9. Select the field in the UDR and click OK.

    The selected field is listed in the UDR Field column for the label.
     

  10. Repeat the previous step for all the UDR Types you want map fields from.

    Note!

    You can only map one field from each UDR type to a label.

  11. Click on the Save button when you are finished with your configuration.

    The configuration is saved, and the next time the ECS receives UDRs from an ECS forwarding agent, the configured UDR fields are added as meta data and can later be used for making searches.