Opening the DSM Editor
YYou can open the DSM Editor from the Log activity tab, or if you are an administrator, you can open it from the Admin tab. For example, if events that are sent to the system are not handled properly, you can select the event data from the Log Activity tab and send it to the DSM Editor. For events that are not yet sent to the system, you must be an administrator and access the DSM Editor from the Admin tab.
To open the DSM Editor from the Admin tab, follow these steps:
On the navigation menu (), click Admin.
In the Data Sources section, click DSM Editor.
To open the DSM Editor from the Log Activity tab, follow these steps:
On the navigation menu (), click Admin.
Pause the incoming results and then highlight one or more events.
Note:If more than one event from two or more log sources are selected, you are prompted to select which log source type you want to operate on. You can select only a single log source type, and only the events from log activity that match the selected log source type are automatically added to the workspace.
On the navigation menu, select Actions > DSM Editor