Applying a Field Set to an Active Channel
To apply a field set to an active channel:
-
Right-click over any field header and choose Field Sets >Select Field Set to open the Field Sets Selector dialog.
-
In the Field Sets Selector dialog, select a field set and click OK. Note that domain field sets apply to Oracle-based ESM.
The active channel is displayed with the selected field set.
Note: About ArcSight System Sortable Field Sets
The Sortable Field Sets under ArcSight System are not available for selecting in active channels. The ArcSight System sortable field sets are a special set marked for internal use to provide the sortable functionality and maintain consistency between the Console user interface, field sets, and database indexes.
For more information about sorting, see Sorting Events in the Active Channel.
See Variable Availability and Contexts for information about using variables in active channels.