Variable Availability and Contexts

Not all variables are available in all contexts.

• These functions are only available for use with event schemas:

  • ConditionalEvaluation

  • HasRelationship

  • AliasField

• These functions are not available for use in SQL based operations:

  • ConvertListToString

  • ConvertStringToList

  • GetSizeOfList

  • EvaluateVelocityTemplate

  • Java Mathematical Expressions

Active Channels can evaluate Group Functions, Category Model Function, and List Functions only by sending a request to the Manager. Functions of these types are not evaluated on the ArcSight Console, unlike other variable functions. If you create active channels that use these function types, keep in mind that there will be a slight delay in an ArcSight Console channel display of these values.

See also Applying a Field Set to an Active Channel.