cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
498
Views
0
Helpful
3
Replies

IDS MDC Event viewer:column order

duchesne_ced
Level 1
Level 1

Hi,

When you open event viewer in IDS MDC, you have a predifined column order "Count", "IDS Alarm type", "Sig name".... Is there a way to modify this column order ????

thanks

Cedric

3 Replies 3

bbaley
Level 3
Level 3

Did you by any chance ever figure this one out??

Sorry for the delay, didn't see this original message.

If you point your mouse at the column heading you can then drag the entire column to the left or right as you wish. Note you can't put anything to the left of the Count column, but other than that you can do as you wish.

The big problem, and it's apparently being fixed in the next release, is that you can't save this column setting and the next time you go back in it'll be at the default again.

Along that line, I'm putting in an enhancement request to have some query options placed with the date scope that Event Viewer offers. Currently the only way to do any type of forensics such as all acitivity for a specific source address is to generate a static report.

Having the ability to move columns would help when doing investigations.