Is there a way to automatically tag log events?

[Yosi_Neuman]

Hi guys,

The customer created a log event and now asks to add it to Alerting Profile with tags, but we didn't find the right way how to add the automatic tag with entitySelector for this log event.

Can someone please help with the entitySelector here?

Thanks in advance for your input here 

Yos 

[mark_bley]

Hi @Yosi_Neuman

you can filter by custom Title or description in the Alerting profile, this way you can make sure specific Log event titles are taken care of

Other than that the log events will be tied to the underlying entity, i.e. either a Host or a Process, if you want to filter with tags you can try using the specific tags of these.

Best,

Mark

[Yosi_Neuman · Accepted solution]

Hi @mark_bley 

Question here is how to add log events to existing AP which collect events by tags.

Hence your first part of the answer will not help in this case 

However your second part of the answer is perfect, and we will share this information with our customers.

Thanks 

Yos 

Thnkas