IBM
C2150-400 · Question #32
You have created an LSX log parser document to process the unknown log events from your unsupported log source. The events are coming up with Log source type GenericDSM and the correct Log Source…
The correct answer is D. Run the qidmap.pl script to create high level and low level categories from the command line. See the full explanation below for the reasoning.
Question
You have created an LSX log parser document to process the unknown log events from your unsupported log source. The events are coming up with Log source type GenericDSM and the correct Log Source Event ID. What is the next step in this process?
Options
- ACreate the high level and low level categories from the map id action
- BMap the custom log records to your own custom high level and low level categories
- CCreate the high level and low level categories from the Rules section in the Offense tab
- DRun the qidmap.pl script to create high level and low level categories from the command line
How the community answered
(36 responses)- A17% (6)
- B8% (3)
- C6% (2)
- D69% (25)
Community Discussion
No community discussion yet for this question.