Transforming events with event mappings

To modify events as they arrive, create an event map through the user interface:
  1. Create an event class.
  2. Go to the event console and create an event mapping in this class from the existing event.
  3. Edit the map.
  4. In the Transform area, update the event with detail data. The entry field allows you to insert Python scripts. The event is provided as "evt" and the device as "dev." In this case, extract the sysLocation event detail and make it the summary with:
    evt.summary = evt.sysLocation
  5. Save the event mapping.

If you move the event to the event archive and resend the trap, the summary for the trap should now read the device name in the location you assigned.

If you encounter problems with the transform, check the zentrap.log file for errors that occurred.