On Tue, Oct 23, 2012 at 4:58 AM, NiroshanD <[email protected]> wrote: > Hi All, > > Please tell me how to change mail body contents of rule 18152 trigger > alert.I need to remove some fields like (User ID: ,Service > Name:,Pre-Authentication Type: ,Failure Code: ).Also need to add event > trigger date & time fields.I think I need to customize decoder.xml.Please > tell me the way & sample code. > > ND
You'll probably have to modify the source code. Changing the decoders might cause interactions you really don't want, although you could try it. Either way you're probably on your own.
