How to publish OS name in alerts attributes?
Don’t want to use user tags as they are occupied with other information. Alarm enrichment could cause overload on UIM_DB as alert volume is about 5k/ day.
Without using user tags or alarm enrichment can not think of any other way to accomplish this for you.
Not sure if raw alert has the OS attribute which can be captured by lua under nas? or only way is cm_device table for os information?