Back to feed
UDM fields now show whether data is enriched or not
UDM fields now show whether data is enriched or not
The new Enrichment feature introduces improvements for managing and understanding your data. Each UDM field is now labeled with an icon to indicate its data source: U for unenriched fields and E for enriched fields. Enriched fields contain values that Google SecOps generates to provide additional context about artifacts in your environment.
For more information, see: Viewing events.