An event record may include several date fields. Most events have a single event date, which is the time when the event occurred (not the date when Information Manager captured the event). In this case, the Event Date value and the Ending Event Date value are identical.
Occasionally the event service registers an event with an incorrect Event Date or Ending Event Date. In these cases, Information Manager corrects the times in these fields and inserts the original (incorrect) times in the Original Event Date and Original Ending Event Date fields.
Occasionally a collector sends data to Information Manager that does not correspond to any fields that are defined in the existing schema. When this occurs, the Column Filter dialog box displays the raw field name from the collector, for example bugtraq_ids. This may also occur if a collector's SIP is not installed on the appliance.
Now that you have modified the event details table to display the data that you want, you must save it as a query if you want to see the same data and the same format the next time you log in to Information Manager.
To save the modified table format
The query is saved in the My Queries folder in the left pane. The next time you log in to Information Manager, you can select that query, and the table format will be the way you modified and saved it.