Reqest to have the option when configuring a logging rule in tempalte to also be able to filter on what sections of the TRAP that will be included in the 'information' section of an incident.
This would help in a case where you were only concerned with a few lines of a trap and would like to be able to see that quickly when viewing an incident created by a logging rule violation.
Currently, when we have a log match for a rule, when we create the incident we will insert the entire trap message into the incident information.
One idea is to to have a few extra configurable sections (5 or 6) when creating a logging rule that would allow you to filter for the desired information from the TRAP that you would like to see in the information section of the incident.