In KUMA, you can inspect the parameters of any event in your selection, which can help during alert investigation or when working with correlation rules.
To see event parameters,
In the Events section of the KUMA web interface, click the relevant event.
The Event details area appears in the right part of the web interface window and contains a list of the event's parameters with values. In this area you can:
To modify the event sample you can use and icons located next to parameter values.
Open the service that registered the event using the link in the Service parameter value.
Open a window containing information about the asset if it is mentioned in the event fields and registered in the program.
Link the event to an alert if the program is in analysis drilldown mode.