Logsign USO Platform allows you to do an advanced categorizing in the column names. For each event, Logsign USO Platform creates new columns as EventMap for categorizing.
As an example, let's search the successful logins.
Type Event.VendorID:4624 in Search tab to see the successful login processes on windows servers. Logsign USO Platform opens map columns and classifies this event as User Successful Login.
Let's search the successful logins using Map columns this time. Through Map columns, you are able to see the successful login events not only on windows but also on all integrated resources.
This feature allows you to search different events easily and quickly with a single column architecture.