#
Category Field
To update the category field modify the SentinelOne Devices Lookup - Gen saved search. It is recommended to clone the default search before making changes (see Clone Saved Search).
Increase the default category field value limit to see all fields available. See How to update multivalue field limit.
The category field by default includes many important fields. Most will find that the default configuration for this field will work for their needs.
This field is an eval statement with multiple functions to map and clean field values. See the Category Field reference for full field mappings and example values.