Instead of using the default values for a correlated event, an action may be created to populate the following fields in the correlated event:
Severity
Event Name
Message
Resource
SubResource