All Apps and Add-ons

AntiSpam update report

alikapucu
Explorer

When i checked the reports under proofpoint app. I am seeing field "type=mail" in the search string hovewer this field is not in the search results so it is breaking the reports. What should i do? Go every reports and remove the type from search string or is there an update can fix this?

get_pps_index sourcetype="pps_filter_log" mod=spam type=mail cmd=refresh engine=* | table _time engine definitions

0 Karma

eckolp2003
Path Finder

The next version of the app will correct some of the broken reports. For now, you are welcome to edit the search query as needed.

0 Karma
Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...