When i checked the reports under proofpoint app. I am seeing field "type=mail" in the search string hovewer this field is not in the search results so it is breaking the reports. What should i do? Go every reports and remove the type from search string or is there an update can fix this?
get_pps_index
sourcetype="pps_filter_log" mod=spam type=mail cmd=refresh engine=* | table _time engine definitions
The next version of the app will correct some of the broken reports. For now, you are welcome to edit the search query as needed.