All Apps and Add-ons

AntiSpam update report

alikapucu
Explorer

When i checked the reports under proofpoint app. I am seeing field "type=mail" in the search string hovewer this field is not in the search results so it is breaking the reports. What should i do? Go every reports and remove the type from search string or is there an update can fix this?

get_pps_index sourcetype="pps_filter_log" mod=spam type=mail cmd=refresh engine=* | table _time engine definitions

0 Karma

eckolp2003
Path Finder

The next version of the app will correct some of the broken reports. For now, you are welcome to edit the search query as needed.

0 Karma
Get Updates on the Splunk Community!

New Case Study: How LSU’s Student-Powered SOCs and Splunk Are Shaping the Future of ...

Louisiana State University (LSU) is shaping the next generation of cybersecurity professionals through its ...

Splunk and Fraud

Join us on November 13 at 11 am PT / 2 pm ET!Join us for an insightful webinar where we delve into the ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...