All Apps and Add-ons

Splunk McAfee ePo Rising Column

New Member


Could somoene please tell me the best rising column to use with the McAfee? I had it on timestamp but found I was getting lots of duplicate events indexed, would AutoID be a better option? I'm using DB Connect 3 and it otherwise seems to be working.

Thank you.

0 Karma

0 Karma