Splunk Enterprise Security

How do I add static Tag options to the ES Incident Review Dashboard?

malvidin
Communicator

In Tag section of the ES Incident Review Page, is it possible to have specific tags selectable, rather than having to type them in?

Or is it better to modify the page to add another multiselect field to filter by specific tags, or add a multiselect field to add specific search terms?

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...