Threat Artifacts setting

[WildHuckleberry]

Hello Splunkers, 

is there any way to change that red box name as a test?? 

Thank you in advance 🙂

[isoutamo · Accepted solution]

Hi

just add in this panel's SPL next part

....
| eval threat_collection = if(threat_collection == "ip_intel", "Foo Bar", threat_collection)
| ....

r. Ismo