Blocked Field Values

stasiakm · ‎10-30-2019

Trying to find the definition of the various values of the Blocked field. Yes and No are self explanatory, but I have also seen Would and 2. I have been unable to locate the answer in the documentation as of yet.

Thanks,

Mike

richgalloway · ‎10-30-2019

Values for that field are usually supplied by the vendor of the product that generated the events. Check their documentation.

---
If this reply helps you, Karma would be appreciated.

Blocked Field Values

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Enriching Signals with the OTel Lookup Processor

Meet the .conf26 AI Agent Buildathon Winners

Join the Conversation

Blocked Field Values

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Enriching Signals with the OTel Lookup Processor

Meet the .conf26 AI Agent Buildathon Winners