Blocked Field Values

stasiakm · ‎10-30-2019

Trying to find the definition of the various values of the Blocked field. Yes and No are self explanatory, but I have also seen Would and 2. I have been unable to locate the answer in the documentation as of yet.

Thanks,

Mike

richgalloway · ‎10-30-2019

Values for that field are usually supplied by the vendor of the product that generated the events. Check their documentation.

---
If this reply helps you, Karma would be appreciated.

Blocked Field Values

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

Join the Conversation

Blocked Field Values

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A