Multiple email domains..

[Brian_Osburn]

I've upgraded from Version 1.01 to 1.1 today, and I'm having some issues around users with multiple email addresses.

For example, some parts of our company are using [email protected], while some of us are using [email protected].

Is there anyway to account for this in the application?

In addition, under client behavior - mailbox store overview, alot of the usernames are listed as @UNKNOWN..

Any help around this?

[ahall_splunk · Accepted solution]

You need to edit the domain_aliases.csv and active_directory.csv to account for the variance in the information. This is documented on http://docs.splunk.com