Would you be willing to share your Domino transforms? I've just started on Domino integration. ... View more

My colorblind viewer left the company. I do not have a test subject anymore. You bring up a good point at the OS offering a solution. I'm not sure why he didn't use that functionality. ... View more

This is the search I'm running to monitor for delete attempts: index=_audit sourcetype=audittrail "|" "delete" NOT "search='search index=_audit" I'm searching the index of _audit and the sourcetype of auditrail for | and delete. Then so that my searches for delete activity do not generate alerts, I exclude searches of searches that include delete. ... View more