Blocked Field Values

stasiakm · ‎10-30-2019

Trying to find the definition of the various values of the Blocked field. Yes and No are self explanatory, but I have also seen Would and 2. I have been unable to locate the answer in the documentation as of yet.

Thanks,

Mike

richgalloway · ‎10-30-2019

Values for that field are usually supplied by the vendor of the product that generated the events. Check their documentation.

---
If this reply helps you, Karma would be appreciated.

Blocked Field Values

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

Developer Spotlight with Mika Borner

Continue Your Federation Journey: Join Session 3 of the Bootcamp Series

Join the Conversation

Blocked Field Values

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

Developer Spotlight with Mika Borner

Continue Your Federation Journey: Join Session 3 of the Bootcamp Series