The per-panel filter button appears only if the user has permission. If you determine that an event is not a threat, you can add it to your allow list to remove it from the dashboard view.If you determine that an event is a threat, use the per-panel filter to add the item to your deny list of known threats.Some dashboards in Splunk Enterprise Security include the per-panel filter option, which can filter items out of dashboard views, making it easier to find those events that require investigation. Configure per-panel filtering in Splunk Enterprise Security
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |