Hi Splunkers,
I am seeing some junk values in Threat activity details report from Splunk enterprise security, FYI please have a look at the below values
threat_collection threat_group threat_category
"ip_intel
ip_intel" undefined undefined
"ip_intel
ip_intel" undefined undefined
ip_intel DSW_Attacker_DB threatlist
"ip_intel
ip_intel" undefined undefined
ip_intel DSW_Attacker_DB threatlist
"ip_intel
ip_intel" undefined undefined
"ip_intel
ip_intel" undefined undefined
"ip_intel
ip_intel" undefined undefined
"ip_intel
ip_intel" undefined undefined
"ip_intel
ip_intel" undefined undefined
please help me, I would like to know the reason why I am seeing undefined values.
Thanks in advance.
↧