amorfo77/parsedmarc
1
0
Fork 0
mirror of https://github.com/domainaware/parsedmarc.git synced 2026-02-17 07:03:58 +00:00
Code Issues Projects Releases Wiki Activity

Splunk dashboard bug fixes

Browse Source
This commit is contained in:
Sean Whalen
2024-03-27 17:19:58 -04:00
parent 9ffc63f895
commit 1f9a5ffe58
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
splunk/dmarc_aggregate_dashboard.xml
View File

@@ -7,7 +7,7 @@
| table *
| rename spf_results{}.domain as envelope_domain spf_results{}.result as spf_result spf_results{}.scope as spf_scope dkim_results{}.selector as dkim_selector dkim_results{}.domain as dkim_domain dkim_results{}.result as dkim_result
| fillnull value=null source_reverse_dns source_base_domain dkim_selector dkim_domain dkim_result source_type source_name
| search dkim_selector=$dkim_selector$ dkim_domain=$dkim_domain$ source_type=$source_type$ source_name=$source_name$
| search dkim_selector=$dkim_selector$ dkim_domain=$dkim_domain$ source_type="$source_type$" source_name="$source_name$"
</query>
<earliest>$time_range.earliest$</earliest>
<latest>$time_range.latest$</latest>
@@ -78,9 +78,17 @@
| stats count by source_type</query>
</search>
</input>
<input type="text" token="source_name" searchWhenChanged="true">
<input type="dropdown" token="source_name" searchWhenChanged="true">
<label>Source name</label>
<default>*</default>
<choice value="*">any</choice>
<initialValue>*</initialValue>
<fieldForLabel>source_name</fieldForLabel>
<fieldForValue>source_name</fieldForValue>
<search>
<query>index="email_ess" sourcetype="dmarc:aggregate"
| stats count by source_name</query>
</search>
</input>
<input type="text" token="source_country" searchWhenChanged="true">
<label>Source country ISO code</label>