I've upgraded from Version 1.01 to 1.1 today, and I'm having some issues around users with multiple email addresses.
For example, some parts of our company are using first.last@companyname1.com, while some of us are using firstinitallastname@companyname2.com.
Is there anyway to account for this in the application?
In addition, under client behavior - mailbox store overview, alot of the usernames are listed as @UNKNOWN..
Any help around this?
You need to edit the domain_aliases.csv and active_directory.csv to account for the variance in the information. This is documented on http://docs.splunk.com
You need to edit the domain_aliases.csv and active_directory.csv to account for the variance in the information. This is documented on http://docs.splunk.com