Splunk Search

Multiple email domains..

Brian_Osburn
Builder

I've upgraded from Version 1.01 to 1.1 today, and I'm having some issues around users with multiple email addresses.

For example, some parts of our company are using first.last@companyname1.com, while some of us are using firstinitallastname@companyname2.com.

Is there anyway to account for this in the application?

In addition, under client behavior - mailbox store overview, alot of the usernames are listed as @UNKNOWN..

Any help around this?

0 Karma
1 Solution

ahall_splunk
Splunk Employee
Splunk Employee

You need to edit the domain_aliases.csv and active_directory.csv to account for the variance in the information. This is documented on http://docs.splunk.com

View solution in original post

ahall_splunk
Splunk Employee
Splunk Employee

You need to edit the domain_aliases.csv and active_directory.csv to account for the variance in the information. This is documented on http://docs.splunk.com

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...