Each CLM has around 30 Firewall's logging to them, so the host value is set to the CLM, is there a way to also set the host value to the orig so we can also extract out the actual firewalls?
... View more
Curious if you use srcFilter to explictly deny the search 'index=*' and start training users they required to either specify the indexes, or use the macros.
... View more
just posting an answer to get this out of my filter... Probably because you're asking for a lot of work to be done, and the software is then doing it, and the hardware isn't robust enough to balance that load.
... View more