admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

update message formatting

Browse Source
This commit is contained in:
Bhavin Patel
2025-04-22 12:05:49 -07:00
parent 4a1547b9c9
commit f37ca5fc68
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/network/cisco_secure_firewall___blacklisted_ssl_certificate_fingerprint.yml
+1 -1
View File
@@ -51,7 +51,7 @@ drilldown_searches:
earliest_offset: $info_min_time$
latest_offset: $info_max_time$
rba:
message: Suspicious SSL certificate fingerprint ($SSL_CertFingerprint$) used in connections [ ListingReason: $Reasons$ ]
message: Suspicious SSL certificate fingerprint - [$SSL_CertFingerprint$] used in connections [ListingReason - $Reasons$] from $src_ip$
risk_objects:
- field: src_ip
type: system