Welcome to Splunk Enterprise Security Content Updates Feedback Center. This is where you can pass direct feedback to the Splunk Security Research team and let us know what is working well and what can be improved.
If you have any issue or questions with Analytic Stories or individual searches, please fill out the following fields (Name, Email and Phone Number). Specify your request type and if applicable, in the drop down, select the Analytic Story your feedback is related to.| rest /services/configs/conf-alert_actions splunk_server=local count=0 | search eai:acl.app=system | eval Status=if(mailserver!="","Configured","Not_Configured") | search mailserver!=NULL$result.Status$$result.mailserver$Email Configuration Status: "$tok_wimg$"Configure email notification settings to use Feedback Center. Learn More. You can also contact the Splunk Security Research Team by emailing escu-feedback@splunk.com.
| makeresults
| sendemail to=escu-feedback@splunk.com subject="ES_SOC: Feedback Request" message="Name: $name$ \n Email: $email$ \n Phone: $phone$\n\n Request Type: $req_type$\n\n Help with Story: $story$ \n\n\n\nBrief Description of the problem:$question$ \n\n" | eval Status="Attempting to send email using mailserver:" |eval "MailServer: Port" = "$mailserver$" | table Status "MailServer: Port"01
If the status is "Configured" and it says "No results Found". Check your logs for sendemail errors using: index=_internal sourcetype=splunk_python "sendemail" You will receive a notification from the Security Content team shortly that your request is being processed. Hang tight!