admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
sysm_source
splunk-security_content/lookups/cloud_instances_enough_data.yml
T
David Dorsey b48b40ff76 Updated search for abnormally high cloud instances. Including 
verifying that enough data is there
2020-08-25 22:28:59 -05:00

7 lines
306 B
YAML
Raw Permalink Blame History

default_match: 'false'
description: A lookup to determine if you have a sufficient amount of time has passed to collect cloud instance data for behavioral searches
collection: cloud_instances_enough_data
name: cloud_instances_enough_data
fields_list: _key, filter, enough_data
match_type: WILDCARD(filter)
Reference in New Issue View Git Blame Copy Permalink