I need to know if AutoFocus can give a file hash field in the log event entery when it sees a file come through.
This file hash will allow us to answer two use cases that we are currently working on, if the file hash is displayed in Splunk, when the event occurs on the PAN.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!