Splunk ES Event Type
The Splunk ES event type tag (Finding or Investigation) used by the classifier to route events to the correct incident type.
Splunk shortText
Details
| ID | incident_splunkeseventtype |
|---|---|
| CLI Name | splunkeseventtype |
| Type | shortText |
| Version | -1 |
| Required | No |
| Read Only | No |
| Use as KPI | No |
| Searchable | Yes |
Select Values
FindingInvestigation