Multiple source categories for single App
I have added the Microsoft Office 365 app from the App Catalog. When adding it, it only allows me to enter a single Source Category, even though I have 5 separate Source Categories for the same Collector (Sharepoint, Exchange, General, Azure AD and DLP logs).
How can I add the other source categories so that I can view all the dashboards for the separate logs?
-
Hi Brent,
when you add it to the library there is a drop down on the left you can choose 'custom data filter'. In there you can put something like the below:
_sourcecategory=O365/*
(_sourcecategory=A or _sourcecategory=B)You can even do _collector=something or any other valid sumo search term.
To fix this post install, remove the folder you imported the first time and import it again.
Please sign in to leave a comment.
Comments
2 comments