Multiple source categories for single App

Follow

Brent Reilly

• December 11, 2019 22:11

I have added the Microsoft Office 365 app from the App Catalog.  When adding it, it only allows me to enter a single Source Category, even though I have 5 separate Source Categories for the same Collector (Sharepoint, Exchange, General, Azure AD and DLP logs). 

How can I add the other source categories so that I can view all the dashboards for the separate logs?

0

• 

  Rick Jury

  • December 11, 2019 22:49

  Hi Brent,

  when you add it to the library there is a drop down on the left you can choose 'custom data filter'. In there you can put something like the below:

  _sourcecategory=O365/*
  (_sourcecategory=A or _sourcecategory=B)

  You can even do _collector=something or any other valid sumo search term.

  To fix this post install, remove the folder you imported the first time and import it again.

   

   

  0

  Comment actions Permalink
• 

  Brent Reilly

  • December 12, 2019 15:05

  That worked!  Thank you

  0

  Comment actions Permalink

Please sign in to leave a comment.