This commit is contained in:
NikTripathi 2022-08-11 17:23:44 +05:30
Родитель b3b02e1be7
Коммит 965e391304
1 изменённых файлов: 3 добавлений и 3 удалений

Просмотреть файл

@ -21,7 +21,7 @@ let ProofpointPOD_maillog_view = view () {
SmXdelay=column_ifexists('sm_xdelay_s', ''),
SmCtladdr=column_ifexists('sm_ctladdr_s', ''),
EventUid=column_ifexists('sm_msgid_s', ''),
NetworkBytes=column_ifexists('sm_sizeBytes_s', ''),
NetworkBytes=toreal( column_ifexists('sm_sizeBytes_s', '')),
TlsEstablished=column_ifexists('sm_tls_verify_s', ''),
SrcNatIpAddr=column_ifexists('sm_relay_s', ''),
ProcessName=column_ifexists('sm_daemon_s', ''),
@ -173,7 +173,7 @@ let ProofpointPOD_message_view = view () {
SrcGeoCountry=column_ifexists('connection_country_s', ''),
NetworkProtocol=column_ifexists('connection_protocol_s', ''),
NetworkConnectionState=column_ifexists('connection_resolveStatus_s', ''),
NetworkBytes=column_ifexists('msg_sizeBytes_d', ''),
NetworkBytes=toreal( column_ifexists('sm_sizeBytes_s', '')),
NetworkDuration=column_ifexists('filter_durationSecs_d', ''),
EventStartTime=column_ifexists('filter_startTime_t', ''),
NetworkDirection=column_ifexists('filter_routeDirection_s', ''),
@ -296,4 +296,4 @@ let ProofpointPOD_message_view = view () {
SrcUserUpn,
EventType
};
union isfuzzy=true ProofpointPOD_message_view, ProofpointPOD_maillog_view
union isfuzzy=true ProofpointPOD_message_view, ProofpointPOD_maillog_view