Skip to content

Commit

Permalink
updated the severity
Browse files Browse the repository at this point in the history
  • Loading branch information
hardikhdholariya committed Sep 9, 2024
1 parent b2a93b3 commit 1967cb8
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion cyences_app_for_splunk/default/savedsearches.conf
Original file line number Diff line number Diff line change
Expand Up @@ -493,7 +493,7 @@ request.ui_dispatch_app = cyences_app_for_splunk
request.ui_dispatch_view = search
search = `cs_sophos` sourcetype="sophos_events" type="Event::Firewall::LostConnectionToSophosCentral" \
| stats count, latest(_time) as _time, values(name) as threat, values(source_info.ip) as src_ip by host, location | sort -count \
| eval cyences_severity = "critical" \
| eval cyences_severity = "high" \
| `cs_human_readable_time_format(_time, event_time)` \
| `cs_sophos_firewall_lost_connection_to_sophos`
action.cyences_notable_event_action = 1
Expand Down

0 comments on commit 1967cb8

Please sign in to comment.