SEDR does not forward the field "reg_value_result.data" to Splunk
Article ID: 192033
Updated On:
Products
Endpoint Detection and Response
Advanced Threat Protection Platform
Issue/Introduction
When reviewing data sent from Splunk to Symantec Endpoint Detection and Response (SEDR), the field "reg_value_result.data" is missing.
Resolution
Broadcom engineering resolved this issue in EDR version 4.6.0
Feedback
Yes
No
Powered by
