From 29fe76877254ccaf6113715e21990377b5f87c60 Mon Sep 17 00:00:00 2001
From: Sean Whalen <44679+seanthegeek@users.noreply.github.com>
Date: Wed, 27 Mar 2024 18:00:35 -0400
Subject: [PATCH] Update dmarc_aggregate_dashboard.xml

---
 splunk/dmarc_aggregate_dashboard.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/splunk/dmarc_aggregate_dashboard.xml b/splunk/dmarc_aggregate_dashboard.xml
index 7cf0bfea..40cdea1b 100644
--- a/splunk/dmarc_aggregate_dashboard.xml
+++ b/splunk/dmarc_aggregate_dashboard.xml
@@ -86,7 +86,7 @@
       <fieldForLabel>source_name</fieldForLabel>
       <fieldForValue>source_name</fieldForValue>
       <search>
-        <query>index="email_ess" sourcetype="dmarc:aggregate"
+        <query>index="email_ess" sourcetype="dmarc:aggregate" source_type=$source_type$
         | stats count by source_name</query>
       </search>
     </input>