Moved from Community Help to Business > SIEM as I think that;s what this is about. Moderator
On you data source configure the Support Generic Events: to "Log unknown event".
What i believe is that there is no parses for the DNS logs sent from you infoblox device.
If that is the case with that option enabled you will see a growing number of unknown events.
In that scenarion you will have to options :
- create your own parsers
- submit PER with McAFee :