How does ES know local customer domain names so it can detect internal vs. external emails?

Question

Joseph Bauer · Accepted Answer

The Corporate Web and Email Domain Lookups are edited during initial configuration.

Joseph Bauer · Answer

Web and email domain names are set in General -> General Configuration.

Joseph Bauer · Answer

ES uses the User Activity index and applies machine learning to determine internal and external domains.

Joseph Bauer · Answer

ES extracts local email and web domains automatically from SMTP and HTTP logs.

List of questions