Splunk-Apps icon indicating copy to clipboard operation
Splunk-Apps copied to clipboard

Broken mapping of transport Field to Network Traffic datamodel protocol

Open MonkeyKa opened this issue 6 years ago • 1 comments

commit 437cf940510a4ffd5165414902e28e560ff6f456 on 9/11/2017 removed the Field Alias from transport to protocol. As a result the Network Traffic datamodel protocol field is not usable for pan:traffic.

Workaround is easy enough on my end, but could FIELDALIAS-transport = protocol as transport please be added back into the TA?

MonkeyKa avatar May 23 '19 16:05 MonkeyKa

:tada: Thanks for opening your first issue here! Welcome to the community!

welcome[bot] avatar Aug 07 '20 22:08 welcome[bot]