Splunk-Apps
Splunk-Apps copied to clipboard
Broken mapping of transport Field to Network Traffic datamodel protocol
commit 437cf940510a4ffd5165414902e28e560ff6f456 on 9/11/2017 removed the Field Alias from transport to protocol. As a result the Network Traffic datamodel protocol field is not usable for pan:traffic.
Workaround is easy enough on my end, but could
FIELDALIAS-transport = protocol as transport
please be added back into the TA?
:tada: Thanks for opening your first issue here! Welcome to the community!