mateuszpierzchala-splunk

@cdh2155 Thanks for reaching out to us. I started reviewing it but it seems that the logs that you provided are somehow already formatted. Please provide .pcap files or raw...

@cdh2155 I will close this issue due to the lack of response. Please feel free to re-open it if you get some time to provide the details that we asked...

Hi @gregbecker-tekstream , I will work on that as soon as possible (most likely on Wednesday)- I'll let you know if there is anything else needed.

@gregbecker-tekstream Hey, I was not able to start working on this one, but I will tomorrow or on monday. Thanks for patience.

Hi @gregbecker-tekstream, the .pcap file that you provided does not contain any information that we can use- it's just SYN, ACK TCP messages- no logs that I can use to...

@rjha-splunk sure, np

closed by #1801

@pdbrowne0001 Is this issue still relevant?

@zyphermonkey please share PCAP file with me in DM on Slack (its Mateusz Pierzchała)

Also please tell me what sourcetype and you are expecting to be please.