Am I the only one who sets-up field aliases instead of tags or eventtypes for sourcetype #CIM compliance to enable datamodels?
https://t.co/0X3xHBUfkE
#splunk https://t.co/awPKjiQx8o— Warren Myers 🐧🐿 (@warrenmyers)
Oct 8, 2021
from Twitter https://twitter.com/warrenmyers
October 08, 2021 at 11:27AM
via IFTTT