topic Where is the Windows DHCP Lease_duration field in UBA? in All Apps and Add-ons https://community.splunk.com/t5/All-Apps-and-Add-ons/Where-is-the-Windows-DHCP-Lease-duration-field-in-UBA/m-p/586903#M76233 <P>We are getting the DHCP logs from Windows.&nbsp; I am trying to ingest these logs into UBA however UBA requires the lease_duration.&nbsp; Where is this field... None of my logs has this or the alert code for it.&nbsp;&nbsp;</P> Tue, 01 Mar 2022 17:07:19 GMT cmeisch 2022-03-01T17:07:19Z Where is the Windows DHCP Lease_duration field in UBA? https://community.splunk.com/t5/All-Apps-and-Add-ons/Where-is-the-Windows-DHCP-Lease-duration-field-in-UBA/m-p/586903#M76233 <P>We are getting the DHCP logs from Windows.&nbsp; I am trying to ingest these logs into UBA however UBA requires the lease_duration.&nbsp; Where is this field... None of my logs has this or the alert code for it.&nbsp;&nbsp;</P> Tue, 01 Mar 2022 17:07:19 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Where-is-the-Windows-DHCP-Lease-duration-field-in-UBA/m-p/586903#M76233 cmeisch 2022-03-01T17:07:19Z