https://community.splunk.com/t5/Getting-Data-In/Cisco-Umbrella-Add-On-for-Splunk-Version6-support/m-p/572402#M101302 <P>Hi , does anyone have any experience with Parsing Version 6 schema of Umbrella logs</P><P>the release notes from the addon <A href="https://splunkbase.splunk.com/app/3926/" target="_blank" rel="noopener">https://splunkbase.splunk.com/app/3926/</A> talks only of version5</P><P>1.0.5: Adds support for logging format version 5 + Firewall Logs</P><P>&nbsp;</P><P>the change in Umbrella seems for my environment to be only from Version4 -&gt; version6 and</P><P>"Schema upgrades are one way; you will not be able to revert this upgrade."</P><P>Its scary you cant revert</P><P>&nbsp;</P><P>Anyone moved to version6 and did they make changes in the local/{props,transforms} ?</P><P>&nbsp;</P> Tue, 26 Oct 2021 09:30:31 GMT jonxilinx 2021-10-26T09:30:31Z https://community.splunk.com/t5/Getting-Data-In/Cisco-Umbrella-Add-On-for-Splunk-Version6-support/m-p/572402#M101302 <P>Hi , does anyone have any experience with Parsing Version 6 schema of Umbrella logs</P><P>the release notes from the addon <A href="https://splunkbase.splunk.com/app/3926/" target="_blank" rel="noopener">https://splunkbase.splunk.com/app/3926/</A> talks only of version5</P><P>1.0.5: Adds support for logging format version 5 + Firewall Logs</P><P>&nbsp;</P><P>the change in Umbrella seems for my environment to be only from Version4 -&gt; version6 and</P><P>"Schema upgrades are one way; you will not be able to revert this upgrade."</P><P>Its scary you cant revert</P><P>&nbsp;</P><P>Anyone moved to version6 and did they make changes in the local/{props,transforms} ?</P><P>&nbsp;</P> Tue, 26 Oct 2021 09:30:31 GMT https://community.splunk.com/t5/Getting-Data-In/Cisco-Umbrella-Add-On-for-Splunk-Version6-support/m-p/572402#M101302 jonxilinx 2021-10-26T09:30:31Z