topic Re: Splunk add on for microsoft windows in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-add-on-for-microsoft-windows/m-p/577777#M10481 <P>Where and how are you looking for tags?&nbsp; Do you have any DNS data indexed?</P> Wed, 08 Dec 2021 13:45:13 GMT richgalloway 2021-12-08T13:45:13Z Splunk add on for microsoft windows https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-add-on-for-microsoft-windows/m-p/577774#M10480 <P>After installing microsoft windows add on I could not see applicable tags for network resolution data model with respect to DNS logs.</P><P>Why I could not see any tag? Any thoughts!</P> Wed, 08 Dec 2021 13:16:48 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-add-on-for-microsoft-windows/m-p/577774#M10480 N92 2021-12-08T13:16:48Z Re: Splunk add on for microsoft windows https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-add-on-for-microsoft-windows/m-p/577777#M10481 <P>Where and how are you looking for tags?&nbsp; Do you have any DNS data indexed?</P> Wed, 08 Dec 2021 13:45:13 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-add-on-for-microsoft-windows/m-p/577777#M10481 richgalloway 2021-12-08T13:45:13Z Re: Splunk add on for microsoft windows https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-add-on-for-microsoft-windows/m-p/577787#M10483 <P>Yes, dns data indexed.&nbsp;</P><P>&nbsp;</P><P>For mapping with datamodel I am searching at settings &gt; Tags.</P><P>&nbsp;</P><P>Because I could see two tags in datamodel page which are required for network resolution datamodel.</P><P>&nbsp;</P><P>1 Resolution and 2.dns</P> Wed, 08 Dec 2021 14:56:21 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Splunk-add-on-for-microsoft-windows/m-p/577787#M10483 N92 2021-12-08T14:56:21Z