App populates events to the Web data model but not the IDS data model. Other WAF solutions populate to IDS data model.
That's correct. The Splunk Add-on for Akamai collects data from Akamai Cloud Monitor, so it is CDN data not WAF data in this case.
View solution in original post
Thanks for the reply. That does make sense.
I'm going to try to figure out from our guys what we have then.. it was installed for use with our Akamai Kona solution- which is a WAF.