We have Cisco ASA VPN data and we applied sourcetype cisco:asa but some of the fields not showing as expected way.
I have configured ADD on properly still i see for example "message" field is not showing proper information. its showing mixed data with valid regex i can create field but just want to double check is there any thing need to tune from app or data model side
