In the "Top Appliances with App Firewall Violations" panel under the Appliance Overview this graph is not working properly. Graph shows the appliance but groups it under null as the field violation is not present.
This field called "violation" which has not been extracted by the Netscaler app is the issue and there is possibly more fields that are not extracted by the look of things.
Is this something we need to extract ourselves ? If so, if possible, please could the regex be provided. I am using the sourcetype citrix_netscaler_syslog.
Thank you,
