Hi I need to implement SentinelOne for splunk there are addons and applications in splunkbase but in documentation it says that for single instance deployment I need only to install this App. So after installation and configurations I mentioned something I need to share and Need for help for this case, This application compared to other apps and addons for other venders does not create tags for eventtypes, fields aliases is works fine but tagging is an issue for me cuz I can not guess which eventtypes to tag for which datamodels? So how guys you can help me to solve this issue, in screeenshot I mentioned you can see that eventtypes is not tagged, SentinelOne is big vendor and I think there can be solution for this.
This application does not even creates eventtypes after configuration
