In TA-meraki, there is a typo in tags.conf that prevents DHCP events from getting the dhcp tag.
network = enabled
session = enabled
dhcp = enable <-- should be dhcp = enabled
Thank you; uploaded new version 1.0.2 with reference to this answer: w/ the comment bugfix: thank you jgrayccm; https://answers.splunk.com/answers/492167/typo-in-tagsconf.html
I am really sorry; I don't know why I didn't catch this :(.
View solution in original post