We are getting the DHCP logs from Windows. I am trying to ingest these logs into UBA however UBA requires the lease_duration. Where is this field... None of my logs has this or the alert code for it.