All Apps and Add-ons

Why do the fields on datamodel "ns_waf" doesn't exist?

bruce845
Explorer

Hi.

Fields present on datamodel "ns_waf" doesn't exist.
Anyone have these fields extracted? nswaf_action, nswaf_appliance, nswaf_company, etc.

This app doesn't have any extraction defined on props.conf.

Regards,
Bruce Campos

0 Karma
1 Solution

schose
Builder

Hi Bruce,

did you checkout the TA-netscaler_waf? https://github.com/schose/TA-netscaler_waf

Regards,

Andreas

View solution in original post

0 Karma

schose
Builder

Hi Bruce,

did you checkout the TA-netscaler_waf? https://github.com/schose/TA-netscaler_waf

Regards,

Andreas

0 Karma

bruce845
Explorer

Hi.

I didn't meet this add-on. I read the documentation of app and didn't find any reference.

But, with this add-on I can go working. Thanks for your answer.

Regards,
Bruce Campos

0 Karma
Get Updates on the Splunk Community!

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...