Hi all -
The old MS DNS TA had a mapping for sourcetype MSAD:NT6:DNS, as shown here:
https://docs.splunk.com/Documentation/DCDNSAddOn/1.0.1/TA-WindowsDNS/Sourcetypes
Now, as we all know this TA is retired and absorbed into the main Windows TA... however, the Windows TA has no mappings at all for Network Resolution data model, and shows that the sourcetype MSAD:NT6:DNS doesn't map to any data model. I get that there are other better ways... but is there some reason we can't have the old DNS mappings in the Windows TA?
https://docs.splunk.com/Documentation/AddOns/released/Windows/SourcetypesandCIMdatamodelinfo
