All Apps and Add-ons

http_method is not fetching from PCAP file through splunk strem

New Member

Hi I am trying to read pcap file from splunk stream. Everything get fetched except http_method (which should be GET or POST).
Please help me on this

0 Karma

Splunk Employee
Splunk Employee

Can you share the pcap file? I'm assuming you have the http_method field enabled in Stream UI

0 Karma

New Member

It's very huge and confidential...But it have the GET keword followed by URL

0 Karma

Splunk Employee
Splunk Employee

I suggest opening a support case

0 Karma