Hi,
I would like to populate all forwarded events (from various stanzas) with a centralised list of field:value pairs.
Can this be achieved in a centralised location, avoiding the need to write individual transforms for each sourcetype?
Thank you in advance.
