we are trying to configure the receiving of AppFlow data from Citrix Netscaler, using the Splunk Add-on for Citrix Netscaler and Splunk Stream.
Everything seems to work, except that not all fields are visible on the search head.
We can see "netflow_elements" but probably not "recognized".
How can we manage this? Any suggestion?