Not sure how to fix this, but for some reason the tags showing up in
Search > Datasets > Intrusion Detection > IDS Attacks > Summarize Fields
shows a mismatched type. Splunk docs shows that this should be a string field. The tag itself is generated from an Event type search, so I'm not sure why it would be anything other than string. Any insight?
