Folks,
Does anyone know when we configure advanced secution in Source Type (Settings>SourceTypes and Edit), where is original configuration file where the advanced view shows?
I choose "linux_secure" source type and check advanced tab. I saw "src" and "src_ip" in search result for my data that used this source type. However I could't find any settings for these fields. So I though there were missing configurations in this tab and I wanted to know source configuration files for each source types.
Please someone share your knowledge.
