This TA provides CIM field extractions and pre-built panels for Windows DHCP Logs. The prebuilt panels allow you to visualize the type of events your DHCP servers are processing, and investigate leases, errors and warnings. A panel is also included which shows addresses which have recently been issued to more than one host, and uses the custom Timeline Viz, which is available here: https://splunkbase.splunk.com/app/3120/