There are now three datetime type fields 'user_created_at' , 'user_updated_at', 'audit_updated_at'
Now he just chose a field 'user_updated_at', the field I really need is 'audit_updated_at'
... View more
in client webhook config header "application/json"(i can‘t change it,because che client is other project,other is also use),then in the splunk,the raw json String to be flattened. it is Unfriendly format.
can i get the raw json?
... View more