Thanks @pkt_nspktr  I combined your approach with @hansb and I finally got it working! Great work, and thank you so much for sharing! Regards, Dave ... View more

@chrisgangl, I had similar issues and found a solution that worked for me; see my post https://community.splunk.com/t5/All-Apps-and-Add-ons/TA-pfsense-transforms-conf-pfsense-sourcetyper-broken/m-p/507092#M62298. If that doesn't help, I'm willing to share what little knowledge I've gained beating my head against the desk trying to get this to work for me! ... View more

@token2, I had a similar issue, and documented my solution here: https://community.splunk.com/t5/All-Apps-and-Add-ons/TA-pfsense-transforms-conf-pfsense-sourcetyper-broken/m-p/507092#M62298.  Take a look and see if that helps you any. ... View more