Hi, I am trying to implement some alerts relying on the "vendor_region" field in the "All_Changes" CIM dataset. The data model and relevant datasets are populated by AWS Cloudtrail logs pulled by the AWS add-on from an S3 bucket. While troubleshooting the search, I have noticed that despite the "vendor_region" field being listed in the documentation for CIM All_Changes dataset (I am using version 4.17) the field is not present in the data model in the actual CIM add-on. Am I missing something? Thanks
... View more