Hi all, We are attempting to onboard Defender for IOT on prem sensor logs to SC4S.  These are currently being sent over port 514 in CEF format and have been written to the default config of the main index and cef sourcetype. We have attempted to write a custom parser based on the example in the docs, to send the logs to our defined index and sourcetype. (https://splunk.github.io/splunk-connect-for-syslog/main/create-parser/.) Are there any other steps we are missing? Thank you! ... View more