Team  i am install splunk stream according instruction , everything work fine exept few field not visible in splunk search , this fields is  Nat source ipv4 address  nat destination ipv4 adress napt source destination port napt source  transport port Splunk version 9.3.1 / Splunk stream 8.1.3    on over environment i install graylog and configure netflow collector , everything working fine all fields without manipulation is visible . PLease help , impossible that so famous product cant do that  ... View more

Team    we receive log from cisco to freeradius (2251) Received Accounting-Request Id 71 from 10.12.45.21:1646 to 10.12.45.20:1646 length 458 (2251) Acct-Session-Id = "000000000066B8D1" (2251) Framed-IP-Address = 10.5.0.37 (2251) Cisco-Policy-Up = "UPLOAD_60mb" (2251) Cisco-Policy-Down = "DOWNLOAD_60mb" (2251) Framed-Protocol = PPP (2251) Framed-Route = "10.5.0.0 255.255.240.0" (2251) User-Name = "10062200" (2251) Cisco-AVPair = "connect-progress=LAN Ses Up" (2251) Cisco-AVPair = "nas-tx-speed=1410065408" (2251) Cisco-AVPair = "nas-tx-speed-kbps=1410065" (2251) Cisco-AVPair = "nas-rx-speed=1410065408" (2251) Cisco-AVPair = "nas-rx-speed-kbps=1410065" (2251) Acct-Session-Time = 106563 (2251) Acct-Input-Gigawords = 0 (2251) Acct-Output-Gigawords = 1 (2251) Acct-Input-Octets = 1474690654 (2251) Acct-Output-Octets = 3499037264 (2251) Acct-Input-Packets = 3188702 (2251) Acct-Output-Packets = 7204536 (2251) Acct-Authentic = RADIUS (2251) Acct-Status-Type = Interim-Update (2251) Calling-Station-Id = "60-83-e7-d8-40-4f" (2251) NAS-Port-Type = PPPoEoVLAN (2251) NAS-Port = 0 (2251) NAS-Port-Id = "0/0/1/922" (2251) Cisco-AVPair = "client-mac-address=6083.e7d8.404f" (2251) Service-Type = Framed-User (2251) NAS-IP-Address = 10.90.95.1 (2251) PMIP6-Home-HN-Prefix = 3336:4534:4139::/70 (2251) Event-Timestamp = "Oct 21 2025 17:41:56 +04" (2251) Acct-Delay-Time = 0   if that possible to accept on splunk ?  ... View more