This TA provides CIM field extractions and pre-built panels for Windows DHCP Logs.
The prebuilt panels allow you to visualize the type of events your DHCP servers are processing, and investigate leases, errors and warnings.
A panel is also included which shows addresses which have recently been issued to more than one host, and uses the custom Timeline Viz, which is available here:
https://splunkbase.splunk.com/app/3120/