Default Version 1.0.1
February 19, 2020
February 19, 2020
Splunk Enterprise
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0
CIM Version: 4.x, 3.x
Log in to rate this app
This TA is used for parsing Unbound queries and answer logs. Please keep in mind, this app was designed for a 'verbosity: 1' configuration. Please check the screenshot to see all extracted fields.
Log in to report this app listing.