Closed Moofeng closed 4 years ago
I suggest we set up a discussion group
In the ./lookups folder, create a symbolic link to sysmoneventcode.csv that points to sysmoneventcodes.csv and restart Splunk. Or fix the typo directly in ./default/props.conf
Thanks for pointing this out, it has been adjusted in the latest commits