Closed philhagen closed 1 year ago
Currently source_geo.asnstr and destination_geo.asnstr are calculated as both runtime fields and manually formed fields in the logstash parser. They should be runtime fields only, but should include the other *_geo fields.
source_geo.asnstr
destination_geo.asnstr
Currently
source_geo.asnstranddestination_geo.asnstrare calculated as both runtime fields and manually formed fields in the logstash parser. They should be runtime fields only, but should include the other *_geo fields.