Terror drone return fix
Fix the bug that parasite will vanish if it missed its target when its previous cell is occupied.
is there an update?
Hi @harv-qq
I've looked into the props.conf file for the Cisco eStreamer for Splunk app, and the extraction it contains applies only to [source::eStreamer]. I also checked the parsers in SC4S but couldn’t locate any that set the source to eStreamer or anything similar. Also, I checked props.conf for the Splunk Security Cloud app, I noted that it does not use any of the sourcetype extractions specified in SC4S documentation, aside from cisco:asa.
So my recommendation is to remove this ref altogether. I ll raise a PR for the same and will close this issue soon.
PR has been merged, hence closing this issue.