Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Demote dst_endpoint in DNS event class #899

Closed
Aniak5 opened this issue Dec 20, 2023 · 1 comment
Closed

Demote dst_endpoint in DNS event class #899

Aniak5 opened this issue Dec 20, 2023 · 1 comment
Assignees
Labels
network_activity Issues related to Network Activity Category non_breaking Non Breaking, backwards compatible changes

Comments

@Aniak5
Copy link
Contributor

Aniak5 commented Dec 20, 2023

Currently the DNS event class has the dst_endpoint set to required and there are many logs that do not actually have a dst_endpoint populated such as Cloudflare DNS and Bind. Demote the dst_endpoint to be recommended rather than required.

@Aniak5 Aniak5 added network_activity Issues related to Network Activity Category non_breaking Non Breaking, backwards compatible changes labels Dec 20, 2023
@Aniak5 Aniak5 self-assigned this Dec 20, 2023
@pagbabian-splunk
Copy link
Contributor

Sounds right Ania. We should demote it, non-breaking.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
network_activity Issues related to Network Activity Category non_breaking Non Breaking, backwards compatible changes
Projects
None yet
Development

No branches or pull requests

2 participants