Field Extraction Rule Only Works if Receipt Time Checked
Hello,
I have created a FER for my proxy but for some reason it is not working right.
If I click the "Use Receipt Time" checkbox then I can see all my fields from the rule. If I do not click that box then none of the fields display. I have verified that the timestamp in the logs is correct and I have had the rule in place long enough it shouldn't matter.
What am I missing that this is only working with that box checked?
Please sign in to leave a comment.
Comments
0 comments