Hi I am trying to read pcap file from splunk stream. Everything get fetched except http_method (which should be GET or POST).
Please help me on this
Can you share the pcap file? I'm assuming you have the http_method field enabled in Stream UI
It's very huge and confidential...But it have the GET keword followed by URL
I suggest opening a support case