I need a solution
v12.52 SDLP. not much in forums on Syslog fields. I'm looking to syslog incident info into Splunk, emulating the fields used in CSV incident exports. Type, Message Status, Has attachment and status are especially challenging. Fields available in Response rule are known to me and being used. Assistance is appreciated.