When I do a search with |from datamodel, the search results are the same as when I do a search with |datamodel, but the field names are different:
|from datamodel:Authentication.Successful_Authentication | table *
returns field names like src, dest, action
and
|datamodel Authentication Successful_Authentication search | table *
returns field names like Authentication.src, Authentication.dest, and Authentication.action.
Why are the field names different in the search results?
↧
