Synopsis
SIEM Pull Service has detected via Splunk query that this Linux host performed a DHCP release.
Description
SIEM Pull Service has detected via Splunk query that this Linux host performed a DHCP release. The query used was (sourcetype="*dhcp*" OR *dhcpd*DHCP* OR source="*dhcp*") AND NOT ("*DNS Update*" OR "*DNS record*")
