What Changed
Fixed critical data fidelity bug in ASIM NetworkSession parsers for NTANetAnalytics that caused SrcIpAddr and DstIpAddr fields to return null when primary IP fields (SrcIp/DestIp) were empty but alternate fields (SrcPublicIps/DestPublicIps) contained valid data.
Parser Impact
Enhanced IP address mapping logic in both ASimNetworkSessionNTANetAnalytics and vimNetworkSessionNTANetAnalytics parsers with fallback mechanism:
- Primary mapping: Uses SrcIp/DestIp when available
- Fallback mapping: Uses first valid IP from SrcPublicIps/DestPublicIps when primary fields are empty
- Additional visibility: All PublicIPs arrays now preserved in AdditionalFields (SrcIpAddresses/DstIpAddresses)
Data Impact: Queries referencing SrcIpAddr/DstIpAddr against this parser previously returned null for flows where only PublicIPs were populated — this fixes that data blind spot and restores complete IP visibility for network session analysis.
Affected Files
Parsers/ASimNetworkSession/ARM/ASimNetworkSessionNTANetAnalytics/ASimNetworkSessionNTANetAnalytics.json
Parsers/ASimNetworkSession/ARM/vimNetworkSessionNTANetAnalytics/vimNetworkSessionNTANetAnalytics.json
Parsers/ASimNetworkSession/Parsers/ASimNetworkSessionNTANetAnalytics.yaml
Parsers/ASimNetworkSession/Parsers/vimNetworkSessionNTANetAnalytics.yaml