DNS v2 EVE does not longer contain `dns.rdata` but it is still listed in the documentation
The RTD documentation for the DNS EVE-JSON fields (126.96.36.199.1 https://suricata.readthedocs.io/en/latest/output/eve/eve-json-format.html#id4) still lists
rdata as being a field in the
dns sub-object for DNS answers. However, in the Rust logging code there is no such field being added. Rdata information is only given as part of the
Updated by Sascha Steinbiss 10 months ago
I think this can actually be closed. Looking at it again the documentation does not really claim that
rdata is a top level field, it just speaks of an 'outline of fields seen in the different kinds of DNS events'. Since the examples are all up to date AFAICS we're fine here.