isc_dhcp vs. isc_dhcpd

[ehlo550]

What is the sc4s version ?
3.22.5

Which operating system (including its version) are you using for hosting SC4S?
does not matter

Which runtime (Docker, Podman, Docker Swarm, BYOE, MicroK8s) are you using for SC4S?
does not matter

Is there a pcap available? If so, would you prefer to attach it to this issue or send it to Splunk support?
does not matter

Is the issue related to the environment of the customer or Software related issue?
no

Is it related to Data loss, please explain ?
Protocol? Hardware specs?
no

Last chance index/Fallback index?
no

Is the issue related to local customization?
no

Do we have all the default indexes created?
does not matter

Describe the bug
Current state:

• The documentation states a key of isc_dhcp while in fact you need to use isc_dhcpd with the current parser
• It seems this has a history:
• • Typo in Under Known Vendors - ISC - dhcpd key #1769
• • Why was the sourcetype changed on the isc dhcpd sourcetype?? #2003
• I assume something went wrong at a certain point of time.

[cwadhwani-splunk]

Hey @ehlo550
Thanks for pointing it out, we will update the documentation.