SIEM parser update collapses two source IP fields and the threat hunt queries miss half the traffic

Logs are arriving, but hunting results look incomplete because the updated parser rewrote field names that saved searches still depend on.