e_group       overwrite: true       type: keyword       description: This key should never be used to parse Meta data from a session         (Logs/Packets) Directly, this is a Reserved key in NetWitness     - name: device_host       overwrite: true       type: keyword       description: This is the H