First, I'm a beginner with Netwitness so forgive me if my terminology is
slightly off. I'm using the default ZScaler NSS parser from RSA. It has
been working for some time. I just need to make a slight change.
Currently the urlclass in the raw log is...