Hello,
I have a report that shows me network events - most of the events will have "source ip" coming from a proxy and destination being some url.
Is there a way to formulate report query so that it contains the actual source of that event based on another "nested" search that would identify the client that originated the proxy request (there would be something in common there, most likely a destination IP)
Thanks!
↧