Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

True-Client-IP=[12.34.56.78]

$
0
0
All, I have some header information coming through like so True-Client-IP=[12.34.56.78] I'd like to correct the data as it's ingested to be True-Client-IP=12.34.56.78 Dropping the "[]" from around the IP address. Not sure where to start. I feel like I should be able to use SEDCMD inside props.conf but I am not sure how that would look.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>