All,
I have a lookup, which I in turn want to do a couple aliases on. But doesn't seem to work. I get clienthost back, but the aliases don't. Any idea what I might be doing wrong here?
## Some DNS
FIELDALIAS-real_ip_as_clientip = real_ip as clientip
LOOKUP-dns = dnslookup clientip OUTPUT clienthost
FIELDALIAS-clienthost_as_src_host = clienthost AS src_host
FIELDALIAS-clienthost_as_src_dns = clienthost AS src_dns
↧