Logs Enriched using IPtoHost Enrichment Source

After applying Enrichment, a log displays hostname for IP Address if that IP Address resolves to a hostname in the DNS Server.

The below screenshot shows the difference between unenriched and enriched logs.

_images/LP_Config_ES_Unenriched_Sample.png

Unenriched Log Sample

_images/LP_Config_ES_IPtoHost_Example.png

Enriched Log Sample


Helpful?

We are glad this guide helped.


Please don't include any personal information in your comment

Contact Support