Introducing SOC Insights for BloxOne Threat Defense: Boost your SOC efficiency with AI-driven insights to eliminate manual work and accelerate investigation and response times. Read the blog announcement here.

Reporting

Reply

Show EDNS0 Client Subnet IP on reports

New Member
Posts: 3
1244     0

Hi all,

 

I want to know if is possible to show in reports the EDNS0 Client Subnet Ip address (if it is there) instead the client IP. The reason is because all my Infoblox DNS resolvers are behind a load balancer with SNAT, so the client IP of my reports are always the IP address configured on Load Balancer SNAT. 

 

I don't know if this information is on the database and also I don't know how to modify the search to use the ECS instead client ip. I have used some dashboards templetes from this forums and there are very usefull if I can modify the IP showed there.

 

Thanks in adcance.

 

Oscar Nogales.

Showing results for 
Search instead for 
Did you mean: 

Recommended for You