As the question implies, I know there's a processor that enrich client host information "add_host_metadata" but it just lists all network interfaces including the one really communicating with the output like:
"ip": ["192.168.0.1", "10.0.0.1"]
How do I know which ip address is the actual client ip address ?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.