# How to add client ip address in winlogbeat

**URL:** <https://discuss.elastic.co/t/how-to-add-client-ip-address-in-winlogbeat/240195>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [July 7, 2020, 4:27pm UTC](https://discuss.elastic.co/t/how-to-add-client-ip-address-in-winlogbeat/240195 "2020-07-07T16:27:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tiencong283](https://avatars.discourse-cdn.com/v4/letter/t/c0e974/32.png) [@tiencong283](https://discuss.elastic.co/u/tiencong283)\
**Post date:** [July 7, 2020, 4:27pm UTC](https://discuss.elastic.co/t/how-to-add-client-ip-address-in-winlogbeat/240195/1 "2020-07-07T16:27:35Z")

</div>

As the question implies, I know there's a processor that enrich client host information "add\_host\_metadata" but it just lists all network interfaces including the one really communicating with the output like:  
"ip": ["192.168.0.1", "10.0.0.1"]  
How do I know which ip address is the actual client ip address ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 4, 2020, 4:28pm UTC](https://discuss.elastic.co/t/how-to-add-client-ip-address-in-winlogbeat/240195/2 "2020-08-04T16:28:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.