I wanted to know if others are resolving the src_ip and dest_ip fields native to the app with actual hostnames? If so, how is it done? External lookup command built into Splunk using the external_lookup.py script?
I figured it out. The external lookup script works.
View solution in original post