clientip-internal

[lauMarot]

Shouldn't clientip-internal be configured ?

default value is : eventtype=web-traffic clientip=Some.CIDR.Range

[jbjerke_splunk]

Hi lauMArot

This is optional. If you configure this there will be an eventtype called clientip-internal that you can use for searching. No dashboards are currently using this but might do in the future.

j

[lauMarot]

[lauMarot]

"No dashboards are currently using this but might do in the future. "

are you sure ???

as event type clientip-internal appears in pageview = (eventtype=web-traffic
status=200
NOT (eventtype=web-uri-nonpage OR
eventtype=web-agent-nonpublic OR
eventtype=exclude-pageview)

and

web-agent-nonpublic is defined as follow : eventtype=ua-bot OR eventtype=clientip-nonroutable OR eventtype=clientip-internal

so clientip-internal is indeed used for example in Traffic Center (but the filter as -not- defined does not applied to any event)