All Apps and Add-ons

clientip-internal

lauMarot
Path Finder

Shouldn't clientip-internal be configured ?

default value is : eventtype=web-traffic clientip=Some.CIDR.Range

0 Karma

jbjerke_splunk
Splunk Employee
Splunk Employee

Hi lauMArot

This is optional. If you configure this there will be an eventtype called clientip-internal that you can use for searching. No dashboards are currently using this but might do in the future.

j

0 Karma

lauMarot
Path Finder

alt text

0 Karma

lauMarot
Path Finder

"No dashboards are currently using this but might do in the future. "

are you sure ???

as event type clientip-internal appears in pageview = (eventtype=web-traffic
status=200
NOT (eventtype=web-uri-nonpage OR
eventtype=web-agent-nonpublic OR
eventtype=exclude-pageview)

and

web-agent-nonpublic is defined as follow : eventtype=ua-bot OR eventtype=clientip-nonroutable OR eventtype=clientip-internal

so clientip-internal is indeed used for example in Traffic Center (but the filter as -not- defined does not applied to any event)

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...