I want to run iplocation client_ip for a given sourcetype automatically. For example if i run
I dont want to run the command iplocation.
I would like to automatically look it up for this sourcetype.
| iplocation client_ip
Does anyone know how I can achieve this?
You would have to first convert/port the existing iplocation.py command into a scripted lookup and then make that an automatic lookup. Start here:
View solution in original post
@theeansible - Did the answer provided by woodcock help provide a working solution to your question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!