Zeros are added to address and numbers are twisted

[sky_143]

I have the address of a data point that is being sent to Splunk. When I search for the data point in Splunk, I get the address, however it is messed up and additionally zeros have been added to the address. What could be the reason for this error and what can I change to fix the problem?

the address as it is sent to Splunk: 1.1.98:20.14.4.137.1

the address as it arrives in Splunk search: 001.001.098:00137 0.020.014.0004.001

[richgalloway]

That looks unusual.  Not only are zeroes added, but the '137' has moved position.  Please explain how the address is ingested by Splunk.  What are the props.conf and transforms.conf settings for that sourcetype?