How do I search for a specific mac address? I want to find a specific mac and also what IP it was connected to during the last communication.
You'll have to clarify what you're trying to do and with what logs. Are you feeding DHCP server logs into Splunk?