Search for an IP and create a field

Xfactor · ‎09-02-2020

I have an IP Address after the word Source that I want to extract and create a field and use that field (e.g. clientIP) to extract city and country information that uses the iplocation database and put that in a table.

Xfactor · ‎09-02-2020

Source 150.180.80.180:26194 - Destination IPAddr:port

thambisetty · ‎09-02-2020

Sample event please

————————————
If this helps, give a like below.

Search for an IP and create a field

regex

Fun with Regular Expression - multiples of nine

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

What’s New & Next in Splunk SOAR

Are you a member of the Splunk Community?

Search for an IP and create a field

regex

Fun with Regular Expression - multiples of nine

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

What’s New & Next in Splunk SOAR