When just the host is searched I get the following data.
Jan 10 08:46:17 172.16.20.121 Jan 10 08:46:17 127.0.0.1 20130110, 174, 2013/01/10 13:46:14, 2013/01/10 13:46:13, global, 33, idp1.<redacted>.lcl, 172.16.20.117, predefined, HTTP:XSS:HTML-SCRIPT-IN-URL-PRM, (NULL), (NULL), 10.10.10.132, 52147, 0.0.0.0, 0, (NULL), (NULL), 76.13.34.25, 80, 0.0.0.0, 0, tcp, global, 33, <redacted>-default, idp, 10, 0, conn dropped, major, no, interface=eth11, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 0, no, 31, Not Set, idp
The fields that were searched before no longer exist.
... View more