We're seeing events where "client" has IPV6 address not getting extracted. For example, the following does not get extracted correctly -- while events with IPV4 addresses are getting extracted correctly: 2019-07-31T16:00:15+00:00 dns1.illinois.edu named[23473]: client 2001:558:fe04:a:69:252:244:142#53661 (xxxx.ad.uillinois.edu): query 'xxxx.ad.uillinois.edu/A/IN' denied I see some add-ons have specifically addressed IPV6: https://docs.splunk.com/Documentation/AddOns/released/CiscoASA/Extractions Does Infoblox add-on need this done too? ... View more