Hi, I would like to ask a question regarding the lookups table. I am managing logs about login and I want to be sure that on a specific host you can access only with a specific IP address, otherwise alert is triggered. So basically I have a lookup built like this IP HOST 1.1.1.1 host1 2.2.2.2 host2 3.3.3.3 host3 My purpose is to build a query search that finds whenever the IP-HOST association is not respected. 1.1.1.1 connects to host1 ---> OK 1.1.1.1 connects to host2 ---> BAD 2.2.2.2 connects to host1 ---> BAD The connection from host1 should arrive only from 1.1.1.1, etc.. How can I text this query? Thank you
... View more