@akkoem Thanks, the output below shows as per your suggestion and not sure if our Splunk unable to query DNS as it's not showing the correct FQDN.
... View more
Hi Sir @PrewinThomas , Appreciate your help, yes, the syntax works. But just a follow-up question, when using the lookups/dnslookup as per below screenshot didn't show the actual FQDN. Just wondering is this something that our splunk unable to do DNS query? Or maybe my lookup syntax is wrong and looking again for your advice. Thanks
... View more
All, Anybody got idea on the below selected fields on how convert to FQDN? Seems lookups/dnslookup are not possible because of https on the selected fields. Hope somebody can help 🙂 Thanks in advance
... View more