I have some web access logs that look like this:
10.0.0.134 - - [31/Aug/2017:08:07:40 -0600] "GET /images/MXALoginBG.jpg HTTP/1.1" 200 54665 "https://prod.MXA.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0"
And I need to get all of the unique IPs listed into a single list so I can look them up and determine where they are from and if the same user and corresponding login event in the Audit logs were authorized (below)
8 1418168577 2 bob.smithi 91.76.169.010 allowed /login.php
Any recommendations on how to do this?
... View more