we have some IP6 address and look like "lookup dnslookup " doesn't resolve IP6. Any suggestion?
Thanks
Hi pateId,
How do you want see this? In the search or like event action? Because if you want see by search since the 6.0 version Splunk support this. Here how to do that: http://docs.splunk.com/Documentation/Splunk/6.1.3/SearchReference/iplocation
, but you can see by event action, could create this for look in the external site for sample.
But iplocation doesn't give any info about host name which is done by dns lookup
Thanks
patel, please don't post a comment as an answer. there is a link to 'add comment'. thanks.