Graylog2 / Graylog2/graylog-s3-lambda
Cloudflare IP fields are set as string instead of IP
Open
feature
triaged
- Dominant language
- Java
- Stars
- 13
- Forks
- 6
- PR merge metrics
- No merged PRs in 30d
Description
When Cloudflare logs are ingested through the Lambda function, the ClientIP, EdgeServerIP, and OriginIP fields are brought in as a string instead of an IP address. This means that the field cannot be queried as an IP address, and so it prevents using cidr notation in the query e.g., `ClientIP:(172.16.0.0\/12)`
The lambda function should be updated to set the string to an IP.
Contributor guide
Assessment
This issue has not been assessed yet.