Graylog2 / Graylog2/graylog-s3-lambda

Cloudflare IP fields are set as string instead of IP

Open
#21 1 comment 0 reactions 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
13
Forks
6
PR merge metrics
No merged PRs in 30d

Description

When Cloudflare logs are ingested through the Lambda function, the ClientIP, EdgeServerIP, and OriginIP fields are brought in as a string instead of an IP address. This means that the field cannot be queried as an IP address, and so it prevents using cidr notation in the query e.g., `ClientIP:(172.16.0.0\/12)`

The lambda function should be updated to set the string to an IP.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.