I have proxy logs that are mapping the wrong ip to target.ip for my environment. If I create an extension that overwrites the target.ip mapping, do I need to worry about any other fields changing (ex. conditional mappings based on target.ip from the parser)? I understand any fields enriched based on target.ip will change
Extension Overwrite
+6Any conditionals that have already run in the base parser won't run again in the extension, unless you include that logic in the extension. Enrichments and asset aliasing that runs during indexing would obviously be affected by a new IP value.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.