Skip to main content

DEM - Missing contextual element: (presumed) ISP of SourceIP

  • December 19, 2022
  • 1 reply
  • 28 views

qyost
Forum|alt.badge.img+16

I was trying to correlate and troubleshoot a sporadic issue I had noted for a very small number of our users. 
However, while I was able to geographicly correlate them, this is largely insignificant.  What I think would have been a more interesting piece of data to have included in the visualization is the user's presumed ISP.  
Is this already being gathered via DNS when you retrieve the geolocation records, and just not available to us in DEM?  If so, can it be exposed?

 

This topic has been closed for replies.

1 reply

qyost
Forum|alt.badge.img+16
  • Author
  • Explorer III
  • January 3, 2023

Post-holiday bump.