DEM - Missing contextual element: (presumed) ISP of SourceIP

  • 19 December 2022
  • 1 reply
  • 8 views

Userlevel 5
Badge +16

I was trying to correlate and troubleshoot a sporadic issue I had noted for a very small number of our users. 
However, while I was able to geographicly correlate them, this is largely insignificant.  What I think would have been a more interesting piece of data to have included in the visualization is the user's presumed ISP.  
Is this already being gathered via DNS when you retrieve the geolocation records, and just not available to us in DEM?  If so, can it be exposed?

 


1 reply

Userlevel 5
Badge +16

Post-holiday bump.

Reply