Local IP

If the alert triggered on network activity (the Event Type is Network Connection) this is the IP address of the host that triggered the alert. If not, then N/A.

Core Alert Fields multiSelect

Details

ID	`incident_localip`
CLI Name	`localip`
Type	multiSelect
Version	-1
Required	No
Read Only	No
Use as KPI	No
Searchable	No

Source

incidentfield-Local_IP.json

Download History Raw

{
    "associatedToAll": true,
    "caseInsensitive": true,
    "cliName": "localip",
    "closeForm": false,
    "description": "If the alert triggered on network activity (the Event Type is Network Connection) this is the IP address of the host that triggered the alert. If not, then N/A.",
    "content": true,
    "editForm": true,
    "group": 0,
    "hidden": false,
    "id": "incident_localip",
    "isReadOnly": false,
    "locked": false,
    "name": "Local IP",
    "neverSetAsRequired": false,
    "openEnded": true,
    "ownerOnly": false,
    "propagationLabels": [
        "all"
    ],
    "required": false,
    "sla": 0,
    "system": false,
    "threshold": 72,
    "type": "multiSelect",
    "unmapped": false,
    "unsearchable": true,
    "useAsKpi": false,
    "version": -1,
    "fromVersion": "6.5.0",
    "x2_fields": "action_local_ip",
    "Aliases": [
        {
            "cliName": "sourceipoffense",
            "type": "multiSelect",
            "name": "Source IP - Offense"
        },
        {
            "cliName": "f5silverlinegeolocationsourceip",
            "type": "shortText",
            "name": "F5 Silverline Geo Location Source IP"
        },
        {
            "cliName": "f5silverlinemessageoriginatorsourceip",
            "type": "shortText",
            "name": "F5 Silverline Message Originator Source IP "
        },
        {
            "cliName": "f5silverlinetranslatedsourceip",
            "type": "shortText",
            "name": "F5 Silverline Translated Source IP"
        },
        {
            "cliName": "sourceip",
            "type": "shortText",
            "name": "Source IP"
        },
        {
            "cliName": "sourceips",
            "type": "multiSelect",
            "name": "Source IPs"
        },
        {
            "cliName": "src",
            "type": "shortText",
            "name": "Src"
        },
        {
            "cliName": "srcs",
            "type": "multiSelect",
            "name": "Srcs"
        },
        {
            "cliName": "srcs",
            "type": "multiSelect",
            "name": "Srcs"
        },
        {
            "cliName": "devicelocalip",
            "type": "shortText",
            "name": "Device Local IP"
        },
        {
            "cliName": "sourceipv6",
            "type": "multiSelect",
            "name": "Source IPV6"
        },
        {
            "cliName": "threathuntingdetectedip",
            "type": "multiSelect",
            "name": "Threat Hunting Detected IP"
        },
        {
            "cliName": "detectedinternalips",
            "type": "shortText",
            "name": "Detected Internal IPs"
        },
        {
            "cliName": "digitalguardiansourceip",
            "type": "shortText",
            "name": "Digital Guardian Source IP"
        }
    ]
}