Hi - Evaluating Sawmill Professional 8.1.5 with IronPort Web logs. I have "Look up IP numbers using domain nameserver (DNS)" enabled but when I run a Server IPs report, there are servernames listed but also has a '-' listed containing the majority of the hits. Why would it not be able to resolve some names but not others?
1. "RE: Server IPs Report"
In response to message #0
Likely those lines do not contain an IP address, they probably have a "-" in the field. It's possible there's a parsing issue with the log, however, based on what you've said it sounds like the field is not populated for certain lines (hits.)