LukeMurphey / splunk-network-tools

A Splunk app that is useful for performing troubleshooting and management of networks
Apache License 2.0
7 stars 7 forks source link

Fixed translate issue #5

Closed lowell80 closed 4 years ago

lowell80 commented 4 years ago

Hey Luke, great tool! Just found a small issue with lookup whois. Specifically, the non-translated output fields were dropped. So only the various contract fields were being returned, but the dozen or so other fields were all blank. It seems like a one-line default behavior logic issue.

Example of issue:

| makeresults | eval host="8.8.8.8" | lookup whois host OUTPUT asn asn_cidr contact.name

With 1.5.0 this populates just contact.name, after the patch asn and asn_cird as also populated.

Thanks!