billgraziano / xelogstash

Send SQL Server Extended Events to Logstash, Elastic Search, or JSON
Other
26 stars 11 forks source link

Parse client IP address #83

Open billgraziano opened 2 years ago

billgraziano commented 2 years ago

Error: 17897, Severity: 20, State: 105. Session recovery feature data used in login record to open or recover a connection is structurally or semantically invalid; the connection has been closed. Please contact the vendor of the client library. [CLIENT: 10.10.128.85]

For error log or error or really any event, parse [CLIENT: 10.10.128.85] and try to capture an IP address. Store this in xe_errorlog_client.