Hi all,
Im a new BRO user and still have much to learn. Looking at the log files (http.log and smtp.log), i’ve noticed some of the fields have the “-” unset value. Particularly, im looking at the smtp.log file and noticed the “x-originating-ip” field has unset value. What is the correct way to have this value correctly logged.
Thanks in advance.