# smtp.log field

**URL:** <https://community.zeek.org/t/smtp-log-field/3142>\
**Category:** Zeek\
**Created:** [June 9, 2014, 3:35pm UTC](https://community.zeek.org/t/smtp-log-field/3142 "2014-06-09T15:35:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ohhello\_Nicetomeetu](https://avatars.discourse-cdn.com/v4/letter/o/8797f3/32.png) [@Ohhello\_Nicetomeetu](https://community.zeek.org/u/Ohhello_Nicetomeetu)\
**Post date:** [June 9, 2014, 3:35pm UTC](https://community.zeek.org/t/smtp-log-field/3142/1 "2014-06-09T15:35:37Z")

</div>

Hi all,

Im a new BRO user and still have much to learn. Looking at the log files (http.log and smtp.log), i’ve noticed some of the fields have the “-” unset value. Particularly, im looking at the smtp.log file and noticed the “x-originating-ip” field has unset value. What is the correct way to have this value correctly logged.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:41pm UTC](https://community.zeek.org/t/smtp-log-field/3142/2 "2022-05-06T15:41:50Z")

</div>