New fields in Http Communications
Hi,
To answer client identification problematics, I've performed a few small updates in Spider.
Now the Http Communication resource includes 2 new properties:
- stats.src.origin: the original IP address from the client. Stored as an IP in ES, so queryable like this: stats.src.origin:"10.1.22.0/16"
- stats.src.identification: the identified client. Extracted by:
- The login from Basic Auth identification
- The sub field from JWT
Both fields can be queried and aggregated upon. Both are accessible in grid (you need to disconnect/reconnect to refresh grids available columns), and in detail view.
What's more, 2 other fields have been added in grid: the response date and the x-forwarded-for request header.
Enjoy!

