Overview

Details

This package provides a streaming command 'ipv6compress' that compresses or expands an IPv6 address.

Although RFC 5952 encourages that systems SHOULD compress IPv6 addresses when represented as text, there are some applications that do not follow this recommendation. Working between data sources is difficult when trying to compare the expanded and compressed versions of an address so this utility aims to solve that problem.

Examples

Compress IPv6 addresses present in dest_ip field. Resulting output will overwrite existing values in dest_ip field.

| ipv6compress dest_ip

Sample output:
output1

Expand IPv6 addresses in src_ip field. Resulting output will be stored in src_ip_expanded field.

| ipv6compress action=expand output=src_ip_expanded src_ip

Sample output:
output2

Various test cases

Release Notes

Version 0.1.5

Sept. 12, 2024

Maintenance

Update Splunk SDK to version 2.0.2
Address a few AppInspect warnings related to config files

Version 0.1.4

March 14, 2023

Maintenance

Update Splunk SDK to version 1.7.3

Version 0.1.3

Jan. 7, 2021

Bug Fixes

Fix ImportError on clustered deployments

Version 0.1.2

Jan. 7, 2021

Maintenance

Update Splunk SDK to version 1.6.14

Version 0.1.1

Oct. 22, 2020

Bug Fixes

Fix KeyError on input field that does not exist

Version 0.1.0

March 10, 2020

993

Downloads

Share Subscribe

Version

Built by

Eric Urban

Support

Not Supported

Questions on Splunk Answers Flag as inappropriate

Compatibility

This version of the app (0.1.3) is not available for Splunk Cloud. However, version 0.1.4 of this app is available for Splunk Cloud.

This version of the app (0.1.2) is not available for Splunk Cloud. However, version 0.1.4 of this app is available for Splunk Cloud.

This version of the app (0.1.1) is not available for Splunk Cloud. However, version 0.1.4 of this app is available for Splunk Cloud.

This version of the app (0.1.0) is not available for Splunk Cloud. However, version 0.1.4 of this app is available for Splunk Cloud.

Products: Splunk Enterprise, Splunk Cloud

Products: Splunk Enterprise

Splunk Versions: 9.3, 9.2, 9.1, 9.0, 8.2, 8.1