Document toolboxDocument toolbox

dhcp.infoblox

Introduction

The tags beginning with dhcp.infoblox identify events generated by Infoblox DHCP services.

Valid tags and data tables 

The full tag must have at least 3 levels. The first two are fixed as dhcp.infoblox. The third level identifies the type of events sent, and the fourth level indicates the event subtype. 

These are the valid tags and corresponding data tables that will receive the parsers' data:

Product / Service

Tags

Data tables

Product / Service

Tags

Data tables

Infoblox DHCP

dhcp.infoblox.stdout

dhcp.infoblox.stdout

dhcp.infoblox.stdout.v2

dhcp.infoblox.stdout

For more information, read more About Devo tags.

Table structure

These are the fields displayed in this table:

dhcp.infoblox.stdout

Field

Type

Field transformation

Source field name

Extra fields

Field

Type

Field transformation

Source field name

Extra fields

eventdate

timestamp

 

 

 

host

str

 

vhost

 

packet

str

 

 

 

toAddress

str

 

 

 

toDeviceId

str

 

 

 

fromAddress

str

 

 

 

fromDeviceId

str

 

 

 

ofAddress

str

 

 

 

ofDeviceId

str

 

 

 

onAddress

str

 

 

 

onDeviceId

str

 

 

 

forAddress

str

 

 

 

forDeviceId

str

 

 

 

via

str

 

 

 

viaDeviceId

str

 

 

 

TransID

str

 

 

 

network

str

 

 

 

uid

str

 

 

 

message

str

 

 

 

leaseIpAddress

str

ifthenelse(packet in set(["DHCPACK", "DHCPOFFER", "BOOTREPLY", "DHCPEXPIRE", "RELEASE"]), ifthenelse(isnull(onAddress), toAddress, onAddress), null)

toAddress

packet

onAddress

 

leaseHardwareAddress

str

ifthenelse(packet in set(["DHCPACK", "DHCPOFFER", "BOOTREPLY", "DHCPEXPIRE", "RELEASE"]), ifthenelse(isnull(onAddress), toDeviceId, toAddress), null)

toAddress

packet

toDeviceId

onAddress

 

hostchain

str

 

 

✓

tag

str

 

 

✓

rawMessage

str

 

rawSource

✓