IP Address

The IP Address field denotes the IP address of the source of the event.

Most, but not all, events have an IP address. For most events, the IP address corresponds to the “Source” field, which is the IP address of the client computer for App Control Agent generated events. This is the IP address of the agent at the time of the event, not necessarily the current IP address of the agent.

Events generated by App Control Console activities report the IP address of the machine on which the user is accessing the console. For example, “Console user login” and some “File approval created” events contain the IP address of the computer on which a console user performed those actions.

Most events generated by the App Control Server, Reporter and the database itself (whose source is “System”) do not have an IP address. This includes, for example, events such as “Alert triggered” and “Server errors”. In those cases, the IP address is unnecessary, since it is always the same. Exceptions to this rule are Server and Reporter start and stop events, which contain IP address of the Server and Reporter for diagnostics purposes.