There are three table to get the IP of the agents; interface_addresses and Interface_details and routes table but all these returns very big data, I simply want to get IP address(es). I simply write a simple sql query in Decorators section:
select address as IP_Address from interface_addresses where address like ’10%’;
(assuming the client IP addresses starts with 10… IP block)
by this way, logs coming from agents to kolide server containing the IP address of each agent, but I don’t think the query is efficient…