userID to LeasePool IP Mapping

Hi Greg,

You best bet on this one is to use the session id (a9dbfe8b) and correlate the two log lines. I'm not sure what collector you are using but I believe most SIEM solutions should provide the ability to index and run reports. If you are just using syslog you could always run a script to parse the logs pull the information and insert it into a database that you can run reports from.

Seth