To reflect the IP address of the database rather than the host, the field "AnlyzerIPV4" can be deleted from the ODBC definition file and minor changes will need to be made in the Security Analytics UI.
Follow the steps below to perform this procedure.
vi /etc/netwitness/ng/logcollection/content/collection/odbc/hips8x.xml
[root@logdecoder ~]# stop nwlogcollector nwlogcollector stop/waiting [root@logdecoder ~]# start nwlogcollector nwlogcollector start/running, process 24648