Converting IP addresses from Hex to normal format in Splunk

Question

How do you convert IP address data in a splunk field from HEX to the normal 4 octet format?

Answer 1

I don't know about "in Splunk", but the conversion is easy - take two hex digits for each octet, put dots between them, convert each pair to decimal.

Many languages have a conversion function, otherwise for a one-off use http://www.binaryhexconverter.com/hex-to-decimal-converter.

e.g. C0A8FE01 -> C0.A8.FE.01 -> 192.A8.FE.01 -> 192.168.FE.01 -> 192.168.254.1