Can anyone comment on why a http-request object doesn't have an attribute for a source IP?
In our case, we'd like to use it to document inbound http requests, and in that case the ip-src is relevant.. but the object definition only calls for an ip-dst, which is supposed to be the server address.
It appears it was defined and is commonly used only for http requests observed outbound (where the destination is relevant, not the source).
Would like some discussion, but if agreeable, I can create a PR to add this.