# Extract raw source IP from message?
**URL:** https://community.graylog.org/t/extract-raw-source-ip-from-message/882
**Category:** Graylog Central (peer support)
**Created:** [April 21, 2017, 7:23am UTC](https://community.graylog.org/t/extract-raw-source-ip-from-message/882 "2017-04-21T07:23:07Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@arobert](https://community.graylog.org/u/arobert)
#### Post date: [April 21, 2017, 7:23am UTC](https://community.graylog.org/t/extract-raw-source-ip-from-message/882/1 "2017-04-21T07:23:07Z")
Hi,
I’m trying to debug a problem where the ‘source’ field from a GELF TCP source is being filled in incorrectly. Something is misconfigured on the sending box. Unfortunately I don’t know what that source is, and there does not seem to be any information in graylog about WHERE (which IP) the message was actually received from. I saw in another post that graylog is actually discarding this info if the ‘source’ field is present in the message. Is there any debug info I can get that will show me the IP the message was actually received from, before processing?
thanks,
Adrian
---
### Author:  [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [April 21, 2017, 10:23am UTC](https://community.graylog.org/t/extract-raw-source-ip-from-message/882/2 "2017-04-21T10:23:42Z")
> [@arobert](#):
>
> there does not seem to be any information in graylog about WHERE (which IP) the message was actually received from
You can find this information in the `gl2_remote_ip` field.
---
### Author:  [@arobert](https://community.graylog.org/u/arobert)
#### Post date: [April 21, 2017, 12:14pm UTC](https://community.graylog.org/t/extract-raw-source-ip-from-message/882/3 "2017-04-21T12:14:05Z")
Ah ha, OK, well I feel like an idiot now! I was not seeing those gl2\_ fields in the UI. Now I found the ‘All fields’ link at the bottom of the Fields panel. Thank you, and sorry for bugging everybody.