# IP Address Enrichment

## Overview

ElastiFlow NetObserv Flow provides the ability to enrich flow records based on IP address. Enrichment attributes fetched for a particular IP address will be cached by the collector.

## Configurations

### EF\_PROCESSOR\_ENRICH\_IPADDR\_TTL

The length of time the IP address enrichment attributes will be cached after they are initially fetched. This value is in units of seconds.

* Default
  * `7200` (2 hours)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.elastiflow.com/flowcoll/configuration/enrichment-options/ip-address-enrichment.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.