# Compare Pf\_sense rule logs with a list **URL:** \ **Category:** Elasticsearch\ **Created:** [November 13, 2019, 8:56pm UTC](https://discuss.elastic.co/t/compare-pf-sense-rule-logs-with-a-list/207777 "2019-11-13T20:56:05Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![athos\_camargo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/athos_camargo/32/45644_2.png) [@athos\_camargo](https://discuss.elastic.co/u/athos_camargo)\ **Post date:** [November 13, 2019, 8:56pm UTC](https://discuss.elastic.co/t/compare-pf-sense-rule-logs-with-a-list/207777/1 "2019-11-13T20:56:05Z")
I am trying to do a specific dashboard based on PFSENSE rules logs, follow stack that I am using: Pfsense send logs via syslog, the log server have a fluent.d receiving that logs, then send to elastic. What I am already did: The Pfsense rules logs already arriving parsed on elasticsearch as I could see on kibana. What I need to do: 1 - On my pfsense I have a couple of Aliases pointing to ddns addresses(I did this because the source ips of these rules changing a lot) 2 - The rules that are in the logs shows only the ipaddresses not ddns addresses. 3 - I´ve created a script that backuping a pfsense config files, get the ddns addresses, then via dig it´s generate a list with a ddns and your ips. 4 - My problem is, I need crosses this list with logfirewall rules to identify and show only the logs that have a ddns ip from that list, then show the ddns adress not ip. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 11, 2019, 8:56pm UTC](https://discuss.elastic.co/t/compare-pf-sense-rule-logs-with-a-list/207777/2 "2019-12-11T20:56:10Z")
Closed on December 11, 2019, 8:56pm UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.