hi, I want use logstash to write the log that contains the ip of long type to the elasticsearch. how can i convert the long type ip to the Dotted decimal notation in the logstash
I'm not sure what you mean. You need to convert an integer IP address to dotted decimal form in Logstash? Why? Perhaps an example would be easier to understand.
@magnusbaeck, yes, I need to convert an integer IP address to dotted decimal form in Logstash, because the ip store in logs is like '3232241539'. I want to index them use ip type in elasticsearch.
That's a really weird log format then. I'm pretty sure you need a ruby filter for this (or a custom plugin). See https://basic70tech.wordpress.com/2007/04/13/32-bit-ip-address-to-dotted-notation-in-ruby/ for examples of how to make that conversion in Ruby.
@magnusbaeck, thank you very much, i have solve it。