Convert ip-address of long type to the Dotted decimal notation

Elastic Stack Logstash
1

hi, I want use logstash to write the log that contains the ip of long type to the elasticsearch. how can i convert the long type ip to the Dotted decimal notation in the logstash

2

I'm not sure what you mean. You need to convert an integer IP address to dotted decimal form in Logstash? Why? Perhaps an example would be easier to understand.

3

@magnusbaeck, yes, I need to convert an integer IP address to dotted decimal form in Logstash, because the ip store in logs is like '3232241539'. I want to index them use ip type in elasticsearch.

4

That's a really weird log format then. I'm pretty sure you need a ruby filter for this (or a custom plugin). See https://basic70tech.wordpress.com/2007/04/13/32-bit-ip-address-to-dotted-notation-in-ruby/ for examples of how to make that conversion in Ruby.

5

@magnusbaeck, thank you very much, i have solve it。