Hello everyone! I currently have logstash setup to take in flow data. I also had a file with the in the yaml format with ip-range (key), autonomous system number (value) pairs. I wanted to know how to use the lookup, filter, or dns plugin to create a field by looking up the ip and receiving the AS …

Create a field based on IP Range

nsur1 July 23, 2017, 5:25pm 6

I got it figured out! I messed up my source field. Thank you for your help!

Topic		Replies	Views
Geoip with two ASN (mmdb format) database Logstash	1	718	June 5, 2019
Logstash and GeoIPASN Logstash	1	457	July 6, 2017
GeoLite2 and ASN in v.5.6 Logstash	2	2311	December 7, 2017
Logstash geoip filter error: _geoip_lookup_failure Logstash	1	595	December 11, 2018
After lot of effort my geo_ip is still not working Logstash	3	351	August 29, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Create a field based on IP Range

Related topics