Creating custom runtime field which does a reverse dns lookup of another field

Hello,

Is it possible to do a (reverse) DNS lookup in a runtime field? How would I do this?

Best regards,

Willem

You would have to augment this at ingest time. Currently the best way to do this would be using Logstash.

@tylersmalley Yes, that's how I'm doing it now. But I was hoping runtime fields would allow dns lookups on read.. (like several other data analytics platform allow)