Faced with the need to see in the Apache log report the host name by ip-address (dns lookup reverse). I use Elastic Cloud and do not fully understand how this can be done.
I added settings to filebeat.yml (on the server where the logs come from), indicated this:
processors: - dns: type: reverse fields: source.ip: source.hostname destination.ip: destination.hostname - add_host_metadata: ~ - add_cloud_metadata: ~ - add_docker_metadata: ~ - add_kubernetes_metadata: ~
but the data did not appear in the report. Perhaps you need to somehow add a new field? I am new to this question. Perhaps someone knows why this does not work for me?