# Dns reverse lookup in elasticsearch 5.0.1

**URL:** https://discuss.elastic.co/t/dns-reverse-lookup-in-elasticsearch-5-0-1/75743
**Category:** Elasticsearch
**Created:** [February 20, 2017, 1:06pm UTC](https://discuss.elastic.co/t/dns-reverse-lookup-in-elasticsearch-5-0-1/75743 "2017-02-20T13:06:32Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![vaishnavi](https://avatars.discourse-cdn.com/v4/letter/v/f19dbf/32.png) [@vaishnavi](https://discuss.elastic.co/u/vaishnavi)
#### Post date: [February 20, 2017, 1:06pm UTC](https://discuss.elastic.co/t/dns-reverse-lookup-in-elasticsearch-5-0-1/75743/1 "2017-02-20T13:06:32Z")

</div>

Hi  
I am using elasticsearch version 5.0.1 and centos 7.0  
I want to resolve IP address to dns host name of my elasticsearch data. Is there any way to do it while uploading files to elasticsearch

I want to convert IP address of source,destination as host [name.Is](http://name.Is) there any posiblity to do it  
Doing dns resolve manually while uploading files takes more time since I push bulk records every time to elasticsearch db.

Thanks in advance

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 20, 2017, 8:36pm UTC](https://discuss.elastic.co/t/dns-reverse-lookup-in-elasticsearch-5-0-1/75743/2 "2017-02-20T20:36:42Z")

</div>

You need to use Logstash for that./

---

<div class="post-metadata">

### Author: ![vaishnavi](https://avatars.discourse-cdn.com/v4/letter/v/f19dbf/32.png) [@vaishnavi](https://discuss.elastic.co/u/vaishnavi)
#### Post date: [February 21, 2017, 3:55am UTC](https://discuss.elastic.co/t/dns-reverse-lookup-in-elasticsearch-5-0-1/75743/3 "2017-02-21T03:55:26Z")

</div>

Thanks for your reply.  
How can I use Logstash to my data...as it is live data from my network  
Could you please give any hint how to use logstash with my data

Thanks in advance

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 21, 2017, 4:40am UTC](https://discuss.elastic.co/t/dns-reverse-lookup-in-elasticsearch-5-0-1/75743/4 "2017-02-21T04:40:38Z")

</div>

How does it get into ES?

---

<div class="post-metadata">

### Author: ![vaishnavi](https://avatars.discourse-cdn.com/v4/letter/v/f19dbf/32.png) [@vaishnavi](https://discuss.elastic.co/u/vaishnavi)
#### Post date: [February 21, 2017, 5:00am UTC](https://discuss.elastic.co/t/dns-reverse-lookup-in-elasticsearch-5-0-1/75743/5 "2017-02-21T05:00:54Z")

</div>

Thanks for your reply  
I parse data manually in python according to my format and push it to elasticsearch using curl command.

Thanks in advance

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 21, 2017, 7:40am UTC](https://discuss.elastic.co/t/dns-reverse-lookup-in-elasticsearch-5-0-1/75743/6 "2017-02-21T07:40:21Z")

</div>

Why not just use Logstash for all of that?

---

<div class="post-metadata">

### Author: ![vaishnavi](https://avatars.discourse-cdn.com/v4/letter/v/f19dbf/32.png) [@vaishnavi](https://discuss.elastic.co/u/vaishnavi)
#### Post date: [February 22, 2017, 4:00am UTC](https://discuss.elastic.co/t/dns-reverse-lookup-in-elasticsearch-5-0-1/75743/7 "2017-02-22T04:00:57Z")

</div>

My input is json file from network.  
can logstash convert json file to the format I need?  
If possible please give some example

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 22, 2017, 4:01am UTC](https://discuss.elastic.co/t/dns-reverse-lookup-in-elasticsearch-5-0-1/75743/8 "2017-03-22T04:01:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
