External list

Elastic Stack Logstash
1

Hi,

Can we populate network field in CIDR plugin with list of networks stored in external file?

filter {
  cidr {
     add_tag => [ "testnet" ]
     address => [ "%{src_ip}", "%{dst_ip}" ]
     network => [ "/var/network-list" ]
    }
}

SOLVED: just found solution: network path

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.