Fast check of ip address list


(piter) #1

I have a many logs from external ip address that connect to my web application.
I would like to check this ip address into logs with my list in a text file.
How can I check if there is ip address into logs that are also into my list?


(piter) #2

This is a good solution! Thanks Christian.
But for logs that are already indexed?


(Christian Dahlqvist) #3

One option would be to look up the IP and add a tag or field during indexing, e.g. using a Logstash translate filter.