# Filter for Known IP Addresses in ML Jobs

**URL:** <https://discuss.elastic.co/t/filter-for-known-ip-addresses-in-ml-jobs/166722>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-machine-learning\
**Created:** [February 1, 2019, 11:46am UTC](https://discuss.elastic.co/t/filter-for-known-ip-addresses-in-ml-jobs/166722 "2019-02-01T11:46:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheNmaptomyHeartBeat](https://avatars.discourse-cdn.com/v4/letter/t/47e85d/32.png) [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\
**Post date:** [February 1, 2019, 11:46am UTC](https://discuss.elastic.co/t/filter-for-known-ip-addresses-in-ml-jobs/166722/1 "2019-02-01T11:46:02Z")

</div>

Hello

We have set up the default machine learning jobs for the Nginx module on Filebeat. Problem is when doing tests on the site the ML job will detect anomalies and send alerts for my IP address.

I am not sure if it's possible to filter for known IP addresses.

I usually just ignore them, but if there is a way to do this, it would make my life a bit easier.

Thanks advance.

---

<div class="post-metadata">

**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Post date:** [February 1, 2019, 2:12pm UTC](https://discuss.elastic.co/t/filter-for-known-ip-addresses-in-ml-jobs/166722/2 "2019-02-01T14:12:12Z")

</div>

See Custom Rules introduced in v6.4: [https://www.elastic.co/blog/how-to-capture-domain-knowledge-in-elastic-machine-learning-jobs-with-custom-rules](https://www.elastic.co/blog/how-to-capture-domain-knowledge-in-elastic-machine-learning-jobs-with-custom-rules)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 1, 2019, 2:12pm UTC](https://discuss.elastic.co/t/filter-for-known-ip-addresses-in-ml-jobs/166722/3 "2019-03-01T14:12:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
