# Getting aws internal ip when using dns plugin i want to see actual dns name like abc.test.com

**URL:** <https://discuss.elastic.co/t/getting-aws-internal-ip-when-using-dns-plugin-i-want-to-see-actual-dns-name-like-abc-test-com/257455>\
**Category:** Logstash\
**Created:** [December 3, 2020, 6:26am UTC](https://discuss.elastic.co/t/getting-aws-internal-ip-when-using-dns-plugin-i-want-to-see-actual-dns-name-like-abc-test-com/257455 "2020-12-03T06:26:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sujeetjha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sujeetjha/32/79402_2.png) [@sujeetjha](https://discuss.elastic.co/u/sujeetjha)\
**Post date:** [December 3, 2020, 6:26am UTC](https://discuss.elastic.co/t/getting-aws-internal-ip-when-using-dns-plugin-i-want-to-see-actual-dns-name-like-abc-test-com/257455/1 "2020-12-03T06:26:49Z")

</div>

Getting AWS internal IP ([ip-11-11-11-11-amazon.com](http://ip-11-11-11-11-amazon.com)) when using DNS plugin I want to see actual DNS name like [abc.test.com](http://abc.test.com).. what should I do plz suggest... here is my code below

```auto

# Beats -> Logstash -> Elasticsearch pipeline.
input {
  beats {
    port => 5047
  }
}

#filter file for Default VPC flow log
filter {
  grok {
    match => ["message","%{WORD:version} %{WORD:account_id} %{NOTSPACE:interface_id} %{IP:srcaddr} %{IP:dstaddr} %{NUMBER:srcport} %{NUMBER:dstport} %{NUMBER:protocol} %{NUMBER:packets} %{NUMBER:bytes} %{NUMBER:start} %{NUMBER:end} %{WORD:action} %{WORD:log_status}"]
  }
  dns {
    reverse => ["srcaddr", "dstaddr"]
    action => "replace"
  }
}
output {
  elasticsearch {
    hosts => "http://localhost:9200"
    index => "vpc-%{+YYYY.MM.dd}"
  }
}

```

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [December 3, 2020, 4:35pm UTC](https://discuss.elastic.co/t/getting-aws-internal-ip-when-using-dns-plugin-i-want-to-see-actual-dns-name-like-abc-test-com/257455/2 "2020-12-03T16:35:46Z")

</div>

> [@sujeetjha](#):
>
> what should I do plz suggest

Take it up with Amazon support. They control the DNS data for their addresses.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 31, 2020, 4:35pm UTC](https://discuss.elastic.co/t/getting-aws-internal-ip-when-using-dns-plugin-i-want-to-see-actual-dns-name-like-abc-test-com/257455/3 "2020-12-31T16:35:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.