I am trying to use the DNS filter to map the hostname to IPaddress , below is the sample configuration I tried to map google.com to ipaddress filter{ mutate { add_field => {"hostname", "google.com"} } dns { reverse => ["hostname"] action => "replace" nameserver => ["8.8.…

You have it the wrong way around... reverse takes an IP address and looks up its name. resolve takes a name and looks up its IP address.

Ram_Prasath (Ram Prasath) August 21, 2017, 3:13pm 3

Thanks a lot

Topic		Replies	Views
How to match IP address to hostname without dns [Solved] Logstash	6	19366	July 6, 2017
Convert site name to IP address in Logstash Logstash	5	1683	July 6, 2017
DNS Filter - only first value in reverse array works Logstash	3	702	January 14, 2017
DNS filter is not working Logstash	2	250	December 8, 2020
How to match IP address to hostname (dns filter) Logstash	3	1669	October 19, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Having problem in reverse mapping of hostname to ip address using DNS filter

Related topics