Dear Team, Do anyone have idea on how do we create a watchlist in ELK. In other terms lookup tables. This specifies a range of values say 50 or 100 or more in a single file. And save it as .csv or .txt For Ex: there are around 50-100 source IP addresses and each cannot be mentioned in the conditio…

How to Create a Watchlist/Lookup Tables

warkolm (Mark Walkom) January 12, 2016, 12:44am 4

https://www.elastic.co/guide/en/logstash/current/plugins-filters-translate.html is the best place to start.

Topic		Replies	Views
How to use translate plugin with ES index for lookup data Logstash	6	479	August 21, 2019
Lookup Values Logstash	3	407	July 13, 2019
Read list within logstash configuration (translate plugin) Logstash	4	1817	July 6, 2017
How to use Translate plugin in grok filter Logstash	6	1796	October 16, 2017
Query database from a filter Logstash	5	1146	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to Create a Watchlist/Lookup Tables

Related topics