can anyone help me with ingesting DNS requesting using packetbeat in logstash .
im having the following filter and it keep tilling me client_ip is missing
filter {
if "packetbeat" in [tags] {
dns {
reverse => [ "client_ip" ]
action => "replace"
hit_cache_size => "100"
hit_cache_ttl => "180"
}
}
}
regards