Hello, Would like to have information I am having a little difficulty with my logstash config, I would like to be able to "filter" out IF traffic come and goes from internal network, then output it to a specific index file IF traffic is coming from inside ( it will always be coming from internaly .…

@magnusbaeck want my filter to be as follow : If src and dst is local traffic then output to fortigate-ritm-* if src is local traffic and dst is wan traffic then output to fortigate-* if src is wan traffic and dst is local then output to fortigate-* But right now, I cant succed in doing it ... …

Logstash 2.4 -- Check if two [tags] is present then ouput

Elastic Stack Logstash

gh0stid (Alex) March 21, 2017, 3:11pm 23

Thank you for your time ! apreciated.

Topic		Replies	Views
Data going into wrong index-why Logstash	15	4590	April 18, 2018
Logstash - création d'index en fonction de l'IP de provenance Discussions en français	27	9109	March 16, 2017
Logstash logs duplicates in different indexes despite else if conditions Logstash	7	2395	October 16, 2018
Quick question. Logstash Multiple output to ES Logstash	4	849	July 6, 2017
Logstash 6.4.x : reading multiple files in conf.d Logstash	9	3504	October 20, 2018

Logstash 2.4 -- Check if two [tags] is present then ouput

Related topics