Logstash and GeoIPASN


(sampasei) #1

Hi all,
i have a question about logstash and GeoIPASN.
I'm using GeoIPASNum.dat and works well: i'm using the snipped code below

        geoip {
            source => "id_orig_h"
            target => "geoIPASN"
            database => "/opt/logstash/vendor/geoip/GeoIPASNum.dat"
        }

I've seen in the database that the starting and ending ip associated to an owner are also present: how can i extract these data?
Thanks


(system) #2