Hello, I'm currently using the Logstash CIDR filter to tag private and public IP. Now, I want to use this plugin with a list of all the networks used within my company and add a field or a tag with network information when there is a match. Example : logstash-cidr.conf filter { cidr { …

[image] Nybble: Do anyone know how to retrieve the matched network range directly ? You cannot do that. If you look at the code, you will see that if it finds a match all it does it decorate the event (i.e. process the add_tag, remove_tag, add_field, and remove_field options). There is an op…

Logstash CIDR Filter : create new field with matched network

Elastic Stack Logstash

Nybble (Sebastien Lehuede) March 5, 2021, 6:22am 3

Many thanks for the answer !

Nice for the PR, it will be a usefull feature

But if the translate filter can support a million of lines, it should be totally fine for my use case too

Sébastien.

Topic		Replies	Views
Logstash CIDR network range Logstash	2	261	November 5, 2020
CIDR filter detect which ip matched Logstash	2	324	August 28, 2019
Using cidr plugin for tagging logs Logstash	28	7242	February 24, 2017
Mapping ip address to specific network Logstash	9	2904	July 5, 2018
Logstash CIDR Plugin not working Logstash	2	283	November 15, 2021

Logstash CIDR Filter : create new field with matched network

Related topics