# Name IPs (source and destination) in packetbeat flows

**URL:** https://discuss.elastic.co/t/name-ips-source-and-destination-in-packetbeat-flows/327851
**Category:** Beats
**Tags:** packetbeat
**Created:** [March 16, 2023, 11:50am UTC](https://discuss.elastic.co/t/name-ips-source-and-destination-in-packetbeat-flows/327851 "2023-03-16T11:50:00Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![mihai.radulescu](https://avatars.discourse-cdn.com/v4/letter/m/a698b9/32.png) [@mihai.radulescu](https://discuss.elastic.co/u/mihai.radulescu)
#### Post date: [March 16, 2023, 11:50am UTC](https://discuss.elastic.co/t/name-ips-source-and-destination-in-packetbeat-flows/327851/1 "2023-03-16T11:50:00Z")

</div>

Hello,

I'm using packetbeat to monitor internal networks flows. I'd like to know how I can add a name for each known IP (for example 10.10.10.1 is my DHCP server, I want to add field source.name : 'DHCP Server' and destination.name : 'DHCP Server' whenever is a match on that IP). Of course my list of IPs contains a lot of IPs (about 30-50 unique ones) and I'm wondering what is the best way to add and populate these new fields (using processor I guess, but can I do a translate list or something?).

Thanks and regards,  
Mihai Radulescu

---

<div class="post-metadata">

### Author: ![mihai.radulescu](https://avatars.discourse-cdn.com/v4/letter/m/a698b9/32.png) [@mihai.radulescu](https://discuss.elastic.co/u/mihai.radulescu)
#### Post date: [March 17, 2023, 1:50pm UTC](https://discuss.elastic.co/t/name-ips-source-and-destination-in-packetbeat-flows/327851/2 "2023-03-17T13:50:15Z")

</div>

tried this, but it didn't work:

- if:  
network:  
source.ip: '10.10.20.10/32'  
then:
  - add\_fields:  
fields:  
source.label: 'LB 2a'

- if:  
network:  
source.ip: '10.10.10.10/32'  
then:
  - add\_fields:  
fields:  
source.label: 'LB 2b'

---

<div class="post-metadata">

### Author: ![mihai.radulescu](https://avatars.discourse-cdn.com/v4/letter/m/a698b9/32.png) [@mihai.radulescu](https://discuss.elastic.co/u/mihai.radulescu)
#### Post date: [March 29, 2023, 7:14pm UTC](https://discuss.elastic.co/t/name-ips-source-and-destination-in-packetbeat-flows/327851/3 "2023-03-29T19:14:39Z")

</div>

Solved it by using labels in Visualizations in Kibana.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 26, 2023, 9:15pm UTC](https://discuss.elastic.co/t/name-ips-source-and-destination-in-packetbeat-flows/327851/4 "2023-04-26T21:15:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.