HI all, I am struggling to get the correct information into Elasticsearch. I am using BIND DNS server running Packetbeats direct output to logstash, thereafter to elasticsearch and Kibana. The two fields that are causing some challenge are: dns.additionals and dns.authorities, the output look as fol…

Packetbeat-DNS index and template correction

Hans (Hans) June 4, 2016, 4:04pm 7

Thank you very much for the feedback and suggestion, I have opened a request on the logstash section:

Topic		Replies	Views
DNS Lookup from packetbeat Elasticsearch	3	422	July 15, 2018
Filter DNS queries by domains list Beats packetbeat	4	1123	July 17, 2018
Missing some fields in some document Beats beats-module , packetbeat	3	344	September 27, 2023
DNS lookup failure "elasticsearch" Beats docker , packetbeat	7	3913	June 29, 2022
Logstash sprintf formatting for elasticsearch output plugin does not seem to resolve Elasticsearch	2	992	December 30, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Packetbeat-DNS index and template correction

Related Topics