Hi,
I can see that packetbeat is giving a high number of logs from internal ip's like (255.255.255.255) larger than the server ip itself!
I only need the data related to the the server ip only, I don't know if somebody can tell whether keeping or having these ip benefits or not.
Also would anybody tell how can I configure packetbeat.yml file to only get the logs related to my server ip only and not any other network related ones?
Any fast help is really appreciated.
Regards,