Packetbeat getting high number of internal logs


I can see that packetbeat is giving a high number of logs from internal ip's like ( larger than the server ip itself!

I only need the data related to the the server ip only, I don't know if somebody can tell whether keeping or having these ip benefits or not.

Also would anybody tell how can I configure packetbeat.yml file to only get the logs related to my server ip only and not any other network related ones?

Any fast help is really appreciated.


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.