Search API through My Netflow data

Elastic Stack Elasticsearch
1

Hi Guys,

I have setup Netflow with my checkpoint firewall and data is properly coming in and being indexed. Now I have certain malicious IP addresses in other text file. How do I search through my netflow index to match those IP addresses? Any example is highly appreciated. I guess that could be possible using search API?

Also can I automate that search if at all that searching is possible?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.