Source_ip and destination_ip displayed on Map Kibana

Elastic Stack Kibana
1

Hi ,

I am currently using logstash to extract the source_ip and destination_ip fields from snort alerts and would like to plot them on a visualization map in Kibana. I read in a separate community post that you have to change the field from the management-> Index Patterns to ip from string however this option is greyed out. Is anybody aware how to do this please?

Thanks

2

If you want to display on a map you can use the geoip plugin to add location information as long as the ip addresses are public.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.