I am now using the netflow module in my logtash,But i found a wired thing.
In my logstash i can see hte geoip.cityname is framingham.But i found the destination ip address is a private address(10.140.50.155).Where is the problem
What does your configuration look like? What does the whole event look like (including city name and destination IP address)?
it's ok now , there is something wrong with my configuration,thanks~
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.