I have a blacklist file that is in the following format
10.211.22.1#Port Scanning#country#10.0102#1.19281000
Can I use the regex function of the translate plugin for this?
I have a blacklist file that is in the following format
10.211.22.1#Port Scanning#country#10.0102#1.19281000
Can I use the regex function of the translate plugin for this?
No, that format isn't recognized by the translate plugin. You'll have to transform into a supported format outside of Logstash.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.