Hi. Fresh off the boat ELK user here. Can someone point out what I'm doing wrong here? I'm trying to translate a field (IP address) into FQDN with logstash. The data source is netflow, and I'm trying to get the IP address from the ipv4_dst_addr field into a separate field, translated. My logstas…

Troubling with add_field in filter. Please advice

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Troubling with add_field in filter. Please advice