UDP Input - Get host - how?

Elastic Stack Logstash
1

Hey,

How can I get the sender IP in UDP Input? I would like create an if expression for set type. I tried this, but it is not working:

    input {
       udp {
          port => 1514

          if [host] == "1.1.1.1" {
             type => "example"
          }
       }
    }

Thanks!

2

You cannot use a conditional inside a input like that. You would have to do it in a filter section using mutate+add_field.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.