Where Clause for WMIbeat is not working

Elastic Stack Beats
1

hello,
I want to check non empty field of ip address in wmibeat, so i used whereclause for empty checking of IP adress as below in my wmibeat.yml.

  • class: Win32_NetworkAdapterConfiguration
    fields:
    • IPAddress
      whereclause: IPAddress != ""
      objecttitlecolumn: IPAddress

But,where Clause for IPAddress is not working For WMI Beat.

2

This topic was automatically closed after 28 days. New replies are no longer allowed.