# Winlogbeats add public IP info
**URL:** https://discuss.elastic.co/t/winlogbeats-add-public-ip-info/267542
**Category:** Beats
**Tags:** winlogbeat
**Created:** [March 17, 2021, 3:53pm UTC](https://discuss.elastic.co/t/winlogbeats-add-public-ip-info/267542 "2021-03-17T15:53:34Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@probson](https://discuss.elastic.co/u/probson)
#### Post date: [March 17, 2021, 3:53pm UTC](https://discuss.elastic.co/t/winlogbeats-add-public-ip-info/267542/1 "2021-03-17T15:53:34Z")
Is there anyway with winlogbeats to get the devices current public IP and add that to the event data?
---
### Author:  [@Andre\_Letterer](https://discuss.elastic.co/u/Andre_Letterer)
#### Post date: [March 18, 2021, 1:38am UTC](https://discuss.elastic.co/t/winlogbeats-add-public-ip-info/267542/2 "2021-03-18T01:38:38Z")
Hi Philip,
there is probably a way to get this working in the script processor maybe, but for sure no easy way:
> **[Script Processor | Winlogbeat Reference \[7.11\] | Elastic](https://www.elastic.co/guide/en/beats/winlogbeat/current/processor-script.html)**
Otherwise there might be a way if you use logstash output in winlogbeat and then enrich it using exec input and execute a Powershell script to identify the public IP:
> **[Exec input plugin | Logstash Reference \[7.11\] | Elastic](https://www.elastic.co/guide/en/logstash/7.11/plugins-inputs-exec.html)**
Or you identify this public IP using an external Powershell script that writes from time to time a text file and from winlogbeat you read the content of this file using the script processor and move the content into a field.
That are the possibilities that come to mind.
---
### Author:  [@probson](https://discuss.elastic.co/u/probson)
#### Post date: [March 18, 2021, 9:28am UTC](https://discuss.elastic.co/t/winlogbeats-add-public-ip-info/267542/3 "2021-03-18T09:28:15Z")
great thank you, plenty of methods to explore
---
### Author:  [@Andre\_Letterer](https://discuss.elastic.co/u/Andre_Letterer)
#### Post date: [March 19, 2021, 1:58am UTC](https://discuss.elastic.co/t/winlogbeats-add-public-ip-info/267542/4 "2021-03-19T01:58:52Z")
Sure. Let me know if there are still issues.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 16, 2021, 3:59am UTC](https://discuss.elastic.co/t/winlogbeats-add-public-ip-info/267542/5 "2021-04-16T03:59:26Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.