This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« Add the local time zone Add Nomad metadata »
Elastic Docs ›Filebeat Reference [master] ›Configure Filebeat ›Filter and enhance data with processors

Add network direction

edit

Add network direction

edit

The add_network_direction processor attempts to compute the perimeter-based network direction given an a source and destination ip address and list of internal networks. The key internal_networks can contain either CIDR blocks or a list of special values enumerated in the network section of Conditions.

processors:
  - add_network_direction:
      source: source.ip
      destination: destination.ip
      target: network.direction
      internal_networks: [ private ]

See Conditions for a list of supported conditions.

« Add the local time zone Add Nomad metadata »