Starting in version 7.16, this experimental functionality has been removed. You should use the journald input in Filebeat instead.
« Add the local time zone Add Nomad metadata »
Elastic Docs ›Journalbeat Reference [7.15] ›Configure Journalbeat ›Filter and enhance data with processors

Add network direction

edit

Add network direction

edit

The add_network_direction processor attempts to compute the perimeter-based network direction given an a source and destination ip address and list of internal networks. The key internal_networks can contain either CIDR blocks or a list of special values enumerated in the network section of Conditions.

processors:
  - add_network_direction:
      source: source.ip
      destination: destination.ip
      target: network.direction
      internal_networks: [ private ]

See Conditions for a list of supported conditions.

« Add the local time zone Add Nomad metadata »