Starting in version 7.16, this experimental functionality has been removed. You
should use the journald input in Filebeat instead.
Add network direction
editAdd network direction
editThe add_network_direction
processor attempts to compute the perimeter-based network direction
given an a source and destination ip address and list of internal networks. The key internal_networks
can contain either CIDR blocks or a list of special values enumerated in the network section of Conditions.
processors: - add_network_direction: source: source.ip destination: destination.ip target: network.direction internal_networks: [ private ]
See Conditions for a list of supported conditions.