mirror of
https://github.com/aljazceru/cowrie.git
synced 2026-01-29 19:14:22 +01:00
add ASN numbers to logstash output
This commit is contained in:
@@ -31,6 +31,12 @@ filter {
|
||||
add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ]
|
||||
add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}" ]
|
||||
}
|
||||
|
||||
geoip {
|
||||
source => "src_ip"
|
||||
database => "/opt/logstash/vendor/geoip/GeoIPASNum.dat"
|
||||
}
|
||||
|
||||
mutate {
|
||||
convert => [ "[geoip][coordinates]", "float" ]
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user