CSV input file contains: server_hk, user, ip, port, timestamp, key_hash
Assigned to the IntelMQ fields: extra.hostkey, extra.user, source.ip, source.port, time.source, extra.key_hash
Then, the ASN-Lookup adds source.asn
Fields to be sent could be:
source.asn as "asn", source.ip as "ip", time.source as "timestamp", source.port as "port", extra.user as "user" and "extra.key_hash" as "key_hash"
For example:
CSV input file contains: server_hk, user, ip, port, timestamp, key_hash Assigned to the IntelMQ fields: extra.hostkey, extra.user, source.ip, source.port, time.source, extra.key_hash Then, the ASN-Lookup adds source.asn
Fields to be sent could be: source.asn as "asn", source.ip as "ip", time.source as "timestamp", source.port as "port", extra.user as "user" and "extra.key_hash" as "key_hash"