search

graylog-labs / graylog-plugin-dnsresolver

Message filter plugin to reverse lookup the source field
Apache License 2.0
9 stars 6 forks source link

Not compatible with Graylog2 6.x #8

Open domrcrel opened 6 months ago

domrcrel commented 6 months ago

Graylog2 6.0 seems to use Guice 7 which removed the javax.inject method. See: https://github.com/google/guice/wiki/Guice700

Graylog crashes on startup if this plugin is installed, with the new version.

Gerben-W commented 6 months ago

I experience the same after upgrading to Graylog2 6.0

See attached file for errors in the log. graylog_dnsresolver_log_error.txt

After I disabled the module Graylog started up again.

domrcrel commented 6 months ago

I ended up using a lookup table to query for PTR records of the source field then used it in a pipeline rule. It works the same, and even allows you to look at fields other than source.

I don't think this plugin is needed anymore. I just needed to learn. :)

FingerlessGlov3s commented 2 months ago

I ended up using a lookup table to query for PTR records of the source field then used it in a pipeline rule. It works the same, and even allows you to look at fields other than source.

I don't think this plugin is needed anymore. I just needed to learn. :)

How did you do that? or did you just create a static list of PTR records?