search

nicksherron / logstash-filter-greynoise

Logstash filter plugin for the Greynoise.io api
https://greynoise.io
Other
7 stars 3 forks source link

ip colomn error Invalid IP address, skipping {:ip=>"srcip" #5

Open jeff419 opened 3 years ago

jeff419 commented 3 years ago

hi

I give that error:

"[2020-11-06T19:16:09,898][ERROR][logstash.filters.greynoise][web][8453df660f96e99e9445345345453455bcc2275342dfde6acbf765282] Invalid IP address, skipping {:ip=>"srcip", :event=>{"logstarttime"=>"2020-07-03T........."

my config is greynoise { ip => srcip key => "sdgfsdgDFGDF34534dfsdfsdfsdfs" target => "greynoise" hit_cache_size => 100 hit_cache_ttl => 6 }

if I change like this it is work. but I want to check all my srcip automaticly. please help . thanks

greynoise { ip => "8.8.8.8" key => "sdgfsdgDFGDF34534dfsdfsdfsdfs" target => "greynoise" hit_cache_size => 100 hit_cache_ttl => 6 }

RantMaster commented 3 years ago

Hi There I am also seeing this error. Anyone got ideas on how to troubleshoot?

Thanks

jeff419 commented 3 years ago

you should write column name like below "%{ip}"

greynoise { ip => "%{ip}" key => "xxxxx" target => "greynoise" hit_cache_size => 100 hit_cache_ttl => 6 }