有需求需要实现将自己公网IP不添加归属地,目前写法如下:
filter {
if [src_ip] not in "116.213.95.*" {
geoip {
source => "src_ip"
target => "src_geoip"
database => "/usr/local/logstash/GeoLite2-City.mmdb"
}
}
}
请各位大哥赐教,感谢。
filter {
if [src_ip] not in "116.213.95.*" {
geoip {
source => "src_ip"
target => "src_geoip"
database => "/usr/local/logstash/GeoLite2-City.mmdb"
}
}
}
请各位大哥赐教,感谢。
1 个回复
strglee
赞同来自: MeamoA