Page 1 of 1

Need IP and DNS Name for hosts in dashboard

Posted: Fri Jul 07, 2017 10:51 am
by amuzaffar
Hello Support,
I was able to change the IP to DNS name in the host field but can we have both IP and DNS shows up on a Dashboard?
Please advise.
Thanks

Re: Need IP and DNS Name for hosts in dashboard

Posted: Fri Jul 07, 2017 11:29 am
by scottwilkerson
Where on the dashboard would you like it shown?

Many log types send the configured hostname as a field, such as logsource on linux, or Hostname on Windows servers

If you want you could also add a dns filter to the logstash configuration
https://www.elastic.co/guide/en/logstas ... s-dns.html

However, this plugin can be extremely resource intense as it will be doing a lookup for every log message received

Re: Need IP and DNS Name for hosts in dashboard

Posted: Fri Jul 07, 2017 12:01 pm
by amuzaffar
Thanks for your help, I was able to add it by using below filter

dns {
reverse => [ "host" ]
action => [ "append" ]
add_tag => [ "dns" ]
}

Re: Need IP and DNS Name for hosts in dashboard

Posted: Fri Jul 07, 2017 12:07 pm
by scottwilkerson
perfect. Glad to be of assistance!