Back to Beats

Add network direction [add-network-direction]

docs/reference/packetbeat/add-network-direction.md

9.4.0706 B
Original Source

Add network direction [add-network-direction]

The add_network_direction processor attempts to compute the perimeter-based network direction given an a source and destination ip address and list of internal networks. The key internal_networks can contain either CIDR blocks or a list of special values enumerated in the network section of Conditions.

yaml
processors:
  - add_network_direction:
      source: source.ip
      destination: destination.ip
      target: network.direction
      internal_networks: [ private ]

See Conditions for a list of supported conditions.