enrichment for Arkime data #504
Labels
arkime
Relating to Malcolm's use of Arkime
enhancement
New feature or request
netbox
Related to Malcolm's use of NetBox
Milestone
Enrichment takes place in the logstash pipeline. This, of course, precludes data being processed by Arkime capture from having the same enrichments done on them. Of particular note is the NetBox enrichment.
Arkime does have a plugin architecture. It's possible that we could build an Arkime plugin .so that takes care of this.
Need to:
The text was updated successfully, but these errors were encountered: