Skip to content
This repository was archived by the owner on Mar 5, 2021. It is now read-only.

ip colomn error Invalid IP address, skipping {:ip=>"srcip" #5

Open
jeff419 opened this issue Nov 6, 2020 · 2 comments
Open

ip colomn error Invalid IP address, skipping {:ip=>"srcip" #5

jeff419 opened this issue Nov 6, 2020 · 2 comments

Comments

@jeff419
Copy link

jeff419 commented Nov 6, 2020

hi

I give that error:

"[2020-11-06T19:16:09,898][ERROR][logstash.filters.greynoise][web][8453df660f96e99e9445345345453455bcc2275342dfde6acbf765282] Invalid IP address, skipping {:ip=>"srcip", :event=>{"logstarttime"=>"2020-07-03T........."

my config is
greynoise {
ip => srcip
key => "sdgfsdgDFGDF34534dfsdfsdfsdfs"
target => "greynoise"
hit_cache_size => 100
hit_cache_ttl => 6
}

if I change like this it is work. but I want to check all my srcip automaticly. please help . thanks

greynoise {
ip => "8.8.8.8"
key => "sdgfsdgDFGDF34534dfsdfsdfsdfs"
target => "greynoise"
hit_cache_size => 100
hit_cache_ttl => 6
}

@RantMaster
Copy link

Hi There
I am also seeing this error. Anyone got ideas on how to troubleshoot?

Thanks

@jeff419
Copy link
Author

jeff419 commented Feb 8, 2021

you should write column name like below "%{ip}"

greynoise { ip => "%{ip}" key => "xxxxx" target => "greynoise" hit_cache_size => 100 hit_cache_ttl => 6 }

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants