Starting in version 7.16, this experimental functionality has been removed. You should use the journald input in Filebeat instead.
add_network_direction processor attempts to compute the perimeter-based network direction
given an a source and destination ip address and list of internal networks. The key
can contain either CIDR blocks or a list of special values enumerated in the network section of Conditions.
processors: - add_network_direction: source: source.ip destination: destination.ip target: network.direction internal_networks: [ private ]
See Conditions for a list of supported conditions.
Intro to Kibana
ELK for Logs & Metrics