Add network direction

edit

The add_network_direction processor attempts to compute the perimeter-based network direction given an a source and destination ip address and list of internal networks. The key internal_networks can contain either CIDR blocks or a list of special values enumerated in the network section of Conditions.

processors:
  - add_network_direction:
      source: source.ip
      destination: destination.ip
      target: network.direction
      internal_networks: [ private ]

See Conditions for a list of supported conditions.