processor-add_network_direction.asciidoc

Add network direction

add_network_direction

The add_network_direction processor attempts to compute the perimeter-based network direction when given a source and destination IP address and a list of internal networks.

Example

  - add_network_direction:
      source: source.ip
      destination: destination.ip
      target: network.direction
      internal_networks: [ private ]

Configuration settings

processors.asciidoc

Name	Required	Default	Description
source	Yes		Source IP.
destination	Yes		Destination IP.
target	Yes		Target field where the network direction will be written.
internal_networks	Yes		List of internal networks. The value can contain either CIDR blocks or a list of special values enumerated in the network section of [conditions].