The following plugin looks up if a value in a specified list exists and then allows the addition of a record to indicate if found. Introduced in version 1.8.4
The plugin supports the following configuration parameters
Key | Description |
---|---|
In the following configuration we will read a file test1.log
that includes the following values
Additionally, we will use the following lookup file which contains a list of malicious IPs (ip_list.txt
)
In the configuration we are using $remote_addr as the lookup key and 7.7.7.7 is malicious. This means the record we would output for the last record would look like the following
file
The single value file that Fluent Bit will use as a lookup table to determine if the specified lookup_key
exists
lookup_key
The specific key to look up and determine if it exists, supports record accessor
record
The record to add if the lookup_key
is found in the specified file
. Note you may add multiple record parameters.