You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi,
I want to include a list of values into a search query in Kibana.
Use case:
I have a list of 1000 IP adresses from which I know they are internal ones or ones for testing. If I want to create some reports or make troubleshooting I only want to have results without these IP adresses. I don't want to flag the entries on ingest time, because I not always know at this time that some adresses should be filtered out later. And I don't want to rebuild my index everytime - just think about really big deployments with 50G of data into the cluster each day.
How can this be realized at search time?
The text was updated successfully, but these errors were encountered:
Hi,
I want to include a list of values into a search query in Kibana.
Use case:
I have a list of 1000 IP adresses from which I know they are internal ones or ones for testing. If I want to create some reports or make troubleshooting I only want to have results without these IP adresses. I don't want to flag the entries on ingest time, because I not always know at this time that some adresses should be filtered out later. And I don't want to rebuild my index everytime - just think about really big deployments with 50G of data into the cluster each day.
How can this be realized at search time?
The text was updated successfully, but these errors were encountered: