
source_address=* | process geoip(source_address) | search country_name IN BLACKLIST_COUNTRY
Something like this?
Hi !
I would like to create a widget with all connexions from a black list counrty. But I don’t it si possible or not !
Would like to know if is that possible or not? if is this possible, please could you tell me how can I get a list like that?
Thanks in advance
Looking forward to reading you
Share This Post:
source_address=* | process geoip(source_address) | search country_name IN BLACKLIST_COUNTRY
Something like this?
Hi @Nils Krumey ,
Thank you for your answer. Could you please tell is this possible to modifie the values of the BLACKLIST_COUNTRY in logPoint ? if yes how can I do that ?
Thanks in advance
BLACKLIST_COUNTRY would be the name of a list that you define yourself in Logpoint, and can edit and maintain. See https://docs.logpoint.com/docs/data-integration-guide/en/latest/Configuration/List%20and%20Tables.html for details.
Thank you for your help.
Best regards
Please sign in to leave a comment.
4 comments