Hi,
Is there any option or specific way to drop IP?, such as using a Logstash filter to drop recordings of certain source or destination IPs in flows, I wanna to collect specific IP in cluster. Is there any way to do this?
AFAIK there is not an option to filter/drop incoming flows records based on IP addresses. I would probably stop the sending flow records from IPs I’m not interested in unless I’m just not understanding the issue.