Module enrichment_tables

Functionality to handle enrichment tables.

Modules

• file
  Handles enrichment tables for type = file.
• geoip
  Handles enrichment tables for type = geoip. Enrichment data is loaded from one of the MaxMind GeoIP databases, MaxMind GeoIP2 or GeoLite2 binary city database.
• memory
  Handles enrichment tables for type = memory.
• mmdb
  Handles enrichment tables for type = mmdb. Enrichment data is loaded from any database in MaxMind format.

Structs

• IndexHandle

Enums

• Condition
• EnrichmentTables
  Configuration options for an enrichment table to be used in a remap transform. Currently supported are:

Traits

• Table
  Enrichment tables represent additional data sources that can be used to enrich the event data passing through Vector.