Module enrichment_tables

Source
Expand description

Functionality to handle enrichment tables.

Modules§

file
Handles enrichment tables for type = file.
geoip
Handles enrichment tables for type = geoip. Enrichment data is loaded from one of the MaxMind GeoIP databases, MaxMind GeoIP2 or GeoLite2 binary city database.
memory
Handles enrichment tables for type = memory.
mmdb
Handles enrichment tables for type = mmdb. Enrichment data is loaded from any database in MaxMind format.

Structs§

IndexHandle

Enums§

Condition
EnrichmentTables
Configuration options for an enrichment table to be used in a remap transform. Currently supported are:

Traits§

Table
Enrichment tables represent additional data sources that can be used to enrich the event data passing through Vector.