Name Resolution
Overview
The ElastiFlow Unified Flow Collector can be configured to resolve IP addresses to hostnames. The following settings allow this feature to be tuned to the needs of your environment.
EF_PROCESSOR_ENRICH_IPADDR_DNS_ENABLE
This setting enables DNS reverse lookups of IP addresses found in the received flow records.
- Valid Values
true
,false
- Default
false
EF_PROCESSOR_ENRICH_IPADDR_DNS_NAMESERVER_IP
The default behavior of the collector is to use the operating system's configured name resolution to resolve IP addresses to hostnames. Optionally a nameserver can be specified in this setting, which will be used instead.
info
If configured, this setting MUST contain a valid IP address.
- Default
- empty