This Logstash filter plugin is used to match mac addresses to vendor names.

This is a plugin for Logstash.

The filter requires a specially formatted oui-logstash.txt file for the ouifile. See logstash-oui-scraper

See CHANGELOG for development notes.

filter {
  ieee_oui {
    source => 'macaddress'
    target => 'oui_vendor'
    ouifile => '/path_to/oui-logstash.txt'
  }
}

• To get started, you'll need JRuby with the Bundler gem installed.

• Clone this repository

• Update your dependencies

bundle install

• Build your plugin gem

gem build logstash-filter-ieee_oui.gemspec

• Install the plugin from the Logstash home

bin/logstash-plugin install /your/local/plugin/logstash-filter-ieee_oui.gem

• Start Logstash and proceed to test the plugin

It is fully free and fully open source. The license is Apache 2.0, meaning you are pretty much free to use it however you want in whatever way. LICENSE