Listing 1: Apache Kafka einrichten podman run \ --name kafka \ -p 9092:9092 \ -p 9093:9093 \ -e KAFKA_NODE_ID=1 \ -e KAFKA_PROCESS_ROLES=broker,controller \ -e KAFKA_LISTENERS=PLAINTEXT://0.0.0.0:9092,CONTROLLER://0.0.0.0:9093 \ -e KAFKA_ADVERTISED_LISTENERS=PLAINTEXT://:9092 \ -e KAFKA_CONTROLLER_QUORUM_VOTERS=1@:9093 \ -e KAFKA_CONTROLLER_LISTENER_NAMES=CONTROLLER \ -e KAFKA_LISTENER_SECURITY_PROTOCOL_MAP=PLAINTEXT:PLAINTEXT,CONTROLLER:PLAINTEXT \ -e KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR=1 \ -e KAFKA_TRANSACTION_STATE_LOG_REPLICATION_FACTOR=1 \ -e KAFKA_TRANSACTION_STATE_LOG_MIN_ISR=1 \ apache/kafka:latest Listing 2: Beispieldaten aus Pi-hole dnsmasq: query[A] api.eu.amazonalexa.com from 192.168.xxx.xxx dnsmasq: cached e13678.dscb.akamaiedge.net is 23.59.18.102 dnsmasq: cached www.microsoft.com is dnsmasq: query[A] www.microsoft.com from 192.168.xxx.xxx dnsmasq: reply d90nnyvqgmkzx.cloudfront.net is 18.172.110.180 dnsmasq: reply api.eu.amazonalexa.com is dnsmasq: forwarded api.eu.amazonalexa.com to 192.168.xxx.xxx Listing 3: Pipeline in OpenSearch einrichten curl -X PUT "http://localhost:9200/_ingest/pipeline/geoip-pipeline" -H 'Content-Type: application/json' -d '{ "description": "Add geoip info for DNS resolved IPs", "processors": [ { "geoip": { "field": "dns_queried_system_ip", "target_field": "dns_queried_system_geoip", "ignore_missing": true, "properties": ["continent_name", "country_iso_code", "country_name", "region_name", "city_name", "location"] } .....