Can I make logstash match the IP field to my subnet?
<p>I want to check if the source ip in my logs is within my subnet and return a value true. If its not within my subnet then I want to can give out a value false.</p>

<pre><code>filter
{
translate {
field =&gt; IP
dictionary =&gt; /path
destination =&gt; status

}
}
</code></pre>

<p>I know we can match the IP field value with the values in dictionary, but I am not sure how to do it.</p>

<p>Like my DC's IP's are mostly in between 172.17.2.0 to 172.17.6.255 and I am monitoring the traffic for them.
I want the logs only if IP address is not from my DC's range so that I can have check on external traffic. In other sense I want to have an eye on external traffic.</p>