Description:

Looks up ISP information for an IP address and adds the information to FlowFile attributes. The ISP data is provided as a MaxMind ISP database (Note that this is NOT the same as the GeoLite database utilized by some geo enrichment tools). The attribute that contains the IP address to lookup is provided by the ‘IP Address Attribute’ property. If the name of the attribute provided is ‘X’, then the the attributes added by enrichment will take the form X.isp.fieldName
Tags:

ISP, enrich, ip, maxmind

Properties:

In the list below, the names of required properties appear in bold. Any other properties (not in bold) are considered optional. The table also indicates any default values, and whether a property supports the NiFi Expression Language.

Name	Default Value	Allowable Values	Description
MaxMind Database File			Path to Maxmind IP Enrichment Database File
IP Address Attribute			The name of an attribute whose value is a dotted decimal IP address for which enrichment should occur.</br> Supports Expression Language: true

Relationships:

Name	Description
not found	Where to route flow files after unsuccessfully enriching attributes because no data was found
found	Where to route flow files after successfully enriching attributes with data provided by database

Reads Attributes:

None specified.

Writes Attributes:

Name	Description
X.isp.lookup.micros	The number of microseconds that the geo lookup took
X.isp.asn	The Autonomous System Number (ASN) identified for the IP address
X.isp.asn.organization	The Organization Associated with the ASN identified
X.isp.name	The name of the ISP associated with the IP address provided
X.isp.organization	The Organization associated with the IP address provided

State management:

This component does not store state.

Restricted:

This component is not restricted.

Input requirement:

This component requires an incoming relationship.