﻿---
title: Add network direction
description: The add_network_direction processor attempts to compute the perimeter-based network direction given an a source and destination ip address and list of...
url: https://www.elastic.co/elastic/docs-builder/docs/2961/reference/beats/auditbeat/add-network-direction
products:
  - Auditbeat
  - Beats
applies_to:
  - Elastic Cloud Serverless: Generally available
  - Elastic Stack: Generally available
---

# Add network direction
The `add_network_direction` processor attempts to compute the perimeter-based network direction given an a source and destination ip address and list of internal networks. The key `internal_networks` can contain either CIDR blocks or a list of special values enumerated in the network section of [Conditions](/elastic/docs-builder/docs/2961/reference/beats/auditbeat/defining-processors#conditions).
```yaml
processors:
  - add_network_direction:
      source: source.ip
      destination: destination.ip
      target: network.direction
      internal_networks: [ private ]
```

See [Conditions](/elastic/docs-builder/docs/2961/reference/beats/auditbeat/defining-processors#conditions) for a list of supported conditions.