Use Case

Some automatic IP blacklisting systems (e.g. FireHOL) are automatically updating ipset contents to contain known malicious IP addresses to be blocked by firewalls. Those ipsets get updated regularly automatically to contain the latest IP blacklist data.

So, it would be nice if we could track the amount of entries of such dynamic ipsets and also see how many individual IP addresses are targeted (e.g. 10.12.5.0/8) would target 254 addresses while being just a single ipset entry.

Expected behavior

The ipset input plugin should export metrics to contain the mentioned data.

Actual behavior

This data is not exported.

Additional info

I will try to provide a PR that implements that feature soon.