geoip

[pccwglobalit]

hi, how can i add geoip support on NLS platform?

[hsmith]

Here's my geoip filter:

Code: Select all

if [type] == 'syslog' {
    geoip {
        source => 'ip'
    }
}

'ip' is a field that is populated in my logs. You may have to edit the source line to something different for yours.