Page 1 of 1

geoip

Posted: Tue Apr 19, 2016 9:30 am
by pccwglobalit
hi, how can i add geoip support on NLS platform?

Re: geoip

Posted: Tue Apr 19, 2016 9:35 am
by hsmith
Here's my geoip filter:

Code: Select all

if [type] == 'syslog' {
    geoip {
        source => 'ip'
    }
}
'ip' is a field that is populated in my logs. You may have to edit the source line to something different for yours.