I think I've read every geoip and map network post I can find and I have one thing I need clarified.
To clarify I'm trying to configure the yml of a beat agent, not Logstash.
We have right around 50 facilities with different geolocations (lat/long). Each of them use a unique /16 10 net range. My question is this, do I need to specify a source and destination for every possible combination in each host's beat yml config file?
I'm not sure I'm fully grasping the relationship or necessity of the destination portion of the processor but the articles/posts I've found seem to show the same information (network, lat, long) in both the source and destination sections so I'm a bit confused.
Thank you,
Jason