# Configuring GeoIP information in Logstash for Kibana SIEM Network Map **URL:** \ **Category:** Logstash\ **Created:** [April 15, 2020, 8:55pm UTC](https://discuss.elastic.co/t/configuring-geoip-information-in-logstash-for-kibana-siem-network-map/228203 "2020-04-15T20:55:24Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![rgeisman](https://avatars.discourse-cdn.com/v4/letter/r/e480ec/32.png) [@rgeisman](https://discuss.elastic.co/u/rgeisman)\ **Post date:** [April 15, 2020, 8:55pm UTC](https://discuss.elastic.co/t/configuring-geoip-information-in-logstash-for-kibana-siem-network-map/228203/1 "2020-04-15T20:55:25Z")
Hello All, I am working with a previous ELK stack that was setup to just use beats to go to Elasticsearch. I have upgraded he cluster and now using Logstash. Previously the SIEM Network Map worked because a "geoip-info" pipeline was created in the beats, and then the geoip-info ingestion was created in ES (identical to the example in the documentation") But, now with Logstash, this doesn't work anymore. Of course, I have to remove pipeline: geoip-info from the beats setup, and we are ingesting data and that is working. I turned on Logstash geo-ip filter, but in discovery, lots of fields are missing including the geo related ones. How do I capture geo-ip info from the beats and make it go through Logstash to my indexes? (filebeat-_, auditbeat-_) and will show up in the SIEM network map? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 13, 2020, 8:55pm UTC](https://discuss.elastic.co/t/configuring-geoip-information-in-logstash-for-kibana-siem-network-map/228203/2 "2020-05-13T20:55:38Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.