I have been using packetbeat to collect network transfer packets data, however, I discover that there is a client location field, however, seems that there isn't any data coming out from that. Is there anyway that I can collect the data?
Can you share some more details? What is your config? Which PB version are you using?
I am just using the latest packetbeat version 1.2.3 and I did not chane my default config, just using elasticsearch as the default output
Did you install the GeoLite city database at one of the default locations used by Packetbeat? https://www.elastic.co/guide/en/beats/packetbeat/1.2/configuration-shipper.html#_geoip_paths
Also client_location will only be populated with the client IP is a public IP address.
This topic was automatically closed after 21 days. New replies are no longer allowed.