Creating client location data for packetbeat

I have been using packetbeat to collect network transfer packets data, however, I discover that there is a client location field, however, seems that there isn't any data coming out from that. Is there anyway that I can collect the data?

Can you share some more details? What is your config? Which PB version are you using?

I am just using the latest packetbeat version 1.2.3 and I did not chane my default config, just using elasticsearch as the default output

Did you install the GeoLite city database at one of the default locations used by Packetbeat?

Also client_location will only be populated with the client IP is a public IP address.

This topic was automatically closed after 21 days. New replies are no longer allowed.