Creating client location data for packetbeat


(Kennedy Kan) #1

I have been using packetbeat to collect network transfer packets data, however, I discover that there is a client location field, however, seems that there isn't any data coming out from that. Is there anyway that I can collect the data?


(ruflin) #2

Can you share some more details? What is your config? Which PB version are you using?


(Kennedy Kan) #3

I am just using the latest packetbeat version 1.2.3 and I did not chane my default config, just using elasticsearch as the default output


(Andrew Kroh) #4

Did you install the GeoLite city database at one of the default locations used by Packetbeat? https://www.elastic.co/guide/en/beats/packetbeat/1.2/configuration-shipper.html#_geoip_paths

Also client_location will only be populated with the client IP is a public IP address.


(system) #5

This topic was automatically closed after 21 days. New replies are no longer allowed.