I am parsing firewall logs and I don't want logstash to try and do geo parsing. My firewall logs already have the geo information. How can I disable geo parsing so I stop getting _geoip_lookup_failure?
Logstash will only try to add any geo location information if you added a geoip filter in your logstash configuration.
You need to check your Logstash configuration and remove the geoip filter.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.