# Elastic Fleet - Add GeoData to winlog through Ingest Pipeline

**URL:** https://discuss.elastic.co/t/elastic-fleet-add-geodata-to-winlog-through-ingest-pipeline/343805
**Category:** Elasticsearch
**Tags:** ingest-pipeline
**Created:** [September 25, 2023, 7:56pm UTC](https://discuss.elastic.co/t/elastic-fleet-add-geodata-to-winlog-through-ingest-pipeline/343805 "2023-09-25T19:56:06Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Shane\_Martin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shane_martin/32/126003_2.png) [@Shane\_Martin](https://discuss.elastic.co/u/Shane_Martin)
#### Post date: [September 25, 2023, 7:56pm UTC](https://discuss.elastic.co/t/elastic-fleet-add-geodata-to-winlog-through-ingest-pipeline/343805/1 "2023-09-25T19:56:06Z")

</div>

Trying to add geo data based on the winlog.event\_data.destinationIp field. I'm trying to use the custom ingest pipeline in fleets / integration. Testing the pipeline with test data seems to work, but the geo fields in kibana discovery for winlog events are not their. Is there a special way to apply the custom pipeline for fleet / integration?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 23, 2023, 7:56pm UTC](https://discuss.elastic.co/t/elastic-fleet-add-geodata-to-winlog-through-ingest-pipeline/343805/2 "2023-10-23T19:56:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
