Elasticsearch with winlogbeat and geoip


I'm trying to enrich log data with geoip information from winlogbeat to elasticsearch but I cannot find how to enable/ enrich that data.

I tried to look for document https://www.elastic.co/guide/en/elasticsearch/reference/7.4/geoip-processor.html but couldn't enable geoip

Could you please help me to figure out why my log data is not enriched with geoip?

Many thanks!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.