# Filebeat + squid module GeoIP

**URL:** https://discuss.elastic.co/t/filebeat-squid-module-geoip/249176
**Category:** Beats
**Tags:** filebeat
**Created:** [September 18, 2020, 8:58pm UTC](https://discuss.elastic.co/t/filebeat-squid-module-geoip/249176 "2020-09-18T20:58:43Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![francescouk](https://avatars.discourse-cdn.com/v4/letter/f/7feea3/32.png) [@francescouk](https://discuss.elastic.co/u/francescouk)
#### Post date: [September 18, 2020, 8:58pm UTC](https://discuss.elastic.co/t/filebeat-squid-module-geoip/249176/1 "2020-09-18T20:58:44Z")

</div>

Hi there,

I´m trying to setup GeoIPs from internal, private IP addresses but no luck. Follow my filebeat.yml

```auto
processors:
- add_host_metadata:
       netinfo.enabled: true
       Geo:
         location: -23.499294, -46.824856
         continent_name: South America
         country_iso_code: BR
         region_name: Sao Paulo
         region_iso_code: BR-SP
         city_name: São Paulo
         name: Qintess
- add_fields:
       when.network.source.ip: [192.168.1.1/22] 
       fields:
         source.geo.location:
           lat: -23.499294
           lon: -46.824856
         source.geo.continent_name: South America
         source.geo.country_iso_code: BR
         source.geo.region_name: Sao Paulo
         source.geo.region_iso_code: BR-SP
         source.geo.city_name: São Paulo
         source.geo.name: Qintess
       target: ''
- add_fields:
       when.network.destination.ip: [192.168.1.1/22]       
       fields:
         destination.geo.location:
           lat: -23.499294
           lon: -46.824856
         destination.geo.continent_name: South America
         destination.geo.country_iso_code: BR
         destination.geo.region_name: Sao Paulo
         destination.geo.region_iso_code: BR-SP
         destination.geo.city_name: São Paulo
         destination.geo.name: Qintess
       target: ''

```

Can someone tell me if there´s any other settings I need to have?

Thanks in advance.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 16, 2020, 10:58pm UTC](https://discuss.elastic.co/t/filebeat-squid-module-geoip/249176/2 "2020-10-16T22:58:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.