Geoip filter plugin does not handle spaces in key name

Good day,

New user here... I hope I am posting to the correct place. I wanted to report a bug in the Geoip filter plugin. It appears that it does not like a space in the key name.

Results in a _geoip_lookup_failure:
geoip {
source => "Source IP"
}

Parses just fine:
geoip {
source => "source_ip"
}

Thanks for your time.

Do you mind raising that over here so we can look into it? https://github.com/logstash-plugins/logstash-filter-geoip/issues

Thank you for the suggestion and link. Issue is opened here: https://github.com/logstash-plugins/logstash-filter-geoip/issues/138.

Have a great day.

1 Like

I would say, field names cannot contain spaces or is that just me?

It does not seem to be a problem elsewhere within ELK stack. If it is a design decision for geoip, then just state it in the documentation. Thanks for the feedback.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.