Geoip filter plugin does not handle spaces in key name

Elastic Stack Logstash
1

Good day,

New user here... I hope I am posting to the correct place. I wanted to report a bug in the Geoip filter plugin. It appears that it does not like a space in the key name.

Results in a _geoip_lookup_failure:
geoip {
source => "Source IP"
}

Parses just fine:
geoip {
source => "source_ip"
}

Thanks for your time.

2

Do you mind raising that over here so we can look into it? https://github.com/logstash-plugins/logstash-filter-geoip/issues

3

Thank you for the suggestion and link. Issue is opened here: https://github.com/logstash-plugins/logstash-filter-geoip/issues/138.

Have a great day.

1 Like
4

I would say, field names cannot contain spaces or is that just me?

5

It does not seem to be a problem elsewhere within ELK stack. If it is a design decision for geoip, then just state it in the documentation. Thanks for the feedback.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.