Hi, I want to try geoip functionnalities. I import with ELK logs from many active directory controllers. I want to match IP from that logs with a personal file. For example 10.12.x.x => research floor 1 or 10.15.x.x -> labs floor 6 I've found that I must use a filter in my logstash.conf filter { …

Geoip.ip and private ip file

warkolm (Mark Walkom) January 21, 2017, 8:31am 2

Have a look at Creating geoip data for internal networks

Topic		Replies	Views
Create Custom geoip database for Logstash 5.2 Logstash	21	8998	April 26, 2017
Logstash help with geoip mapping from csv file Logstash	5	1636	March 21, 2019
Logstash Setup with GeoIP Logstash	18	2340	October 9, 2019
Logstash query for IPs and GeoData Logstash	2	352	November 7, 2018
Help with Logstash filter and private geoip data Logstash	9	683	December 21, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Geoip.ip and private ip file

Related topics