GeoIP with JSON

The source to the geoip filter says to substitute the value of the [computer][ip] field for the name of the source. That is not what you want.

geoip {
    source => "[computer][ip]"
    target => "[GeoIP]"
}
1 Like