# Geoip with private networks fails with

**URL:** <https://discuss.elastic.co/t/geoip-with-private-networks-fails-with/205183>\
**Category:** Logstash\
**Created:** [October 25, 2019, 5:02am UTC](https://discuss.elastic.co/t/geoip-with-private-networks-fails-with/205183 "2019-10-25T05:02:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![aimarjg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aimarjg/32/50430_2.png) [@aimarjg](https://discuss.elastic.co/u/aimarjg)\
**Post date:** [October 25, 2019, 5:02am UTC](https://discuss.elastic.co/t/geoip-with-private-networks-fails-with/205183/1 "2019-10-25T05:02:05Z")

</div>

Hi,  
I'm having a trouble with mapping private IPs to their geo coordiantes, filter below always fails with error:  
`"reason"=>"failed to parse field [client.geo.location] of type [geo_point]", "caused_by"=>{"type"=>"parse_exception", "reason"=>"unsupported symbol [.] in geohash [50.9011484]", "caused_by"=>{"type"=>"illegal_argument_exception", "reason"=>"unsupported symbol [.] in geohash [50.9011484]"}}}}}}`

```
if [client][geo][ip] =~ /^10\.13\./ or [client][geo][ip] =~ /^10\.86\./ {
                                                mutate {
                                                        add_field => { "[client][geo][timezone]" => "Europe/Warsaw" }
                                                        add_field => { "[client][geo][country_name]" => "Poland" }
                                                        add_field => { "[client][geo][continent_code]" => "EU" }
                                                        add_field => { "[client][geo][country_code2]" => "PL" }
                                                        add_field => { "[client][geo][country_code3]" => "PL" }
                                                        add_field => { "[client][geo][location]" => { "lat: 50.9011484, lon: 15.8760857"}}
                                                        add_field => { "[client][geo][latitude]" => "50.9011484" }
                                                        add_field => { "[client][geo][longitude]" => "15.8760857"}
                                                }
                                        }

```

I believe that [client][geo][location] is malformatted, but I don't know what kind of format is expected to be honest. Could anyone gimmie a hint here? 🙂  
Thank you in advance!

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [October 25, 2019, 1:04pm UTC](https://discuss.elastic.co/t/geoip-with-private-networks-fails-with/205183/2 "2019-10-25T13:04:12Z")

</div>

Try

```
    mutate { add_field => { "[client][geo][location][lat]" => 50.9011484 } }
    mutate { add_field => { "[client][geo][location][lon]" => 15.8760857 } }
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 22, 2019, 1:04pm UTC](https://discuss.elastic.co/t/geoip-with-private-networks-fails-with/205183/3 "2019-11-22T13:04:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
