Geolocation using packetbeat

Elastic Stack Beats
1

I am using geopoint filter in logstash and i am using packetbeat to send network logs to the elasticsearch through logstash.
Here is my logstash config file

filter
{
geoip {
source => "[server][ip]"
target => "[server][geo]"
}
geoip {
source => "[destination][ip]"
target => "[destination][geo]"
}
geoip {
source => "[source][ip]"
target => "[source][geo]"
}

geoip {
source => "[client][ip]"
target => "[client][geo]"
}
}
in elasticsearch i can see the field destination.geo.location destination.geo.city_name but i can't create the map

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.