Hints for use of Ingest pipeline? To map IP address to Region+City and never store IP address

Due to compliance with DPA we cannot store client IP addresses.
I want to on-the-fly map client IP address to its' Region+City and also at same time make sure the IP address is never stored in any document.
Looks like I should use Ingestion pipeline and ... hmm ... perhaps then some existing "processors"?
Anyone done this, or something similar and want to share some hints?

Use the geoip processor and then the remove processor on the ip field.

See GeoIP processor | Elasticsearch Guide [8.1] | Elastic and Remove processor | Elasticsearch Guide [8.1] | Elastic

hope that helps!

1 Like