# How can i set two geoip source fields?
**URL:** https://discuss.elastic.co/t/how-can-i-set-two-geoip-source-fields/143309
**Category:** Logstash
**Created:** [August 7, 2018, 11:22am UTC](https://discuss.elastic.co/t/how-can-i-set-two-geoip-source-fields/143309 "2018-08-07T11:22:46Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@med\_amine](https://discuss.elastic.co/u/med_amine)
#### Post date: [August 7, 2018, 11:22am UTC](https://discuss.elastic.co/t/how-can-i-set-two-geoip-source-fields/143309/1 "2018-08-07T11:22:46Z")
hello,
i have two geoip sources the first is "clientip" and the second is "clientip\_e"
so i use this syntax but nothing #it's error!!!
geoip{
source =\> {"clientip"
}
}
geoip{
source =\> {"clientip\_e"
}
}
how can i do ???
---
### Author:  [@A\_B](https://discuss.elastic.co/u/A_B)
#### Post date: [August 7, 2018, 11:35am UTC](https://discuss.elastic.co/t/how-can-i-set-two-geoip-source-fields/143309/2 "2018-08-07T11:35:06Z")
Hi @med_amine,
first, just FYI, it is much easier to read the config if you format it as _Preformated text_ 🙂
Do you get any error messages?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [August 7, 2018, 11:38am UTC](https://discuss.elastic.co/t/how-can-i-set-two-geoip-source-fields/143309/3 "2018-08-07T11:38:23Z")
> source =\> {"clientip"
> }
Remove the braces.
---
### Author:  [@med\_amine](https://discuss.elastic.co/u/med_amine)
#### Post date: [August 7, 2018, 11:56am UTC](https://discuss.elastic.co/t/how-can-i-set-two-geoip-source-fields/143309/4 "2018-08-07T11:56:53Z")
But i have two fields which are the sources ,so what is the syntax to set two sources : clentip and clientip\_e
---
### Author:  [@A\_B](https://discuss.elastic.co/u/A_B)
#### Post date: [August 7, 2018, 12:05pm UTC](https://discuss.elastic.co/t/how-can-i-set-two-geoip-source-fields/143309/5 "2018-08-07T12:05:20Z")
Try
```
geoip {
source => "clientip"
}
geoip {
source => "clientip_e"
}
```
Looks like you can only have one source per `geoip` filter [https://www.elastic.co/guide/en/logstash/6.3/plugins-filters-geoip.html#plugins-filters-geoip-source](https://www.elastic.co/guide/en/logstash/6.3/plugins-filters-geoip.html#plugins-filters-geoip-source)
If that does not work you can probably use a couple of `if`s
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [August 7, 2018, 12:11pm UTC](https://discuss.elastic.co/t/how-can-i-set-two-geoip-source-fields/143309/6 "2018-08-07T12:11:17Z")
But what is Logstash supposed to do with these fields? Will only one of them be populated at a time (and the parsed result should be stored in one field) or do you want it to always process both source fields and store the results in different fields?
---
### Author:  [@med\_amine](https://discuss.elastic.co/u/med_amine)
#### Post date: [August 7, 2018, 12:49pm UTC](https://discuss.elastic.co/t/how-can-i-set-two-geoip-source-fields/143309/7 "2018-08-07T12:49:30Z")
thks it turns right now !
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 4, 2018, 12:49pm UTC](https://discuss.elastic.co/t/how-can-i-set-two-geoip-source-fields/143309/8 "2018-09-04T12:49:34Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.