How to add customed geo location

Elastic Stack Logstash
1

Hi
Here is my log:

Nov 29 16:29:40 2015 10.248.8.39 KERNEL(H-2-H206-01@10.248.8.39): [4415406.544000] 6 8 0 0% Low 0 0% Low 0 0% Low 120437

This log from an AP from a building and I have it's coordinates.
The IP address is 10.248.8.39 and it's private network.
So I can't use geoip.
How to add a customed geo location?
Thanks!

2

So your goal is to manually hardcode specific lat/lon values for particular IP addresses or IP address patterns?

You can use Logstash to add en event field that Elasticsearch can parse into a field mapped as geo_point. See the geo_point documentation for your version of ES to see what that field needs to look like.

The mapping of the field is also important. Logstash's default index template will make sure the geoip.location field is mapped as geo_point. If you want another field name you'll have to update the template.

1 Like