How to get geo data from IP addresses within Elastic

We have log documents that contain IP addresses and this data is already saved in an Elastic index. Can we make use of a custom analyzer to take the IP Address and let us get the geographical data from the IP addresses?

I know there's a geoip filter in Logstash, but our data is already in Elastic. How do we create the lat and lng points from our pre-existing ip addresses?


You can define an ingest pipeline with a geoip processor and call this pipeline from the reindex API.

As you need to reindex.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.