How to install/enable ingest-geoip and ingest-user-agent in ELK STACK 7.1


Anyone can help me solve?

Is their anyone has idea why I can't install ingest-geoip and ingest-user-agent in my newly installed ELK STACK 7.1 in Ubuntu 16.04 LTS?

Ran these:

	# sudo bin/elasticsearch-plugin install ingest-geoip
	# sudo bin/elasticsearch-plugin install ingest-user-agent

And got these ERROR:

A tool for managing installed elasticsearch plugins

list - Lists installed elasticsearch plugins
install - Install a plugin
remove - removes a plugin from Elasticsearch

Non-option arguments:

Option         Description
------         -----------
-h, --help     show help
-s, --silent   show minimal output
-v, --verbose  show verbose output

ERROR: Unknown plugin ingest-geoip
ERROR: Unknown plugin ingest-user-agent'

It's part of the default distribution so you don't have to install it anymore.


Ah okay, but how can i enable it? since I used these on my logstash.conf but, didn't reflect its data in my kibana available field.

geoip {
	source => "clientip"
useragent {
	source => "agent"

the geoip works, however the useragent didn't. Seems "agent" not available in kibana fields.

Solved it by replacing the agent. Thanks by the way.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.