How to install/enable ingest-geoip and ingest-user-agent in ELK STACK 7.1

Elastic Stack Elasticsearch
1

Hi,

Anyone can help me solve?

Is their anyone has idea why I can't install ingest-geoip and ingest-user-agent in my newly installed ELK STACK 7.1 in Ubuntu 16.04 LTS?

Ran these:

	# sudo bin/elasticsearch-plugin install ingest-geoip
	# sudo bin/elasticsearch-plugin install ingest-user-agent

And got these ERROR:

A tool for managing installed elasticsearch plugins

Commands
--------
list - Lists installed elasticsearch plugins
install - Install a plugin
remove - removes a plugin from Elasticsearch

Non-option arguments:
command

Option         Description
------         -----------
-h, --help     show help
-s, --silent   show minimal output
-v, --verbose  show verbose output

ERROR: Unknown plugin ingest-geoip
ERROR: Unknown plugin ingest-user-agent'
2

It's part of the default distribution so you don't have to install it anymore.

3

@dadoonet

Ah okay, but how can i enable it? since I used these on my logstash.conf but, didn't reflect its data in my kibana available field.

geoip {
	source => "clientip"
}
useragent {
	source => "agent"
}

the geoip works, however the useragent didn't. Seems "agent" not available in kibana fields.

4

Solved it by replacing the agent. Thanks by the way.