How to target City Name as GEOIP Location?

Elastic Stack Logstash
1

I have a city name field and I want to visualize it on the map. I am wondering How I can achieve this because the GEOIP filter takes IP but I don't have an IP address.

geoip{
     source => "[NotifyEventAdvanceRequestModel][Card][City]"
     target = > "city_location"
}

I want to see the Transaction Amount against the city on the Map. But by default logstash takes it as string, not location.

2

There is nothing built into logstash to do that. You could use an http filter to send a request using the Nominatum /search API, although that feels like overkill. If you can find a list of city names and coordinates you could do it locally using a translate filter.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.