Hi, I have ELK Stack v 7.4.2, I get the client ip with %{IP:clientip} in grok filter.
I've already installed ip2proxy plugin in logstash.
I added this part to logstash filter:
ip2proxy { source => "clientip" }
but in kibana I got nothing.
What's the problem?
Thanks a lot
The fact that is_proxy is set to 0 tells you that it did not find the IP in the IP2Lite BIN database that you are using. In other words, it is working, it is just not a proxy IP.
1 Like
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.