Logstash 2.1.0 Geoip Filter

If you get the error from Kibana, in the fields, you need to use "location" instead of "longitude" and "latitude". Below is my working config

	geoip {
		source => "IPV4_SRC_ADDR"
		target => "src_geoip"
		fields => ["country_code2", "country_name", "continent_code", "region_name", "real_region_name", "city_name", "postal_code", "timezone", "location"]
	}
1 Like