Hi Community, Below is the logstash config . My objective is to get city,country,state based on geolocation. In input file i am putting geolocation. input { beats { port=> 5044 #codec => json } } filter { geoip { source => "[Geolocation]" database => "/home/aniket/GeoLite2-City.mmdb" …

[image] Aniket_Pant: So that means we can't use any elasticsearch enrich policy to get city,state,country using lat,long ? In a native way no, you can only get geo location information using the IP address, not the inverse. What you can do is to get that data elsewhere and store it in Elasti…

Discuss the Elastic Stack

Logstash geoip failure | IP was not found in the database

Elastic Stack Logstash

Aniket_Pant (kaal) July 16, 2024, 7:00pm 6

I have checked this case but I don't know what are the steps to get the required data

Topic		Replies	Views
_geoip_lookup_failure in Logstash pipeline using GeoLite2-City.mmdb Logstash	5	302	June 16, 2023
GeoIP issue on logstash conf file Logstash	12	1661	August 15, 2018
Issue with GeoIP location Logstash	5	1494	March 9, 2017
Encountering _geoip_lookup_failure within the IP address range 104.16.16.0/20 Logstash elastic-stack-alerting	13	198	April 7, 2024
Using geoip properly Logstash	2	306	July 23, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash geoip failure | IP was not found in the database

Related topics